Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: M5znD+yQr97mo0f0LKIWZUgM86LCGwi/2TlUkCq003E=
Subject key identifier: 41:72:A9:E6:5C:81:54:47:6C:D5:7A:FA:6B:79:0C:63:2B:AC:4F:66
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019E1F48059C41A6E24CFB05FF995B8673B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0DED
Signing time: Wed 13 May 2026 03:01:14 +0000
Manifest this update: Wed 13 May 2026 03:01:14 +0000
Manifest next update: Thu 14 May 2026 03:01:14 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: UM52L2J6d1mtbH89y2XXiASrId93afz0i/x8KZJjbhU=)
2: oSptT-0ci_ZGXafc3V2IqTfIf0s.roa (hash: 2ePOPwiRcBxV+mjrfIP+IE/Cxy8JzrOsuyP5kjxlWXA=)
3: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:05:9c:41:a6:e2:4c:fb:05:ff:99:5b:86:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: May 13 03:01:14 2026 GMT
Not After : May 14 03:01:14 2026 GMT
Subject: CN=4172a9e65c8154476cd57afa6b790c632bac4f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:08:a8:fe:a4:c2:64:44:e8:17:94:61:e3:
12:70:67:b7:c7:f0:eb:65:0b:2b:ba:9d:12:b0:4f:
56:a4:6a:34:69:2d:8d:b1:b6:85:67:17:61:e6:e8:
af:31:ce:9a:c7:a4:d9:fd:20:d4:a2:ec:95:ff:d9:
31:6d:21:a5:df:03:b1:e4:ba:f0:c8:86:f3:20:67:
18:29:97:7a:b4:81:41:b6:64:a1:08:78:8c:5d:95:
23:c9:df:d7:8c:f1:a9:40:48:8d:14:1d:9e:9d:2a:
99:11:6f:57:7a:d6:0e:22:fe:0f:e6:68:4a:c9:f9:
87:6d:9c:8b:04:c4:c6:a3:e7:09:13:9b:b8:14:2e:
5c:a0:9d:c8:d8:45:3f:d3:2c:1b:75:39:6c:c5:39:
a6:1c:3a:bb:9a:0d:3a:a2:8e:d7:a2:f1:fa:10:13:
ae:5a:6a:cd:da:3c:77:c4:77:a5:ea:dc:63:bd:06:
56:2c:fa:84:f3:3a:f5:a4:af:e7:90:9d:ab:a9:17:
5a:35:26:45:23:cf:cb:51:fd:47:ff:22:ce:5a:34:
c7:20:f7:0a:ed:29:d3:69:6b:29:0b:aa:b6:c8:6a:
f7:64:5c:e6:91:43:cf:8b:aa:a9:ed:58:34:e8:7b:
46:bb:7a:f3:84:78:9b:06:fe:43:dd:dd:8f:83:fa:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:A9:E6:5C:81:54:47:6C:D5:7A:FA:6B:79:0C:63:2B:AC:4F:66
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:a2:b5:87:2d:f8:24:5c:ec:42:9f:fa:b5:3a:c0:1d:ec:
5e:65:e9:2c:b4:16:bb:e8:88:27:98:bc:70:50:42:15:e3:11:
8e:aa:44:c9:1e:1a:cc:c8:b2:c5:b7:96:b7:3c:bd:95:97:8a:
b3:00:e4:4a:58:3b:ae:96:b6:c5:f4:04:9c:49:a8:fb:af:30:
1b:cc:26:3d:f5:21:eb:c5:94:05:08:99:28:71:0f:4b:95:9f:
22:ab:df:fd:cf:8d:cd:c8:3b:b4:14:54:88:6f:af:eb:b9:f0:
78:06:95:1f:eb:91:e8:df:47:db:a6:69:d7:b5:da:c0:e0:31:
e6:f5:f3:cb:9b:74:7b:63:c6:67:7e:74:23:b1:df:fa:ee:c6:
c2:a8:85:19:04:6e:ae:ef:20:f3:fd:99:11:88:b7:4e:04:dc:
06:54:09:51:c9:1b:0f:f0:0c:13:95:31:e5:6f:a4:b8:57:43:
3a:d7:e7:d3:9a:c7:ab:0b:a8:8a:a5:c6:e1:0d:f7:68:b0:5c:
23:68:1d:30:57:19:7d:f8:3c:47:26:ce:c5:7f:c8:7c:9a:f7:
a8:24:92:6f:7a:51:5d:40:eb:4c:a0:26:7b:79:6d:62:d4:ad:
ff:07:bf:ba:12:4d:3f:7f:ca:b7:47:58:17:47:60:05:de:01:
f9:47:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:00 2026 by rpki-client