Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: OGf+YHv4WUzK1DOvoHXYSq7D1RwCy77lwDpXoGH0MPg=
Subject key identifier: DB:F2:49:86:23:93:7A:A6:56:31:95:7C:C1:64:47:EE:4D:E0:4E:D6
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019E1EDA2F9922350F79AE086BCB792FBACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 1128
Signing time: Wed 13 May 2026 01:01:15 +0000
Manifest this update: Wed 13 May 2026 01:01:15 +0000
Manifest next update: Thu 14 May 2026 01:01:15 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: RH1j8wMi2Uj4vJonI29wDyUeQAOJZuJ0u1xgqLWc/yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:2f:99:22:35:0f:79:ae:08:6b:cb:79:2f:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: May 13 01:01:15 2026 GMT
Not After : May 14 01:01:15 2026 GMT
Subject: CN=dbf2498623937aa65631957cc16447ee4de04ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:fe:1f:32:38:3c:90:5d:82:05:c1:56:75:
f0:2f:ea:35:14:5c:da:11:44:08:06:26:0a:c0:61:
5e:ba:65:8a:f9:04:41:54:e1:d8:f5:2c:03:12:f6:
04:2a:4a:b5:e6:41:16:2c:d1:3d:44:8c:0b:76:dd:
d3:16:63:7a:e9:0e:14:99:ad:41:3e:37:3c:52:91:
10:2c:d5:71:a7:45:bf:fe:b7:8b:43:fc:c6:a5:2c:
83:45:a6:0f:b8:99:da:6d:3e:a4:fa:6f:fd:ed:96:
35:d7:3e:d4:8c:95:a7:46:2a:ff:82:b2:14:c8:ac:
15:6b:0f:82:8f:21:e2:18:ac:24:81:4c:5d:72:84:
77:5e:e6:ff:db:fe:75:24:fa:4e:16:be:bc:96:49:
a5:0d:e4:ed:76:2b:4f:31:5e:a2:07:a9:e6:72:c0:
f3:01:98:d3:19:35:4e:f7:14:ec:45:60:be:fb:1b:
26:2f:1f:8a:48:1f:51:1e:a7:d6:00:50:c4:52:42:
22:29:b7:3b:16:16:e8:30:df:1a:be:66:75:83:d9:
36:27:91:f1:71:39:d8:cb:03:19:9e:a9:ce:70:b8:
45:f6:e8:4f:34:62:6a:bb:67:de:dc:90:09:09:04:
44:e4:be:22:a6:e2:4e:b7:a6:7f:da:71:1d:5c:30:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:49:86:23:93:7A:A6:56:31:95:7C:C1:64:47:EE:4D:E0:4E:D6
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:04:68:1c:3e:82:4f:ef:fa:88:ca:a1:4d:85:66:5d:64:ed:
be:bf:cf:8c:32:ec:8b:23:28:d3:14:21:ec:e8:63:00:f4:bb:
68:f0:29:aa:a5:e6:51:dd:56:74:ee:75:7d:21:fd:13:e0:68:
81:76:0c:2f:4b:84:3b:d2:aa:6f:2a:50:f0:9b:17:c1:91:58:
7b:9c:ab:83:d2:94:42:6a:59:f5:d4:18:93:35:ee:52:64:b1:
20:ab:91:99:b3:57:c0:64:6a:d8:d0:a7:77:20:45:37:99:91:
7b:f6:c9:18:ed:a5:0c:0d:eb:6d:70:38:79:02:8d:73:88:97:
2c:e2:ca:6a:dd:01:18:8e:50:79:d5:fd:8e:a5:7a:b0:75:d4:
b2:84:ed:20:ca:18:71:b1:f1:1c:94:41:5b:a1:c7:e3:36:91:
54:6e:ff:60:aa:99:bd:85:8f:9d:c3:6f:f7:2b:b6:23:d7:41:
58:59:51:93:08:0a:16:b3:39:ef:8f:18:8a:d1:4b:98:c2:c8:
c9:5b:cd:a3:52:69:e5:3a:ff:8d:2e:70:ef:fe:2d:d7:52:90:
92:54:45:53:c5:c9:db:57:5c:ed:ad:42:7e:5f:08:f5:73:f4:
94:61:d6:fe:78:c7:b1:25:ed:5c:ec:aa:59:3e:26:f3:4b:50:
33:8c:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:35 2026 by rpki-client