Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: YCzWhaMq1tQY3M/Dyt/rlVnzKjnuOAJlK6S6JR1BdXw=
Subject key identifier: 1F:AE:C3:A8:FD:28:FB:79:E6:F5:3E:C5:16:4F:3E:3D:BF:59:8E:E6
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 019E1E35C429954542131B634DC500BF7773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 05F8
Signing time: Tue 12 May 2026 22:01:40 +0000
Manifest this update: Tue 12 May 2026 22:01:40 +0000
Manifest next update: Wed 13 May 2026 22:01:40 +0000
Files and hashes: 1: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: GNMLv/ePKaWb7I79FphZEdWEz9ntYlOPci/7nlPCfV4=)
2: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (hash: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c4:29:95:45:42:13:1b:63:4d:c5:00:bf:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: May 12 22:01:40 2026 GMT
Not After : May 13 22:01:40 2026 GMT
Subject: CN=1faec3a8fd28fb79e6f53ec5164f3e3dbf598ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:99:1c:dc:f6:db:15:7d:63:60:68:5f:49:
45:ce:52:9b:bb:10:1a:88:c9:68:f0:eb:90:c3:3c:
5b:cc:68:fb:bf:f9:67:21:83:c2:e4:44:1a:ce:e2:
f0:60:d9:f1:45:23:cf:c0:69:13:62:ef:bd:98:e5:
9c:f9:e3:3e:6e:a0:e2:12:0c:23:52:4b:a1:88:73:
c2:bd:11:c6:78:6d:55:0d:e8:77:52:f9:42:f2:48:
c2:4e:74:ed:3c:ba:da:f9:16:6e:18:aa:a3:0d:85:
65:c3:b3:77:63:79:24:e8:28:e8:1b:0f:f5:d5:20:
9f:dd:45:64:7a:35:c0:70:84:fd:9c:c5:cf:56:a6:
17:90:70:f2:2a:2e:76:08:e2:80:e0:76:10:1e:34:
f5:c7:fb:0b:c4:49:1f:2c:e8:a7:c4:c6:58:53:47:
6f:28:13:5b:49:fd:68:f9:1d:fa:85:2b:d9:9a:70:
10:87:5d:c3:29:8b:7a:2b:3d:db:1b:e5:da:73:07:
ea:98:5c:d0:9b:e9:23:c7:d6:31:3a:2d:d1:41:a5:
46:b1:60:88:11:6d:86:a6:4f:2b:a4:02:e8:78:0e:
d6:e9:c5:65:69:9b:71:11:77:25:99:4a:59:63:71:
2c:af:a4:2d:23:b7:77:ea:05:d5:b8:99:b6:ac:e2:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:C3:A8:FD:28:FB:79:E6:F5:3E:C5:16:4F:3E:3D:BF:59:8E:E6
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f4:06:da:bd:cd:03:4e:67:92:31:3d:58:d5:a6:a6:4f:26:
75:f7:44:aa:e1:95:5b:e7:18:7a:c9:3c:6d:c1:d0:cf:97:85:
7a:f5:ab:3f:05:dd:9f:cc:1d:5d:a8:87:d4:2a:bd:1a:9a:14:
21:b7:1c:05:29:7c:ec:18:7d:d1:d8:38:29:07:0b:b7:03:f2:
0e:20:49:db:c7:32:d8:b4:30:cd:cb:ac:ad:c2:60:e6:99:2d:
c8:c1:34:9a:89:af:ee:1e:34:2a:7e:97:7c:db:92:bc:59:48:
76:4c:23:aa:61:04:98:ad:aa:a5:a9:e1:ad:12:e3:30:b9:04:
13:1e:18:36:a0:00:7f:b3:5a:e2:47:b5:e5:4c:29:12:56:52:
a2:67:fd:42:c4:f2:45:de:de:63:71:55:28:35:12:e2:c9:de:
7c:4c:00:71:b0:fd:51:69:3d:5d:c6:70:eb:b2:31:85:c9:e0:
42:22:86:29:fe:e3:91:71:c6:49:8f:83:25:2c:2c:41:19:24:
08:67:6a:b3:a8:eb:b8:51:db:6d:63:05:75:ec:89:d9:89:43:
f8:e4:3f:62:10:1f:a6:9e:34:ea:47:c4:e3:13:ad:7b:d5:28:
e0:e7:f1:ef:2b:bc:2f:b7:57:a5:fe:c6:ea:a3:76:f6:49:6e:
07:3e:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:18 2026 by rpki-client