Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: JyMp/yCUiswLg0cM4Olgt3clTkEop2fGdhbR8R2hUns=
Subject key identifier: 9B:11:5B:FA:FB:2B:3F:C8:D2:3B:9E:16:39:0C:AF:82:21:8A:EC:47
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019E20239016E5C6F605EA2F3B079F6F8237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 04AA
Signing time: Wed 13 May 2026 07:01:02 +0000
Manifest this update: Wed 13 May 2026 07:01:02 +0000
Manifest next update: Thu 14 May 2026 07:01:02 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: 82Cr2AgFH+d3Iiwc106Aaowy5kp+IdckuG/ZujQCRQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:90:16:e5:c6:f6:05:ea:2f:3b:07:9f:6f:82:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: May 13 07:01:02 2026 GMT
Not After : May 14 07:01:02 2026 GMT
Subject: CN=9b115bfafb2b3fc8d23b9e16390caf82218aec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:44:b2:58:f3:2a:ce:2e:36:3b:6c:b8:5c:
d7:7d:fd:6a:88:8d:20:38:ef:b7:41:aa:04:65:3d:
a3:a9:74:1e:ae:bc:36:4d:e6:ad:ed:61:ec:51:fb:
6f:4d:89:d3:24:4c:90:9a:e5:7d:d1:a5:36:17:d1:
0a:0d:0a:2f:a4:1d:67:cc:08:3e:af:70:75:65:3d:
46:fb:4a:44:89:15:d0:ef:59:b6:9d:07:07:16:2e:
79:b8:f2:c3:da:4f:39:3a:7e:57:04:af:04:f8:5b:
6a:b8:1b:2d:44:aa:da:54:44:da:83:2f:bf:91:b9:
aa:ef:bc:06:f6:11:03:70:55:55:37:1a:b4:26:d1:
da:92:44:83:1f:4c:f8:50:72:72:ad:79:0d:64:56:
b1:5a:63:3b:60:a1:23:68:30:e9:4d:bc:3b:47:85:
8c:5b:07:d9:11:ff:7f:f3:94:3b:c0:83:4a:8b:83:
42:fc:f4:13:c1:ad:40:7a:da:13:01:ec:25:26:a6:
cc:2f:41:39:22:10:04:43:4a:d4:d5:f3:d5:f3:68:
84:f6:8d:d2:c7:b3:9b:f5:ad:a2:22:43:2d:f2:c4:
27:85:d0:1f:b2:ee:f1:9a:3d:0c:c6:4a:40:a1:a1:
86:98:b8:d3:2c:10:cf:44:45:f6:05:ef:5c:d6:b9:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:5B:FA:FB:2B:3F:C8:D2:3B:9E:16:39:0C:AF:82:21:8A:EC:47
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6a:31:09:75:7a:89:29:16:7d:dd:d4:f1:74:55:1c:d2:64:
72:08:13:95:65:70:7f:f3:2b:dd:09:90:0d:9b:cc:46:1b:52:
b1:20:b8:0c:27:fa:8a:5b:2b:a4:0e:c3:3b:a1:f0:4a:92:98:
d1:ee:85:55:97:b6:66:01:01:b4:e5:57:da:1e:9e:eb:57:9b:
dc:3b:71:33:ef:07:16:54:f6:ea:a2:47:40:55:ac:7e:4e:13:
8d:f6:b0:7c:34:02:78:55:74:ae:0c:ca:5f:25:ae:20:1d:94:
f1:59:4d:cf:29:2c:3a:4d:a8:69:dd:a8:fd:26:4b:a5:66:3c:
da:29:8e:87:b1:8c:c8:75:7e:8e:4d:c8:20:10:db:7e:0d:7d:
34:58:7f:80:b3:e0:04:64:48:c9:60:f1:63:fd:41:a5:79:a4:
57:1e:f1:bd:54:fe:57:02:05:05:be:1f:ee:2b:1a:9e:5a:ce:
26:fd:2b:18:d3:1f:23:4d:67:8c:df:5b:89:57:9f:e1:0f:ad:
b5:23:7c:5a:07:26:87:d6:67:0f:b4:0e:ba:a5:b2:a7:ce:b9:
9b:f0:29:c3:2d:92:de:de:55:af:7e:a4:5d:f6:b5:8a:4a:56:
e6:c1:bd:14:c9:b7:6f:15:2b:31:cc:35:cd:d5:73:93:16:cc:
10:75:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:04 2026 by rpki-client