Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: yseMd0H0Vzr+p7TUqtgv+sqauwPuBLAWT13mclERvz0=
Subject key identifier: 95:9B:28:53:9D:C0:45:4B:90:CD:8D:49:FD:88:AA:29:09:82:AD:D1
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019E1F47CA65EF506AA579D0F3162B14C2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1838
Signing time: Wed 13 May 2026 03:00:58 +0000
Manifest this update: Wed 13 May 2026 03:00:58 +0000
Manifest next update: Thu 14 May 2026 03:00:58 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: ku/qR8R6A7eJ7JMNDJcbWSfVNFTC6ixYJmhsh+Sv03I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ca:65:ef:50:6a:a5:79:d0:f3:16:2b:14:c2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: May 13 03:00:58 2026 GMT
Not After : May 14 03:00:58 2026 GMT
Subject: CN=959b28539dc0454b90cd8d49fd88aa290982add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:93:26:d6:e4:9f:12:b3:1f:09:92:2d:04:
9c:91:56:5d:03:56:0f:1c:b1:a2:a0:22:19:03:c4:
74:36:90:52:b9:a3:32:ab:23:14:2a:63:41:c3:1b:
be:0b:06:b7:55:d1:8a:a8:07:64:97:17:25:cb:e8:
5a:38:24:45:31:44:ec:de:64:e3:d1:c1:9b:59:62:
b0:d3:3c:17:b0:05:2f:1e:df:48:b4:0c:3c:fc:4d:
4c:35:11:d8:44:01:1b:ac:07:e3:07:0a:23:9d:b3:
22:a6:37:49:55:3b:95:cf:de:f6:0b:43:8b:06:10:
07:72:48:07:67:59:76:ad:9f:b2:33:22:12:7d:29:
43:b1:bf:5c:e0:c1:4a:bf:4a:7e:90:f9:8b:91:26:
37:ee:5c:1e:b7:68:1d:c4:43:5e:6e:81:a7:9f:7f:
cc:f2:f3:86:b7:58:c2:00:00:c6:86:f4:a5:0e:ce:
d3:95:af:8d:6e:e3:61:f7:28:5e:c6:fd:23:73:d7:
c4:5b:47:d6:cf:ca:36:4a:a4:0c:8b:b7:31:64:fb:
5c:c3:c8:ad:f4:85:db:51:ab:a2:55:d1:40:0c:fa:
46:e0:ac:a0:48:25:c8:19:a6:12:2e:46:96:75:87:
46:77:a8:f6:b3:d7:48:d0:4c:ab:11:55:63:71:f3:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:28:53:9D:C0:45:4B:90:CD:8D:49:FD:88:AA:29:09:82:AD:D1
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:73:a8:b7:fe:99:c9:0e:e9:d1:a6:8c:9e:ae:9c:a3:b6:
c1:1b:b8:71:a9:4f:22:ee:56:b1:be:cd:a4:a7:24:24:46:7f:
d6:fd:e2:50:55:e0:23:57:02:f0:07:e1:e4:cc:32:f8:59:e4:
95:6f:3e:14:dd:8f:e2:c5:3d:d3:87:56:a4:01:ca:de:b8:60:
ca:fc:69:ec:6a:f6:f8:3a:e2:3f:05:1d:9e:4b:cd:aa:28:ce:
9d:ce:48:01:26:7b:d4:47:ee:3d:e0:02:69:a9:88:32:fd:d8:
d5:e4:14:41:42:da:19:fa:e3:c5:1d:83:a2:d4:da:e4:01:15:
f8:ea:89:27:9c:e2:9e:37:d0:75:e2:b3:ea:87:66:89:df:31:
76:75:b2:7c:ed:d0:18:a2:1e:6b:1a:9f:c3:9a:e5:eb:37:4a:
e0:e7:a4:03:cc:0d:dd:44:11:69:0a:e0:c1:aa:e8:fb:f9:fa:
69:ae:d3:46:fa:f7:39:3a:8d:93:74:0e:c0:8d:1c:96:75:46:
b3:17:f4:b8:9e:31:06:a3:eb:56:0f:7b:13:43:44:fc:a2:7a:
2e:f5:ca:91:aa:51:ae:92:35:33:7c:c4:41:51:f3:a6:03:53:
2b:f9:fc:bd:85:37:48:31:be:31:95:b6:1b:11:8a:74:3a:9d:
30:39:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:14 2026 by rpki-client