Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: 6vMlqeI0nuvn24zJtGSVziCtocINhSS2qwozVFMUUOM=
Subject key identifier: A8:A1:DF:AC:FE:5F:48:AA:B2:D2:FD:21:82:6A:28:D7:8E:38:59:68
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019E1D90C7CD0D26AEED91250C9F66B39B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 120A
Signing time: Tue 12 May 2026 19:01:27 +0000
Manifest this update: Tue 12 May 2026 19:01:27 +0000
Manifest next update: Wed 13 May 2026 19:01:27 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: PRNu1SLNYNe9SpZrX0iqQHShnTO1F9tSf7K2JxUIFeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c7:cd:0d:26:ae:ed:91:25:0c:9f:66:b3:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: May 12 19:01:27 2026 GMT
Not After : May 13 19:01:27 2026 GMT
Subject: CN=a8a1dfacfe5f48aab2d2fd21826a28d78e385968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:24:22:41:87:c6:16:27:8e:13:fe:fc:b6:
a8:6c:45:38:c7:91:a2:da:ad:05:eb:38:32:be:93:
ae:59:bd:26:af:e9:4c:67:55:5b:2d:f7:2b:6d:6c:
12:9a:f9:dc:5b:b6:61:82:77:3c:eb:cc:94:c7:5c:
7c:f6:1a:bf:cf:4f:25:a3:76:74:e8:29:6d:ce:45:
58:10:42:e9:1c:11:b3:81:ba:45:8e:93:93:8a:fe:
a9:2d:47:2a:2a:11:3b:6f:41:f1:f4:96:b0:d4:90:
95:c0:8d:d9:60:e5:45:48:46:30:35:84:63:36:86:
e2:13:22:81:d7:af:d5:eb:e5:bb:5b:3d:ba:dd:96:
fe:0a:6d:20:b6:07:f6:39:d7:9a:14:bc:68:a2:ed:
c3:51:4b:ca:a5:60:a0:67:8f:fd:4b:dc:91:c3:69:
2e:cb:80:05:6f:3d:3f:2a:da:0a:e0:ae:41:69:e5:
f1:ce:50:89:ec:75:e7:bf:70:d3:82:91:21:a5:ec:
b0:1e:ad:b8:4b:2f:43:e6:2e:86:32:ba:fe:9a:ca:
b7:6e:34:ff:e3:58:10:c9:eb:9e:c1:1e:ad:72:6f:
c7:7f:16:66:0d:c9:5f:0f:20:cd:4c:e0:1f:30:7e:
df:93:ce:f5:c3:80:03:db:55:52:58:09:ec:3d:81:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:DF:AC:FE:5F:48:AA:B2:D2:FD:21:82:6A:28:D7:8E:38:59:68
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:0e:8d:2e:a4:2a:e6:33:60:ce:02:51:4e:a8:dd:8d:b0:
e8:7a:87:2f:ff:5d:5a:48:f7:a3:8f:4c:a3:c3:be:fe:ab:86:
e5:a7:fe:57:01:58:46:ce:f5:89:7c:63:ff:12:ba:d2:30:94:
a6:5a:32:6b:d7:52:0f:ca:2b:59:0c:29:da:b8:25:07:e7:49:
21:f1:31:45:2c:f4:53:25:d6:04:1a:b8:de:69:6c:b8:bc:db:
97:01:a3:b0:0d:ba:00:36:e4:bd:27:f5:56:f4:ea:b0:d7:fe:
32:ec:c0:c2:52:1f:8c:bb:1a:d5:6c:d6:38:5d:21:e6:5a:3d:
ed:47:f5:6b:1d:3e:ab:77:89:29:33:18:5d:fd:ca:3b:d3:30:
69:9a:ca:49:21:24:d1:51:83:51:0e:d6:b6:43:a3:93:96:8b:
33:47:63:e7:d2:df:1c:d2:61:fd:1c:3b:f1:87:2a:4a:f0:5d:
56:c3:22:3e:1b:cd:3d:e9:38:27:25:74:fe:a0:17:dc:46:1f:
82:c6:2b:64:e6:6a:b5:d2:81:e9:45:ca:63:e8:9e:8d:6e:0e:
73:de:1b:4f:a9:39:a0:a6:3d:2d:55:a1:3c:03:fa:b1:e6:bd:
40:9f:ac:14:6c:7f:71:59:f1:c4:18:cd:96:69:64:37:93:d8:
b8:5e:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:17 2026 by rpki-client