Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: nVwWKgAL7e47C3orSVYBI8JfpBNMYrJ2t6caKXgFLaE=
Subject key identifier: 40:A6:DF:34:B0:95:B5:51:65:A7:FD:9F:E3:B1:F5:DE:CD:E0:BD:B1
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019E1F7E9262E3CB66DB7BC723348BDBBDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 1644
Signing time: Wed 13 May 2026 04:00:48 +0000
Manifest this update: Wed 13 May 2026 04:00:48 +0000
Manifest next update: Thu 14 May 2026 04:00:48 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: g9pszX3uoN77TdYBkng6LXa/rh2lzf1XHkKroaLL4zM=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:92:62:e3:cb:66:db:7b:c7:23:34:8b:db:bd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: May 13 04:00:48 2026 GMT
Not After : May 14 04:00:48 2026 GMT
Subject: CN=40a6df34b095b55165a7fd9fe3b1f5decde0bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:b9:aa:93:9c:4e:29:ed:51:f1:13:02:20:
01:9a:a3:f5:43:25:cb:24:b2:c7:39:d9:2c:6c:b2:
b7:2a:79:d8:1d:c0:7f:d7:c9:1d:26:04:a0:9c:60:
a4:52:1c:af:96:22:16:21:31:9d:95:ae:43:ec:88:
ac:38:34:e5:5f:3f:c0:6b:bd:89:06:98:de:2f:17:
c5:df:d1:90:4a:b8:89:14:75:b2:8b:c2:2d:60:9f:
a0:48:37:f7:bf:91:d3:82:90:ed:56:95:45:87:c4:
52:98:d2:2d:52:0e:9c:52:44:ae:27:95:cc:aa:38:
d5:62:15:95:c7:75:a0:45:47:46:4a:1b:f2:c8:92:
67:0a:e7:8c:24:1b:85:f1:50:15:9e:f3:1e:a3:f9:
70:7e:77:a9:cb:68:d0:d5:b1:56:d3:03:b3:b6:64:
e2:24:11:31:21:7b:1c:4c:89:7d:23:4b:3a:03:d9:
cc:cd:92:ef:d4:73:c1:6b:04:5e:b4:df:57:a0:89:
72:e1:76:b8:77:bd:be:80:ad:74:62:80:10:02:c0:
fa:79:3f:5b:79:a3:8b:2e:3b:95:98:f0:07:7a:49:
f0:bf:c6:33:4d:ba:ef:c6:37:5a:2f:44:e0:b5:93:
77:04:4f:e0:1a:28:c0:31:60:19:f7:b7:1d:b4:d4:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:DF:34:B0:95:B5:51:65:A7:FD:9F:E3:B1:F5:DE:CD:E0:BD:B1
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:92:b1:22:bf:53:6d:c9:68:9b:e6:6f:a8:c2:08:99:0d:
be:6d:ff:af:48:2e:79:8b:de:0b:72:23:f3:93:07:df:37:a9:
b9:91:84:41:cc:9c:08:a3:d5:80:c8:4e:3f:d0:56:a9:0a:cc:
c5:99:1a:d6:79:07:81:05:9d:a2:19:8f:bf:70:0f:ee:06:37:
75:49:e5:e5:b3:4d:e7:d6:be:56:1b:da:91:b7:52:87:c6:4d:
0f:8e:6d:44:78:9c:1c:2b:fa:e8:6a:03:9a:e8:d7:48:fd:24:
9f:d7:38:18:19:ba:1f:b1:e1:0d:0f:e1:31:f8:db:a5:3c:ce:
ef:cf:ee:a3:d6:d5:24:dc:71:df:32:eb:82:d1:9b:b1:b1:69:
b5:48:82:bc:f7:71:a8:bd:60:7d:7f:fc:9f:14:a0:b4:35:5d:
68:26:1e:6d:6c:41:d0:f8:b9:27:e2:59:f0:b1:ea:e2:bc:f3:
fa:5c:0f:48:ba:64:1e:b9:6e:fa:30:03:0e:07:61:1d:72:b7:
24:26:7a:f3:65:2a:aa:a0:15:03:6e:ed:58:1c:f6:be:14:61:
db:25:f0:74:9c:df:0f:e9:c0:d7:ae:ef:74:17:e4:68:01:14:
df:69:36:d5:1e:ac:c3:c8:79:00:3f:e2:23:47:28:e8:2c:c9:
19:e3:5a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffpJi48tm23vHIzSL273aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk
NDU0ZWYwHhcNMjYwNTEzMDQwMDQ4WhcNMjYwNTE0MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg0MGE2ZGYzNGIwOTViNTUxNjVhN2ZkOWZlM2IxZjVkZWNkZTBiZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWS5qpOcTintUfETAiABmqP1QyXL
JLLHOdksbLK3KnnYHcB/18kdJgSgnGCkUhyvliIWITGdla5D7IisODTlXz/Aa72J
BpjeLxfF39GQSriJFHWyi8ItYJ+gSDf3v5HTgpDtVpVFh8RSmNItUg6cUkSuJ5XM
qjjVYhWVx3WgRUdGShvyyJJnCueMJBuF8VAVnvMeo/lwfnepy2jQ1bFW0wOztmTi
JBExIXscTIl9I0s6A9nMzZLv1HPBawRetN9XoIly4Xa4d72+gK10YoAQAsD6eT9b
eaOLLjuVmPAHeknwv8YzTbrvxjdaL0TgtZN3BE/gGijAMWAZ97cdtNQR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECm3zSwlbVRZaf9n+Ox9d7N4L2xMB8GA1UdIwQY
MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt
N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4
LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqKSsSK/
U23JaJvmb6jCCJkNvm3/r0gueYveC3Ij85MH3zepuZGEQcycCKPVgMhOP9BWqQrM
xZka1nkHgQWdohmPv3AP7gY3dUnl5bNN59a+VhvakbdSh8ZND45tRHicHCv66GoD
mujXSP0kn9c4GBm6H7HhDQ/hMfjbpTzO78/uo9bVJNxx3zLrgtGbsbFptUiCvPdx
qL1gfX/8nxSgtDVdaCYebWxB0Pi5J+JZ8LHq4rzz+lwPSLpkHrlu+jADDgdhHXK3
JCZ682UqqqAVA27tWBz2vhRh2yXwdJzfD+nA167vdBfkaAEU32k21R6sw8h5AD/i
I0co6CzJGeNaTg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:51:35 2026 by rpki-client