Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: rQUFzo3Do1xHAN7M4hlfhB+OSHS/gGEwkOeGSGqxN80=
Subject key identifier: 6B:3F:AA:04:68:16:20:95:76:57:14:DB:F7:4F:D4:85:9F:89:74:94
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019E1F7E7E4C624ED732E6AEC11856CDAA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 17F8
Signing time: Wed 13 May 2026 04:00:43 +0000
Manifest this update: Wed 13 May 2026 04:00:43 +0000
Manifest next update: Thu 14 May 2026 04:00:43 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: E+OWxY/4nlbV8jQbWHdfW7syQLxfFJF6cD+ASc7a8Ww=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:7e:4c:62:4e:d7:32:e6:ae:c1:18:56:cd:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: May 13 04:00:43 2026 GMT
Not After : May 14 04:00:43 2026 GMT
Subject: CN=6b3faa0468162095765714dbf74fd4859f897494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:dc:30:55:ea:5b:ab:cd:4b:20:74:a0:d7:
74:16:2e:8a:b4:42:45:4f:0b:c3:79:0c:d5:9f:b0:
fb:61:56:41:2c:61:85:47:e4:c5:f7:e9:ce:bd:ee:
87:5f:e0:c4:ce:3d:40:a1:55:14:13:d4:41:e2:f3:
0c:24:53:c7:cc:4f:ce:ab:aa:36:2d:8d:8b:02:38:
ec:55:67:8f:ca:d0:0b:fb:2f:ff:2b:a5:b9:de:8f:
cb:5a:52:a8:74:ea:4b:2f:c3:cf:37:40:e7:34:49:
29:f8:43:3b:27:f8:82:d2:fb:6f:b6:c0:f8:c3:27:
64:42:7a:3c:c4:c1:ba:b3:b5:41:f1:82:c5:12:bd:
39:3e:72:b5:0b:54:9c:ce:a5:e9:06:7a:7c:98:a3:
e7:87:2f:68:48:2b:a1:72:a4:8d:bd:7a:85:b0:d4:
23:ff:d7:24:f0:a8:04:8c:0a:a9:ed:6a:33:06:19:
6a:91:a3:d3:cd:81:8c:49:45:79:94:06:c8:a5:f7:
f4:12:a2:27:04:8c:a2:22:c6:56:73:d0:dd:b9:1e:
9f:82:16:be:a0:60:cb:a5:a6:5f:10:45:8d:b8:b3:
df:80:3b:66:02:3a:ab:a1:7f:cd:ee:bf:0e:a6:0c:
c6:0e:f5:2e:5d:86:e3:02:5b:4a:a3:f9:09:33:1f:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:AA:04:68:16:20:95:76:57:14:DB:F7:4F:D4:85:9F:89:74:94
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:90:c2:79:19:61:9a:6c:5c:fb:72:cc:63:e5:24:7e:1d:
51:d9:63:9e:8b:97:67:70:5e:e1:4a:a2:fe:b0:60:2b:12:b9:
09:ec:20:37:de:db:93:c2:f3:ea:48:d8:59:9b:3c:2f:31:15:
47:b1:c8:1a:9c:f0:71:d8:88:c1:45:3f:33:d6:be:c7:ef:d1:
ec:a7:be:9a:a9:25:44:81:a7:6a:fe:81:40:f2:71:2e:38:da:
b3:50:16:e0:27:4a:cd:a6:89:64:80:3d:f2:12:a8:ca:b4:9b:
56:4f:9a:1e:a5:f5:1c:6b:95:f1:ee:2c:7e:f0:4d:85:33:aa:
7d:bc:d0:1b:83:0d:6e:a3:fd:b7:2f:69:fb:28:06:c7:3f:66:
0b:59:df:96:90:06:ef:34:40:45:a5:8f:08:26:fd:97:27:47:
5e:f7:2f:a4:ad:7a:bb:52:33:24:eb:ea:88:47:5f:34:97:b9:
d8:c5:a8:ab:ed:8c:34:15:f7:46:73:8d:83:b0:7c:24:f1:3d:
ce:23:9f:e1:fe:35:72:80:5d:c7:cb:cd:5a:9d:c1:52:53:34:
6b:4f:84:14:cc:34:f9:f1:24:a1:99:77:7e:3e:a8:06:c9:0d:
1d:b1:9b:b5:2a:50:4e:c8:18:d2:41:72:82:34:b1:b3:0c:93:
52:5e:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:09 2026 by rpki-client