Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: ssp+xo5rCt8T259tQ3LHjdc7Izm3e+fdAinlO7zT9Ks=
Subject key identifier: 10:EF:71:D9:EA:41:42:BC:F9:A1:A5:91:D8:C5:C9:79:E0:89:59:FE
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019E1F480127DA51672EAC25DA533912A7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 03:01:13 +0000
Manifest this update: Wed 13 May 2026 03:01:13 +0000
Manifest next update: Thu 14 May 2026 03:01:13 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: TDOCZzQ2RkXlfgyUtcth3xqsHHxytBCbYMFeDsnkYtQ=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:01:27:da:51:67:2e:ac:25:da:53:39:12:a7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: May 13 03:01:13 2026 GMT
Not After : May 14 03:01:13 2026 GMT
Subject: CN=10ef71d9ea4142bcf9a1a591d8c5c979e08959fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:f5:43:29:d4:0d:b1:b0:f9:de:3b:27:ef:
e2:fb:a5:54:51:97:3e:2f:8a:44:8f:9a:64:6c:7c:
49:7b:03:3e:9e:6d:a7:5d:3b:20:ae:49:1e:7c:33:
9a:a0:94:c2:22:64:ae:2a:cb:06:a0:ce:a4:03:f2:
de:98:67:70:9c:5b:a0:a0:c0:36:18:89:3d:6b:be:
41:c6:be:f4:b4:cd:10:09:bf:bb:1e:ba:b6:8e:7d:
58:80:f4:2c:97:12:c7:9d:69:04:3c:95:ff:f3:1e:
9c:32:e9:03:09:f4:27:0e:e7:a3:3d:70:45:ad:f5:
7f:e7:fe:b9:c3:30:d5:48:7a:1f:6b:49:32:67:cb:
dc:99:8b:81:69:4c:de:ec:fd:0e:83:be:6e:09:6c:
c0:95:38:1b:fb:46:fc:a3:ce:d6:24:8d:cc:53:88:
d5:7b:8a:a5:17:c0:15:5e:1d:42:e5:b1:a8:33:14:
02:cd:15:64:d1:dd:2d:5a:4e:87:f0:75:30:8c:d7:
40:89:47:9a:fd:c1:ec:20:c5:3b:68:90:e3:58:97:
6b:ea:cb:67:6a:4c:8f:7d:37:bb:0f:09:19:f9:5e:
0f:ab:13:e2:80:cf:dc:ee:53:94:e4:fd:7d:4e:f8:
01:6f:c1:9a:6b:cb:bd:e1:cc:81:1d:7d:c7:bb:93:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:71:D9:EA:41:42:BC:F9:A1:A5:91:D8:C5:C9:79:E0:89:59:FE
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:32:7f:cc:0e:a9:56:69:73:7a:27:f9:bb:dc:ae:2d:96:cb:
3d:09:ad:6d:41:ff:b2:c3:c4:c8:c2:54:af:7e:89:ac:34:75:
4e:1e:be:d9:12:f1:b4:6e:62:8c:6e:38:14:7c:06:e6:e5:4d:
d8:39:0d:db:72:c8:c0:97:76:a4:60:10:48:b2:e5:66:0d:2c:
78:01:06:39:6e:0d:fc:a6:19:ac:4e:66:f4:a4:aa:ba:0d:67:
a5:9d:45:c0:5a:5d:2d:3b:7a:17:66:71:eb:12:1a:84:6c:d4:
5e:a3:41:7f:70:05:fb:ad:a6:9b:f3:56:d5:a0:22:3a:32:b6:
ae:bb:a4:05:52:83:1a:9d:21:7a:33:d1:53:e9:5b:41:26:bd:
80:f9:6d:ea:20:45:bc:ea:6f:ca:b6:7a:2e:bf:cd:eb:a6:a3:
84:d3:c4:fa:3d:35:57:2c:08:ab:8b:f1:b8:64:33:9e:3b:5e:
79:42:f9:c3:3f:f0:32:54:51:3b:84:a1:cb:6c:01:a7:66:e5:
94:91:fe:78:9e:2b:ae:94:8c:87:0f:7c:4e:b2:42:38:8e:9c:
72:a3:b6:01:4e:25:b9:7a:01:78:23:94:4a:fa:63:fd:5d:a7:
14:55:d8:06:09:20:8d:2c:f4:2d:77:f6:05:5c:1b:b3:75:4f:
42:69:10:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:41 2026 by rpki-client