Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: v+Dju6zGfDUytsrXCimY8xZKk8jE54jYDjLK6Qmmuz4=
Subject key identifier: 04:7E:A9:5B:35:98:49:44:07:D4:B1:6B:BE:75:AD:83:97:83:40:C8
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 019E205A5FB63634B7F0993F0EDF3E540AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 06C4
Signing time: Wed 13 May 2026 08:00:53 +0000
Manifest this update: Wed 13 May 2026 08:00:53 +0000
Manifest next update: Thu 14 May 2026 08:00:53 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: RoRjjDofNFYtJhJbtbKl8GGdBm+LbN1A9guOXAAI/Jk=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:5f:b6:36:34:b7:f0:99:3f:0e:df:3e:54:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: May 13 08:00:53 2026 GMT
Not After : May 14 08:00:53 2026 GMT
Subject: CN=047ea95b3598494407d4b16bbe75ad83978340c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:80:61:28:2a:6e:b9:1d:53:a2:b4:6e:a1:
86:62:6c:39:9c:2f:65:c5:cb:7b:7d:7b:a2:d3:53:
7b:cb:4d:21:a8:19:5c:e6:f6:56:a0:4d:4f:0e:8e:
2b:a7:a5:8a:25:62:49:2c:8c:f6:55:03:4d:45:76:
38:cd:bd:92:0a:35:05:43:95:9f:81:40:d0:9e:a8:
e7:ff:ba:f5:26:3a:fa:c6:73:c5:46:05:0d:9b:22:
ea:9a:94:4f:30:f8:21:f2:a9:0b:d3:0e:14:63:b1:
38:41:11:b4:11:1a:e3:9c:ba:8e:6a:81:26:74:cd:
1e:d1:df:da:4c:4e:c1:22:d4:bc:06:1c:e1:31:8e:
35:16:1d:4d:51:04:a2:af:74:d9:8c:d0:ab:c9:d3:
ca:ce:07:0e:16:7e:c9:8c:47:9f:cb:b2:d0:9c:64:
9e:8a:a0:a5:5e:3b:e7:53:89:5f:d9:44:26:d2:37:
1e:d8:c1:5d:02:87:f4:a2:78:63:ec:2b:e2:3d:ca:
d7:19:c9:60:d1:74:da:82:c7:4b:29:97:b6:b6:b6:
86:92:74:d1:75:dc:7c:31:0a:54:4c:0a:94:58:68:
3c:57:a9:e8:8b:4a:b3:45:83:31:63:4a:61:f9:61:
d2:f9:15:61:1c:04:d2:70:a7:31:36:b8:fa:87:b3:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7E:A9:5B:35:98:49:44:07:D4:B1:6B:BE:75:AD:83:97:83:40:C8
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0c:2f:fa:1e:ec:f6:0b:13:fb:ae:d1:9c:33:13:35:dd:c4:
69:49:17:7c:bc:35:4f:36:cd:68:51:a9:aa:3b:91:43:13:67:
ae:5f:1b:f2:bd:90:b3:dd:fc:70:d0:29:0f:cb:cb:e5:60:14:
d0:a4:60:7d:7f:db:47:25:54:c0:04:63:a0:13:a6:63:48:14:
82:24:10:bf:e7:48:07:ef:71:a4:d8:48:ba:a0:b9:1e:36:a7:
4b:c1:a4:ba:f6:ac:21:e2:c5:f5:4f:06:36:97:13:d6:2d:56:
2e:57:ab:ae:87:0a:7a:29:f0:6f:36:43:98:76:21:58:c2:71:
bd:89:bd:da:12:8d:a5:f4:99:89:25:58:4e:d3:11:96:c9:d1:
70:85:02:0d:b2:6a:24:6b:42:d4:92:bd:f6:24:75:3c:e1:d9:
db:76:b3:a7:22:41:a3:5b:90:0d:9f:8d:85:1c:49:c0:6a:2e:
0e:35:91:d7:30:7b:03:85:78:89:f9:13:74:dc:08:0e:63:f5:
75:ee:98:b6:42:3c:8f:d8:42:0b:13:95:ff:66:6b:64:52:ca:
1a:0e:c9:37:b9:17:76:e4:12:18:e5:93:d5:2d:07:df:7b:9e:
18:80:fb:e2:56:89:b2:c6:70:56:fe:df:be:f4:26:70:35:99:
31:08:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:41 2026 by rpki-client