Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: OtP5KKtihVhhx+tPMRU+KWhQl0/2PQmijtdwf8Qsu7w=
Subject key identifier: 37:B2:74:CD:2A:54:1E:CF:A3:17:F7:EC:7C:EE:C2:0C:C2:50:17:69
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 019E1D22C67BB60B4DF6489A04CA1F0673AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 0617
Signing time: Tue 12 May 2026 17:01:18 +0000
Manifest this update: Tue 12 May 2026 17:01:18 +0000
Manifest next update: Wed 13 May 2026 17:01:18 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: a8LWdlxonL01E3brCvcwAN8JkAcMluqze0I2RUH/ebs=)
2: iWvUwAU_qvWcuMvoIuoO-qPVv9c.roa (hash: FGFkjOVAlseZE4i4Gp+aJPkMH2fpBKQOFk0SOsvRbNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c6:7b:b6:0b:4d:f6:48:9a:04:ca:1f:06:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: May 12 17:01:18 2026 GMT
Not After : May 13 17:01:18 2026 GMT
Subject: CN=37b274cd2a541ecfa317f7ec7ceec20cc2501769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:18:34:24:8d:02:15:8a:21:21:51:d8:84:
7f:dd:6f:68:2a:af:bf:d3:3c:29:09:af:99:f1:b4:
35:a5:ef:80:ca:c2:c0:55:43:cd:17:e1:58:5f:11:
93:20:91:48:5b:de:30:3e:53:9e:18:d8:4e:ed:ad:
b8:b6:51:4e:2c:30:09:fa:80:87:42:d2:a2:28:b1:
3a:a5:aa:2b:a6:1c:98:5b:f7:56:4d:f7:89:ba:17:
32:da:23:dd:a5:f4:4b:eb:59:be:5e:74:a1:08:97:
66:fd:d6:38:10:95:5c:93:a2:ea:bf:78:17:6d:6d:
78:d9:3e:5c:f0:55:0a:4f:43:72:e8:47:27:ab:0f:
a6:d0:58:0d:2b:3a:d6:18:a0:a8:b0:70:01:64:74:
86:b3:3a:e4:ed:8b:4d:60:d8:24:8d:c6:ed:13:d6:
7c:1a:9d:d5:c0:e4:fb:a6:d1:9a:63:d6:95:7a:95:
0a:d0:0c:bf:e1:24:01:4d:8e:50:e7:c8:7c:ca:80:
5a:af:83:25:57:5e:68:a2:84:fe:7d:7e:f9:02:3a:
56:22:95:f2:73:77:a8:f8:db:dd:a2:3b:5a:95:46:
3d:47:a6:3b:fa:15:e7:d7:e4:c7:8c:d0:71:7a:17:
9a:25:7d:4b:8b:c5:8e:7c:13:dc:68:ec:37:24:00:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B2:74:CD:2A:54:1E:CF:A3:17:F7:EC:7C:EE:C2:0C:C2:50:17:69
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:b3:f0:69:6f:f3:9c:81:3f:d3:4a:da:57:6d:21:73:4a:
11:e2:e3:9a:38:06:4c:e8:24:d8:20:51:16:a4:9c:35:3b:01:
af:67:f8:d6:63:46:46:8d:b1:59:36:40:3a:18:2e:9f:a5:97:
91:5e:1e:35:85:af:e4:20:c2:ac:d3:34:06:f5:4b:db:23:56:
65:d7:fa:1b:f7:36:88:5f:ce:20:ec:ac:02:25:77:97:62:81:
be:f8:e4:48:92:b6:4b:ba:8e:54:b1:de:4d:fc:f3:77:31:6c:
db:bf:bc:95:60:91:73:dd:75:14:5d:24:7a:73:67:53:0a:d3:
ad:b6:5c:01:00:44:f4:dc:60:97:d8:e6:3c:ae:e2:6d:4b:87:
6c:14:55:b3:80:ff:e6:91:3d:46:bb:e6:4d:f3:f2:ba:bb:7c:
9e:83:29:5e:2d:a8:a2:36:ad:e6:46:2b:79:c3:6a:86:2d:2f:
fc:fc:7b:79:9e:f0:da:db:97:6e:f7:fe:44:8d:af:cf:54:c8:
53:cd:66:d3:f4:54:0e:e6:d9:fc:4d:56:b1:db:4a:95:6d:2f:
fb:2e:12:2b:da:62:7c:78:7f:8d:bf:a2:a9:2c:da:56:2a:8b:
b4:6d:74:72:59:30:7d:6e:f4:b2:1b:c2:be:ef:4d:66:39:49:
ac:fa:df:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIsZ7tgtN9kiaBMofBnOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj
ODg2NTYwHhcNMjYwNTEyMTcwMTE4WhcNMjYwNTEzMTcwMTE4WjAzMTEwLwYDVQQD
EygzN2IyNzRjZDJhNTQxZWNmYTMxN2Y3ZWM3Y2VlYzIwY2MyNTAxNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO0YNCSNAhWKISFR2IR/3W9oKq+/
0zwpCa+Z8bQ1pe+AysLAVUPNF+FYXxGTIJFIW94wPlOeGNhO7a24tlFOLDAJ+oCH
QtKiKLE6paorphyYW/dWTfeJuhcy2iPdpfRL61m+XnShCJdm/dY4EJVck6Lqv3gX
bW142T5c8FUKT0Ny6Ecnqw+m0FgNKzrWGKCosHABZHSGszrk7YtNYNgkjcbtE9Z8
Gp3VwOT7ptGaY9aVepUK0Ay/4SQBTY5Q58h8yoBar4MlV15oooT+fX75AjpWIpXy
c3eo+NvdojtalUY9R6Y7+hXn1+THjNBxeheaJX1Li8WOfBPcaOw3JAAt6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeydM0qVB7Poxf37HzuwgzCUBdpMB8GA1UdIwQY
MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt
NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0
LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOCz8Glv
85yBP9NK2ldtIXNKEeLjmjgGTOgk2CBRFqScNTsBr2f41mNGRo2xWTZAOhgun6WX
kV4eNYWv5CDCrNM0BvVL2yNWZdf6G/c2iF/OIOysAiV3l2KBvvjkSJK2S7qOVLHe
TfzzdzFs27+8lWCRc911FF0kenNnUwrTrbZcAQBE9Nxgl9jmPK7ibUuHbBRVs4D/
5pE9RrvmTfPyurt8noMpXi2oojat5kYrecNqhi0v/Px7eZ7w2tuXbvf+RI2vz1TI
U81m0/RUDubZ/E1WsdtKlW0v+y4SK9pifHh/jb+iqSzaViqLtG10clkwfW70shvC
vu9NZjlJrPrfiA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:21:26 2026 by rpki-client