Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: j9O9MzYrfXtQwlE+CdGSJ2+TMv0I+Kfo/3bX+4JbzWM=
Subject key identifier: A8:68:5A:71:C4:D5:2A:7A:B5:BB:E7:27:54:80:15:3A:CE:FD:EA:79
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019E20FF655D7E8BE1C2BBC6D7006AB60DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 157B
Signing time: Wed 13 May 2026 11:01:09 +0000
Manifest this update: Wed 13 May 2026 11:01:09 +0000
Manifest next update: Thu 14 May 2026 11:01:09 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: FYN0i1dEyWcgufDq2sUf/+s/oiuZanM4pAPy1M0YrB8=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:65:5d:7e:8b:e1:c2:bb:c6:d7:00:6a:b6:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: May 13 11:01:09 2026 GMT
Not After : May 14 11:01:09 2026 GMT
Subject: CN=a8685a71c4d52a7ab5bbe7275480153acefdea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:43:89:bb:9e:66:92:dd:3c:b9:bf:39:82:
8a:74:4d:35:cc:e1:68:5d:52:4c:c1:ae:3a:c3:9b:
47:dd:d6:ed:93:30:88:10:35:9f:db:13:02:9d:9c:
89:18:b4:e7:75:31:b2:3c:ee:44:dc:da:a0:0f:00:
12:d2:29:61:39:bf:0a:fa:db:f7:d8:13:b9:22:06:
dd:ab:55:20:f6:e5:77:cd:af:e1:8c:84:b1:3c:5a:
de:38:c8:d4:59:34:de:68:0e:af:3e:fa:2d:0c:fd:
a5:1a:04:03:02:e0:9e:d3:12:08:f5:47:5f:5f:09:
79:d6:1a:a6:89:58:91:ba:b4:e0:3b:02:ec:cd:5e:
e8:91:b9:76:88:12:f2:06:89:da:e5:bb:96:83:ed:
9e:66:7a:c8:14:cc:06:64:4e:98:2c:68:1d:a4:28:
bd:45:0b:37:44:92:f7:a3:58:4a:7f:cf:e1:3b:d3:
a0:60:b1:a2:39:8b:b8:cc:26:01:27:db:88:d2:6c:
0b:1b:4e:1e:1e:f9:a1:cb:f5:8f:a1:0c:f4:2d:48:
e7:6a:cc:8d:90:d9:99:83:fb:73:02:a1:18:09:75:
d4:67:12:e7:ab:5f:dc:47:ce:c3:39:ac:2e:26:dd:
1f:4b:80:f7:93:62:65:a7:81:5b:d1:d2:bf:26:ce:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:5A:71:C4:D5:2A:7A:B5:BB:E7:27:54:80:15:3A:CE:FD:EA:79
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0c:79:c6:3d:cb:d1:94:42:2f:7e:ec:d9:55:18:c6:89:5a:
27:21:bf:85:e9:66:77:bc:8c:98:ba:1d:39:87:2f:06:70:89:
c1:85:8b:7b:5a:86:11:68:30:ee:55:70:d5:85:5f:b1:90:e3:
48:6d:b2:d6:5e:ef:45:45:9b:85:46:5a:83:f5:ac:5b:9a:b7:
1c:cc:11:7a:eb:63:d3:48:27:80:6a:86:3e:b2:a9:4b:73:7c:
cb:be:a0:9c:7a:45:0d:76:a4:31:4e:6f:25:3c:c3:36:a5:82:
36:9c:62:1b:dd:7d:e9:36:62:5d:d2:4b:e8:24:cc:bb:88:e3:
ac:6c:f4:83:34:f7:61:b3:7f:59:14:35:47:28:0a:e5:c8:7d:
d1:60:b4:ae:ef:7a:c2:e0:bd:0e:09:9e:b5:a5:72:39:aa:f8:
24:7c:1f:2d:91:33:78:83:c4:c9:bd:1b:c2:f2:0e:6e:e4:7a:
cd:6c:4f:a2:d4:56:80:2d:d9:e9:6a:99:a5:77:63:bd:c5:bf:
25:1c:88:5f:65:0f:e6:9e:b2:5d:0a:32:40:0e:2d:96:ba:3f:
b2:99:28:8d:4c:32:df:98:e7:41:a1:d0:4e:48:11:93:8a:cd:
56:73:eb:85:f9:cf:75:95:1f:b0:11:43:66:76:08:a3:5b:f7:
4d:37:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:32:44 2026 by rpki-client