Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: jzrIzdkMcRFBgS8wWcraiwN0U8PiW3flj1c157ZFFAw=
Subject key identifier: 53:65:24:9E:1E:40:59:2D:A6:55:E6:43:29:87:16:E1:9B:6C:D8:4F
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019E20C8550890FDB389E219B98220B6D51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0A9E
Signing time: Wed 13 May 2026 10:01:00 +0000
Manifest this update: Wed 13 May 2026 10:01:00 +0000
Manifest next update: Thu 14 May 2026 10:01:00 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: tSZ1bFHsUwbnQxjxkZ7WgepgLYacFfynkscwWNjt/wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:55:08:90:fd:b3:89:e2:19:b9:82:20:b6:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: May 13 10:01:00 2026 GMT
Not After : May 14 10:01:00 2026 GMT
Subject: CN=5365249e1e40592da655e643298716e19b6cd84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:7b:05:ad:57:58:62:93:45:5b:7d:94:d8:
21:84:8d:28:cc:af:d6:0c:bb:3a:b9:95:73:73:05:
f7:f5:43:ff:74:57:02:57:a7:b2:cd:7c:56:81:30:
ba:f7:82:96:03:e8:66:f9:53:b4:b0:31:74:51:11:
74:8e:c0:9c:4f:67:91:05:8f:57:ce:57:f3:2d:44:
b2:d7:65:f7:f0:0c:e9:57:6b:ad:3c:9e:fc:aa:8a:
2e:16:e7:66:35:c3:dc:59:95:c5:e5:39:89:c0:78:
5f:ee:81:f8:91:fe:84:21:dc:8e:ab:28:91:45:46:
fc:31:3e:3f:e0:3c:97:41:4f:a2:4c:36:5a:6c:ab:
26:cd:8f:b6:d5:47:48:e6:e1:b0:67:fc:ec:a2:1e:
cd:e0:c4:c7:ed:e8:f6:60:af:e3:f9:0d:5c:f4:b1:
89:ad:76:ec:24:29:69:ff:48:2c:87:3b:fd:a4:ce:
a2:2c:4a:ce:5e:15:3a:9c:ea:c8:9a:5f:b2:25:bc:
91:52:63:b7:89:ad:1d:03:eb:9b:2b:2b:dc:b8:81:
27:d5:78:fa:1c:ad:f2:8d:5a:18:26:92:7b:bf:e3:
22:0e:00:01:37:0a:d6:77:a8:e2:46:e5:ce:da:59:
6d:b4:c8:f6:46:39:d6:25:87:49:14:d5:e3:3f:62:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:24:9E:1E:40:59:2D:A6:55:E6:43:29:87:16:E1:9B:6C:D8:4F
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:73:8d:3a:5f:5a:33:e6:43:a1:92:f3:3d:fe:ac:6a:ed:
5d:ef:9a:b0:f1:c9:2b:29:f4:6e:04:e7:c1:62:09:3a:20:6d:
aa:24:6a:4b:0d:5e:56:fc:5c:00:48:bd:75:26:01:c4:ba:65:
bf:53:29:03:93:f2:0c:4f:0c:61:a7:d7:4b:c0:76:2d:6b:54:
6d:41:2b:aa:d6:9a:9c:62:3b:21:38:94:86:00:82:94:5a:51:
58:ee:15:3b:64:3b:43:79:9e:d2:a0:cf:e0:fc:d9:f2:d6:e6:
52:8e:b3:c1:2d:fa:d3:69:89:42:da:6a:9a:e1:ac:3c:e9:e0:
27:cc:59:00:73:67:99:a4:ef:d6:06:a1:d4:c0:64:06:08:a7:
90:2c:7e:45:f3:a8:d0:bc:d1:d2:83:02:dd:15:d2:ca:40:ae:
78:18:03:a7:4c:20:90:e0:8b:c7:fe:73:13:3d:da:19:fc:a7:
c3:df:67:d4:c8:f1:22:36:8e:9d:77:1d:fa:55:2b:ef:51:b2:
e1:52:b9:ad:b8:9b:c1:8c:49:5c:c1:11:be:f2:10:f5:c2:34:
60:1b:97:c3:1a:f8:e4:51:4c:15:f9:fe:8e:16:a6:8e:1f:9b:
14:cd:21:e9:14:cb:60:86:43:4c:4d:8a:96:de:4a:74:dc:26:
ae:6b:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:07 2026 by rpki-client