Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: 88WWG3+Qtws5ef9EF3ACIsOuxcSuK/dsCFkG9hmiZPI=
Subject key identifier: 9D:ED:20:F7:4C:31:3D:F7:3E:01:B8:2D:33:31:5A:09:1E:44:CA:64
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019E1CEBDF119F0725801111B6AA76AFA6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 16:01:20 +0000
Manifest this update: Tue 12 May 2026 16:01:20 +0000
Manifest next update: Wed 13 May 2026 16:01:20 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: 5+5ZvKPQZ1fmd0QqpWmFColwrHUQliyqwr5+PpLKe50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:df:11:9f:07:25:80:11:11:b6:aa:76:af:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: May 12 16:01:20 2026 GMT
Not After : May 13 16:01:20 2026 GMT
Subject: CN=9ded20f74c313df73e01b82d33315a091e44ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:f8:e8:2b:92:82:38:3a:65:42:ba:20:5c:
38:b0:d4:a0:bd:f7:5a:41:30:54:9b:79:b1:c2:c2:
83:d4:08:4b:ab:d0:84:d6:ba:08:d1:25:b3:f2:d8:
18:0a:f7:4c:40:a4:14:f1:86:b0:d2:27:c9:8a:43:
d8:49:bf:5f:b6:20:10:f0:5d:e8:97:3b:eb:f2:4b:
cc:f5:fa:92:bb:7e:a0:7b:1d:5e:78:52:99:d9:f9:
af:27:5e:fb:7a:43:d1:44:8b:02:27:2d:36:83:35:
0a:e5:e1:39:7a:04:bb:eb:a6:19:81:e1:38:91:4b:
31:23:11:ad:f6:2b:02:63:46:eb:ff:d8:3f:03:3b:
09:57:27:19:aa:a6:d3:12:b4:ab:ae:e4:5b:b3:26:
d9:33:6b:e3:49:1e:e3:f2:aa:ef:30:f7:1d:d4:9b:
d6:0f:3a:28:54:aa:14:c9:82:cb:e9:06:ed:bd:83:
f1:c1:09:0d:dd:71:43:57:e0:15:dd:4a:35:0f:27:
d4:99:39:cd:34:aa:71:5e:44:8b:b8:59:eb:22:dd:
f7:79:bc:c1:a5:2a:00:3b:30:64:17:24:3c:2c:32:
6a:c7:33:4b:07:58:9c:75:fc:82:f7:d2:e6:f7:97:
d5:f9:59:a5:c5:f1:20:d4:4f:a0:f7:18:47:8d:06:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:ED:20:F7:4C:31:3D:F7:3E:01:B8:2D:33:31:5A:09:1E:44:CA:64
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:40:0b:ca:06:56:ab:15:9a:ca:2c:4c:8b:e7:5d:69:49:92:
3a:ec:84:86:ea:b1:48:c5:78:b5:a7:86:aa:3c:3c:13:e6:6d:
1a:5c:89:75:e8:bd:2c:0d:5b:97:65:d6:fb:4c:77:b7:0f:c4:
a7:0c:b0:e6:65:b7:29:81:29:74:72:8f:14:b9:d7:b2:47:f4:
aa:cd:32:26:93:6d:ee:e0:33:c6:29:74:94:5a:65:5d:01:f1:
d6:a1:b0:ae:ba:49:7b:7e:b1:ce:ef:54:f6:f2:e0:cc:40:77:
c9:a8:0c:77:c8:1c:c8:50:a4:e1:99:4d:63:9e:f1:1b:83:10:
83:e3:62:6a:66:ce:e2:7e:ed:ac:75:f1:bf:20:63:ed:8f:d2:
7b:4a:e6:be:aa:49:eb:bd:1d:60:b7:98:e3:a5:12:58:2f:83:
74:09:0e:d1:70:68:d4:10:54:20:28:80:2a:ab:f0:c3:c2:3a:
29:08:d5:ee:02:7a:15:19:1f:ce:ca:66:64:47:90:c4:91:1b:
a1:eb:0e:7c:36:1a:62:29:c7:95:06:cc:b7:a2:33:47:5b:3e:
df:1a:c9:29:79:9b:44:07:e0:35:d5:7e:2d:d8:21:2a:a9:cc:
2c:3f:6e:5e:c4:cb:f1:66:11:d3:d9:00:39:0e:d4:a4:fa:f2:
84:a2:e9:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c698RnwclgBERtqp2r6a2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjYwNTEyMTYwMTIwWhcNMjYwNTEzMTYwMTIwWjAzMTEwLwYDVQQD
Eyg5ZGVkMjBmNzRjMzEzZGY3M2UwMWI4MmQzMzMxNWEwOTFlNDRjYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nr46CuSgjg6ZUK6IFw4sNSgvfda
QTBUm3mxwsKD1AhLq9CE1roI0SWz8tgYCvdMQKQU8Yaw0ifJikPYSb9ftiAQ8F3o
lzvr8kvM9fqSu36gex1eeFKZ2fmvJ177ekPRRIsCJy02gzUK5eE5egS766YZgeE4
kUsxIxGt9isCY0br/9g/AzsJVycZqqbTErSrruRbsybZM2vjSR7j8qrvMPcd1JvW
DzooVKoUyYLL6QbtvYPxwQkN3XFDV+AV3Uo1DyfUmTnNNKpxXkSLuFnrIt33ebzB
pSoAOzBkFyQ8LDJqxzNLB1icdfyC99Lm95fV+VmlxfEg1E+g9xhHjQbuwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3tIPdMMT33PgG4LTMxWgkeRMpkMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUALygZW
qxWayixMi+ddaUmSOuyEhuqxSMV4taeGqjw8E+ZtGlyJdei9LA1bl2XW+0x3tw/E
pwyw5mW3KYEpdHKPFLnXskf0qs0yJpNt7uAzxil0lFplXQHx1qGwrrpJe36xzu9U
9vLgzEB3yagMd8gcyFCk4ZlNY57xG4MQg+NiambO4n7trHXxvyBj7Y/Se0rmvqpJ
670dYLeY46USWC+DdAkO0XBo1BBUICiAKqvww8I6KQjV7gJ6FRkfzspmZEeQxJEb
oesOfDYaYinHlQbMt6IzR1s+3xrJKXmbRAfgNdV+LdghKqnMLD9uXsTL8WYR09kA
OQ7UpPryhKLpPA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:16:13 2026 by rpki-client