Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: +X/xAhYIFQ2RjDARvHwtiZksT9EGoRl9WD5Jfs+ckd8=
Subject key identifier: 20:FA:8C:9E:02:11:4E:B7:0D:C5:31:2F:81:BE:E0:8D:41:9B:71:96
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019E1ED9E1C7F3C6A83A32B97FC9109F8464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0C50
Signing time: Wed 13 May 2026 01:00:55 +0000
Manifest this update: Wed 13 May 2026 01:00:55 +0000
Manifest next update: Thu 14 May 2026 01:00:55 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: yUA0mI2alH6EzkQpZ/N7WgU45alBoqGaVRPg+fA3M3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:e1:c7:f3:c6:a8:3a:32:b9:7f:c9:10:9f:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: May 13 01:00:55 2026 GMT
Not After : May 14 01:00:55 2026 GMT
Subject: CN=20fa8c9e02114eb70dc5312f81bee08d419b7196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:4b:48:49:04:2c:fd:b5:04:48:3b:90:8c:
d0:65:5d:74:f1:17:ca:9d:6d:34:f1:16:3b:b7:14:
ed:71:7b:5b:d6:ef:b5:33:58:f5:f4:88:2b:54:67:
a8:26:c5:72:21:a1:47:29:5f:5f:b3:86:e3:a5:ef:
36:d3:19:25:ff:53:58:b5:3c:6d:16:d5:46:dc:51:
02:6a:a9:e4:07:e7:41:6c:74:08:e2:67:5c:85:f0:
c0:d0:56:20:f9:d0:78:cb:84:5f:51:ee:60:26:67:
5f:43:fc:4b:c2:50:58:db:b9:c4:bc:f4:b8:71:e9:
07:fa:ad:fc:dc:b1:80:c1:84:97:49:df:78:80:2f:
ee:bf:76:72:42:91:98:6e:bc:c5:16:79:f1:5d:95:
72:35:34:c1:aa:42:1c:5d:51:0c:8a:47:a4:5f:2f:
b3:78:ca:6b:39:20:d9:9c:3e:03:63:77:dd:a4:3d:
31:6a:d6:66:b4:e9:ba:e6:f3:77:72:24:01:82:45:
9c:b1:ca:0d:22:db:5d:b0:05:e4:47:36:ba:71:43:
5e:63:65:aa:fa:ad:4c:31:84:c0:7a:92:13:55:2a:
ea:25:dd:a5:db:0b:90:04:c3:e7:50:fa:a2:1a:61:
0f:c6:0b:87:c8:83:b0:b2:94:03:22:60:69:92:f2:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:8C:9E:02:11:4E:B7:0D:C5:31:2F:81:BE:E0:8D:41:9B:71:96
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:66:e0:ce:0f:09:12:64:f3:51:5b:e3:25:f2:56:5c:03:6b:
41:ab:4b:c7:f5:c5:13:81:40:48:7e:10:ac:fa:94:e4:c3:fb:
15:68:63:98:91:67:63:cf:a5:0d:c2:14:09:ca:f6:6a:b9:4b:
5b:77:f7:55:f8:b3:55:9d:26:cc:7f:57:22:9b:05:16:e7:b7:
4e:c5:6b:0d:0d:d3:b4:8f:cf:26:df:fb:d9:fc:02:05:cc:4d:
e5:f9:24:ea:6f:8f:a5:78:7d:ac:e4:4a:45:8c:4f:45:42:f8:
6c:46:3b:6a:dd:0c:dd:44:42:d3:34:2b:79:c2:c9:04:2d:86:
7e:9a:d6:ea:a0:4f:22:61:ca:8d:00:27:95:54:df:be:c9:b9:
e2:b6:5c:67:e4:d5:36:2e:e1:22:43:eb:ce:d9:80:60:67:18:
5c:0d:12:93:b4:89:72:e3:34:e5:ae:23:88:dc:6e:ce:fa:db:
7c:c4:a0:56:bf:0f:ea:49:6e:5e:8b:25:51:62:42:fd:79:b4:
66:ea:ec:f3:70:91:b0:c9:25:c2:4b:75:a7:92:a5:b8:33:17:
cf:ba:dc:16:fd:b9:c1:88:50:87:97:3a:46:57:b0:05:76:05:
c1:7d:8a:85:ed:b0:89:b7:45:03:7f:fe:73:37:e1:ea:3e:12:
e7:92:69:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2eHH88aoOjK5f8kQn4RkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjYwNTEzMDEwMDU1WhcNMjYwNTE0MDEwMDU1WjAzMTEwLwYDVQQD
EygyMGZhOGM5ZTAyMTE0ZWI3MGRjNTMxMmY4MWJlZTA4ZDQxOWI3MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9JLSEkELP21BEg7kIzQZV108RfK
nW008RY7txTtcXtb1u+1M1j19IgrVGeoJsVyIaFHKV9fs4bjpe820xkl/1NYtTxt
FtVG3FECaqnkB+dBbHQI4mdchfDA0FYg+dB4y4RfUe5gJmdfQ/xLwlBY27nEvPS4
cekH+q383LGAwYSXSd94gC/uv3ZyQpGYbrzFFnnxXZVyNTTBqkIcXVEMikekXy+z
eMprOSDZnD4DY3fdpD0xatZmtOm65vN3ciQBgkWcscoNIttdsAXkRza6cUNeY2Wq
+q1MMYTAepITVSrqJd2l2wuQBMPnUPqiGmEPxguHyIOwspQDImBpkvJRIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD6jJ4CEU63DcUxL4G+4I1Bm3GWMB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGbgzg8J
EmTzUVvjJfJWXANrQatLx/XFE4FASH4QrPqU5MP7FWhjmJFnY8+lDcIUCcr2arlL
W3f3VfizVZ0mzH9XIpsFFue3TsVrDQ3TtI/PJt/72fwCBcxN5fkk6m+PpXh9rORK
RYxPRUL4bEY7at0M3URC0zQrecLJBC2GfprW6qBPImHKjQAnlVTfvsm54rZcZ+TV
Ni7hIkPrztmAYGcYXA0Sk7SJcuM05a4jiNxuzvrbfMSgVr8P6kluXoslUWJC/Xm0
Zurs83CRsMklwkt1p5KluDMXz7rcFv25wYhQh5c6RlewBXYFwX2Khe2wibdFA3/+
czfh6j4S55Jpqg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:22:10 2026 by rpki-client