Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: bhbeIp8j3oAG41CAdVYRZynkp1S8lCmfPy9W0hbE+2E=
Subject key identifier: 3E:8D:4B:E2:30:D6:91:EE:05:33:B4:11:AF:49:F3:1F:07:1B:15:35
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019E1FB57622AD0E9D6F56799BD41F47B9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 1099
Signing time: Wed 13 May 2026 05:00:46 +0000
Manifest this update: Wed 13 May 2026 05:00:46 +0000
Manifest next update: Thu 14 May 2026 05:00:46 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: BX98Vkk5JBMcmp0FvRrUvRloU25R2eZqhlGTPbwbW+Q=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:76:22:ad:0e:9d:6f:56:79:9b:d4:1f:47:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: May 13 05:00:46 2026 GMT
Not After : May 14 05:00:46 2026 GMT
Subject: CN=3e8d4be230d691ee0533b411af49f31f071b1535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:3a:88:a0:1c:c7:16:6d:55:64:ed:55:25:
5c:18:c9:b5:14:6d:77:e6:6d:8d:7b:1d:ae:a0:4f:
d8:63:a9:90:ab:24:b8:a2:a4:95:3c:20:b1:04:6e:
bf:1f:1b:74:91:d7:90:49:b1:48:c6:f9:ea:1e:7e:
1b:55:8c:f0:be:ab:ab:1f:1d:19:7c:cf:ac:0b:22:
70:15:57:88:9b:6b:15:3d:48:e6:64:61:c5:7e:30:
73:ec:3b:0a:2a:a3:0f:c4:77:37:c7:af:b1:1d:bb:
9f:9e:75:26:95:23:09:5d:e3:9d:09:78:5d:f1:21:
39:3f:d8:31:4d:97:fb:91:45:75:05:0a:2b:0d:cd:
a2:b4:e6:04:a3:ed:d0:1b:c0:b5:8f:6c:05:a9:cb:
34:8d:78:a7:78:75:af:04:9d:98:fb:ab:87:14:48:
c3:63:a7:60:d8:d2:3b:46:c4:97:23:ed:ab:ae:ce:
66:59:23:8f:13:b9:cb:0a:0f:6a:fb:b6:42:2b:cb:
55:2e:e6:21:8a:7f:22:c9:6f:07:c3:29:e9:57:2a:
5a:26:51:15:66:7e:6b:4a:38:1a:b3:22:92:de:65:
55:31:c2:73:23:fe:49:10:de:db:cf:17:bb:1d:e7:
f9:61:7b:d3:20:85:62:89:f1:4e:2f:74:da:c1:c1:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:4B:E2:30:D6:91:EE:05:33:B4:11:AF:49:F3:1F:07:1B:15:35
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:9d:d6:60:2a:db:e7:7a:53:70:94:2d:5e:69:29:f7:1c:
7f:68:a9:55:5b:cd:52:15:4f:ba:6e:d9:4e:ca:00:0a:c5:21:
57:c5:0f:0b:6f:6b:bb:7a:48:eb:d6:3e:0c:5b:b6:19:0d:b7:
21:26:c5:6b:72:23:ee:36:36:3a:65:ef:1b:05:70:82:be:e6:
74:ac:c7:8c:0c:e5:4f:02:10:da:6a:dc:78:c5:1a:39:e1:92:
ee:f9:07:2c:aa:1d:58:cd:91:d0:00:76:ee:b8:a7:6e:71:5d:
42:29:90:b5:5c:c8:e5:7a:2b:bc:74:79:78:fe:5d:c5:10:76:
f5:3d:b5:1e:e2:b5:1c:40:db:db:a0:ec:20:b4:fd:7e:1d:38:
90:d2:88:43:1d:c1:3f:90:0b:0e:d6:68:a3:47:af:f8:af:72:
22:53:ce:ed:99:ae:10:0d:d1:b8:b4:f5:36:ae:48:a9:cb:86:
53:e4:37:92:af:60:1e:6b:8d:68:40:92:f6:e3:c2:cd:f6:17:
01:fb:2f:3d:58:6a:72:5d:67:1e:80:e8:e2:15:b8:6a:0d:66:
96:0c:0e:f3:3a:98:3e:44:7d:46:e5:84:0d:3b:35:67:1b:9e:
e3:74:2e:d4:18:74:ba:da:2b:1d:20:e6:07:54:06:4e:6a:ca:
bb:a2:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:02 2026 by rpki-client