Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: wCb2ujHk7seAEM+hh+OgMe3czYQBUD60slMSzi1+gyg=
Subject key identifier: CF:84:91:E7:8D:65:17:70:1C:EB:07:74:13:F4:FB:FC:21:F4:77:59
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019E1EA342DD951BED374878215200FEDB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: iSvKkPGnBAdYi2Du/6kvafoyoGH5N9+VfijjShQsR4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:42:dd:95:1b:ed:37:48:78:21:52:00:fe:db:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=cf8491e78d6517701ceb077413f4fbfc21f47759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:05:98:0f:0d:39:f3:49:88:8c:63:94:f9:
79:d9:03:b6:65:bf:b6:f1:c1:81:1e:8e:ca:27:4c:
15:bc:26:89:ad:79:ab:e0:e5:93:dc:cf:0a:86:ff:
2e:9f:a6:1c:10:d3:f2:db:21:ec:82:85:b9:b3:ed:
20:a8:1b:96:01:d5:47:65:82:18:68:3b:b5:c9:c1:
29:fb:c8:93:b1:d9:9b:c7:38:b1:92:9c:f4:93:4e:
7a:7c:dc:26:96:07:bd:8d:a5:9f:31:cf:14:78:80:
c6:7c:00:48:24:9e:80:0b:9c:25:64:40:a8:5e:bc:
19:a6:4e:cc:c2:b6:8d:aa:6c:ae:02:f6:c6:e1:40:
9e:5b:40:ed:52:0e:f4:96:60:ed:df:7d:f2:53:f2:
b8:7c:80:b2:d7:25:eb:e6:63:6a:38:97:0d:49:96:
35:c8:55:d6:59:37:ee:54:64:1e:d8:31:a2:85:2e:
7c:e9:14:8f:cc:2e:b7:41:01:95:29:a4:26:fe:78:
f3:c9:72:e9:b2:3f:3a:de:a6:ae:b8:a5:58:4f:db:
eb:14:cc:ca:c1:21:2a:e6:29:0f:dc:85:8a:37:43:
2b:05:bf:ec:9f:2e:ad:be:84:c1:bd:2a:ca:23:02:
61:7e:81:e5:fc:bd:00:bf:22:35:64:de:40:96:30:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:91:E7:8D:65:17:70:1C:EB:07:74:13:F4:FB:FC:21:F4:77:59
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:af:da:15:c4:01:18:e6:44:10:79:00:22:4f:14:4c:bc:
f1:89:5a:c0:65:4d:a4:6b:d3:2d:f5:c8:e3:45:f2:b5:bc:88:
4d:65:d5:4a:f1:f0:71:8d:5f:e1:76:f3:54:62:d8:18:19:56:
e9:94:b1:63:21:dd:e3:14:f3:a9:e5:45:23:b1:8d:6d:10:53:
08:4b:b9:2b:1a:8a:1a:e5:33:bf:88:37:a2:d0:4c:ef:24:d5:
0a:47:6f:33:4a:c3:77:69:47:7a:0c:f2:4c:40:f7:a6:a5:16:
a9:98:32:57:d6:1f:00:4d:55:08:7d:d3:ca:42:1c:e5:c5:d4:
10:c5:58:e9:dc:da:94:6d:08:84:3e:11:de:c0:02:6e:41:db:
1d:ef:01:32:c1:49:17:00:dc:13:af:be:b2:90:31:fb:6d:bd:
09:ef:fd:12:ce:f7:c1:2d:fc:0b:66:0f:dc:b9:da:51:82:24:
eb:99:05:df:b2:8c:9e:5b:e3:c2:e0:ff:6c:f0:3c:60:ae:42:
fb:cb:28:35:00:40:68:4d:20:e7:c8:f1:34:39:af:f1:48:bb:
a9:f4:03:d0:7e:8e:a5:62:db:ea:45:33:ce:a6:48:0e:8d:88:
fc:a5:80:4e:52:ce:0c:06:60:f6:8f:9c:25:9d:f2:4b:c4:6c:
0d:85:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:30 2026 by rpki-client