Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: BL6NJPrtCtW43UdJidJ4CjJh4evNSeE9d8f5lBbAoaI=
Subject key identifier: 4C:37:AB:5E:BA:97:34:40:93:15:AF:D9:18:B1:55:A3:1D:B7:BC:94
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019E1EDA79CE757D23950BFA9B76D3525A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 01:01:34 +0000
Manifest this update: Wed 13 May 2026 01:01:34 +0000
Manifest next update: Thu 14 May 2026 01:01:34 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: nq2VjY7WDX3WDZpSK5c6NHPytD6sdprPxfh7eGAMZqI=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:79:ce:75:7d:23:95:0b:fa:9b:76:d3:52:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: May 13 01:01:34 2026 GMT
Not After : May 14 01:01:34 2026 GMT
Subject: CN=4c37ab5eba9734409315afd918b155a31db7bc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:35:85:1a:ae:85:c0:e5:35:76:ae:ff:09:
0a:e1:5b:7b:93:14:9e:a1:12:3d:98:cf:63:70:af:
2b:e9:d7:c3:06:d4:dc:c3:20:6a:7e:51:45:ba:b8:
85:d1:7f:01:c7:69:75:e8:c7:f5:49:9c:c9:c2:42:
c2:82:f4:96:e3:c2:6d:ed:12:57:7c:78:46:82:ff:
fa:98:46:ff:d6:44:b2:7d:74:39:ef:a8:6f:7c:3a:
24:5f:34:17:06:3c:8c:53:8a:48:2b:9c:04:b5:14:
aa:00:c6:83:c5:14:12:a6:e7:2c:88:39:2b:05:02:
e7:b7:14:55:b0:f1:b8:74:7c:0f:fd:89:c0:8e:61:
cc:e7:cf:2f:be:6e:bb:58:6e:a1:77:29:5e:1f:87:
49:52:b8:5b:3f:f7:ed:16:c5:50:0f:7e:0d:72:22:
1e:7d:10:c1:ec:b9:fd:c0:d6:8e:04:2f:40:2b:8a:
d4:34:2a:4d:c1:9e:0c:e1:59:dc:16:c8:af:8b:7f:
dd:e7:93:a4:73:b0:5d:05:45:6f:aa:a0:d9:d9:f9:
ce:c9:73:84:b3:aa:b6:05:5c:1d:25:cb:9e:b3:cb:
5d:1c:48:09:84:fb:33:53:6b:46:ee:2c:63:84:1a:
d2:1e:b1:5d:89:ca:5f:d1:d2:0a:58:78:6d:08:75:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:AB:5E:BA:97:34:40:93:15:AF:D9:18:B1:55:A3:1D:B7:BC:94
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:29:3e:81:b5:85:95:4b:7a:66:1f:27:f9:62:78:38:b7:ec:
2c:0c:a1:01:cc:d4:c6:83:51:e4:a2:72:2f:c9:c9:b6:69:57:
9a:17:a6:11:c0:3a:d4:0a:69:4c:0e:2f:e2:19:fe:9b:15:65:
1e:51:a9:14:68:39:5b:3f:13:65:82:e5:3f:75:12:84:b3:7d:
f3:08:55:3e:02:44:ee:5e:53:44:ef:c4:e4:56:82:1f:b3:9e:
3d:6f:fd:c8:33:ec:58:e0:5f:96:3e:a7:a0:86:8b:af:8e:34:
d8:41:fa:51:c7:11:e1:88:e3:7e:7a:60:cd:84:2c:be:dd:8e:
7c:42:3b:de:a9:6d:72:03:bf:44:ef:71:4b:ae:62:1e:42:1f:
0d:8a:ca:da:24:0f:25:92:b1:94:90:93:e7:54:e7:64:5e:f0:
32:6f:04:72:d0:ac:55:d0:5d:62:b0:ee:56:80:24:8c:9b:90:
90:81:d2:53:f4:71:ef:50:3f:22:48:7b:90:c2:ee:42:18:03:
66:fb:aa:f5:38:1a:0d:54:db:8c:fd:31:37:d4:a0:f2:0f:61:
10:1f:30:97:b4:be:78:0c:53:1e:24:e8:6a:69:ee:aa:9e:35:
0a:72:35:2a:3e:76:83:22:66:6d:cc:b1:28:a4:19:55:c8:bc:
15:e8:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:55 2026 by rpki-client