Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: RDCGkT0mG/aC73uoTYg/STzoLmubLD47jrwqFUI56zA=
Subject key identifier: 15:50:7F:E5:5E:D0:D8:18:80:E2:8E:FC:D6:47:DC:27:52:43:7D:C4
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019E1EA386CC7A8EA235EDD02D5BC2CC505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:01:33 +0000
Manifest this update: Wed 13 May 2026 00:01:33 +0000
Manifest next update: Thu 14 May 2026 00:01:33 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: Zejsn4J09p3ly7Sbgtmrkr//as7OvRVsaZxGvkDgKFc=)
2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:86:cc:7a:8e:a2:35:ed:d0:2d:5b:c2:cc:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: May 13 00:01:33 2026 GMT
Not After : May 14 00:01:33 2026 GMT
Subject: CN=15507fe55ed0d81880e28efcd647dc2752437dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:e8:b8:03:bb:fb:78:d4:7f:87:fe:22:9c:
b8:71:47:7c:91:72:94:44:24:d6:6f:e3:d6:e1:dc:
7a:27:54:f3:1f:bf:65:7e:83:1b:8f:bf:29:fc:47:
e8:f4:d4:d2:d5:81:2e:b5:cf:13:2d:78:bb:4e:00:
3d:4f:4b:17:b1:5a:23:23:8e:31:68:92:73:58:f2:
05:f9:4a:5c:84:0e:1f:87:97:97:e6:ad:0d:74:67:
88:ff:4a:1e:a3:5d:bf:f5:df:d3:1a:d2:b4:5e:22:
30:bb:b9:f5:95:87:e5:2f:7d:9d:51:cd:f5:82:c9:
0f:b8:84:d5:97:e5:69:62:db:7b:59:6e:13:6e:df:
80:85:1f:b8:ed:ea:57:58:0e:fb:10:1a:8c:a3:53:
d2:1f:f6:2f:ba:4e:d7:88:44:c2:1a:b3:4c:e4:c5:
83:f2:a5:d4:e8:71:4b:63:f8:f0:d6:45:4c:77:51:
96:00:a0:45:2e:a4:50:b0:40:a9:20:b0:a3:86:42:
1f:2e:b4:ac:f6:ed:93:64:45:9c:01:e1:14:e5:d7:
7f:a9:e3:a6:1a:3c:b4:c3:ea:e4:28:ff:8c:9f:5c:
5c:71:7d:61:87:c2:57:82:86:85:f7:e7:33:9e:6d:
8f:27:b4:3b:0a:23:7e:f8:21:9c:e5:1d:ca:24:ab:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:7F:E5:5E:D0:D8:18:80:E2:8E:FC:D6:47:DC:27:52:43:7D:C4
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:3c:1d:82:2f:e8:8d:a1:8c:da:18:fe:79:02:2c:97:2e:
9b:a1:a1:e1:14:1c:01:1b:a3:82:d8:87:5c:63:c6:a0:38:1e:
2c:cf:5d:95:a2:88:e5:db:2d:d9:d0:84:6d:92:aa:26:e6:bc:
10:00:e1:79:2c:46:c1:5d:85:a1:6f:4e:5d:ec:a7:ed:35:1f:
3f:96:b9:d6:05:9a:a8:68:6c:43:86:55:1b:7f:42:38:4b:30:
08:ad:d0:8a:20:a4:83:a4:71:fe:74:6e:9d:5a:59:d4:e7:1a:
e0:85:0b:d7:59:ad:1f:f4:10:cf:78:00:f9:b8:e9:bd:99:84:
47:2b:fb:80:ce:20:a8:87:f3:38:cb:9d:57:dd:6b:bb:7a:21:
1b:a4:0d:8b:6c:6d:e0:a2:19:3c:bd:47:17:8b:67:d8:c2:a5:
0e:c6:b8:4d:c1:bc:98:23:9f:2d:18:c2:97:9d:fb:49:1a:bf:
47:89:4d:5e:93:28:37:01:c4:cb:a9:62:99:1c:71:84:69:3d:
89:6d:55:2b:a1:ea:28:e1:36:57:3f:57:7e:41:a7:63:8e:14:
c6:ec:3f:cc:58:0c:a4:02:93:10:9c:eb:1f:38:cc:89:1b:8f:
22:46:ef:04:bb:e1:7a:40:81:2b:64:20:0d:15:ca:25:23:cf:
4b:4f:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:09 2026 by rpki-client