Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: DFzbSPY1j2kvCCQUO4Ep7egXwZZxTUyHS8uxrwt2fsE=
Subject key identifier: 1D:30:D4:F6:66:38:76:FC:FA:C1:E2:3D:FE:87:CD:A3:73:78:86:46
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019E1F480FB3F83CB55F25E868BF6B38B401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:01:16 +0000
Manifest this update: Wed 13 May 2026 03:01:16 +0000
Manifest next update: Thu 14 May 2026 03:01:16 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: jog5Kn+5M+2r5kphnB0Y3+6l31e9AVSgLW2QMJCu2kk=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:0f:b3:f8:3c:b5:5f:25:e8:68:bf:6b:38:b4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: May 13 03:01:16 2026 GMT
Not After : May 14 03:01:16 2026 GMT
Subject: CN=1d30d4f6663876fcfac1e23dfe87cda373788646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:2e:c1:eb:e2:48:31:dd:c9:ed:f7:dd:5f:
e2:e9:e1:6a:09:80:99:b7:e2:76:e1:58:8b:c4:20:
ab:de:d2:78:89:a8:b1:a0:5d:78:55:91:8e:ed:f5:
74:4f:fd:94:ca:73:e0:9a:de:00:a9:9d:ce:99:dc:
98:93:4f:a7:61:f2:8a:6b:2e:ce:af:54:1d:e1:5b:
4c:72:b3:b2:21:77:ed:62:b6:24:3e:1c:6a:ab:2e:
13:8c:73:27:05:d0:7b:69:fd:2f:0b:f4:ae:b9:b0:
e6:65:ca:84:1a:7f:72:4f:32:30:1f:09:ef:ac:3e:
53:14:c5:86:45:1e:aa:39:bb:94:60:ac:80:e8:ea:
fc:a1:2f:d7:95:1c:39:09:7a:a4:7b:a8:bf:b6:4d:
25:f5:6d:42:52:2a:55:94:27:2c:9f:ff:0d:5d:43:
66:d6:c1:3b:32:f6:10:42:b0:c4:b1:96:5a:6f:cf:
33:68:bc:26:9f:28:2d:e7:51:ef:8b:bc:07:22:9e:
2d:74:38:9a:6d:8c:66:13:66:ec:85:02:03:cc:8a:
28:3a:ea:da:0e:71:21:ef:4b:f2:a3:4b:77:33:77:
55:e9:2a:91:26:b4:33:8f:6f:37:94:68:aa:c3:8e:
ea:50:ff:55:7d:93:ec:71:cc:97:dc:1b:aa:d0:ab:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:D4:F6:66:38:76:FC:FA:C1:E2:3D:FE:87:CD:A3:73:78:86:46
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a5:d1:0f:f5:83:bd:ae:74:73:66:f0:b3:a0:10:a4:0c:0e:
5d:85:91:4b:c5:08:53:8f:60:19:a9:be:6f:f8:6b:7b:e9:6e:
1d:23:81:04:b2:43:a9:d1:1c:19:50:69:f7:9a:29:24:50:07:
dc:67:1a:f2:ae:66:40:53:bf:d8:78:40:0a:32:25:da:1b:ee:
a2:19:a7:a7:ad:72:33:68:39:80:87:f5:18:7d:7a:6a:0f:a4:
7e:d6:2d:cd:47:84:43:85:a6:9b:df:f0:a9:ec:3d:30:ee:91:
7f:dc:84:94:90:ef:05:76:58:68:62:bd:bb:d7:40:57:da:66:
b8:a2:3c:13:9f:8c:a8:4b:49:76:e4:e7:c2:9d:91:b8:8b:d1:
ad:dc:78:c6:f0:75:a2:2b:f5:83:c5:c3:4b:56:2a:21:91:a7:
5e:15:0e:37:3d:51:67:b4:fa:1d:d4:eb:fa:9a:3b:68:e3:df:
ff:40:2a:04:5d:e3:a2:25:63:a7:32:45:3e:17:42:4a:31:a1:
72:08:38:cd:c0:db:c6:d4:55:6c:1d:27:e0:e2:8f:55:ca:85:
a8:0f:50:b9:3f:eb:b6:76:8b:bd:71:44:07:d7:0b:91:c7:aa:
f1:fa:ed:dc:64:44:0d:1d:bc:83:62:98:78:a7:74:8a:ee:e8:
e3:d6:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:02 2026 by rpki-client