Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: Cqs3AmCVPXxHshreHH6yXMQmJ5YV4p20bmYHkDV0rAM=
Subject key identifier: C5:6E:3A:69:6C:D2:9C:DC:8A:E0:B8:BD:20:B1:79:A3:5E:EF:11:03
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019E1F111DCC2DF36783C35C0A6F6B520996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1652
Signing time: Wed 13 May 2026 02:01:15 +0000
Manifest this update: Wed 13 May 2026 02:01:15 +0000
Manifest next update: Thu 14 May 2026 02:01:15 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: AhIXGU7/V6HKRg1mPi2LtvUso57hkiNoFnBjYIxyA/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1d:cc:2d:f3:67:83:c3:5c:0a:6f:6b:52:09:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: May 13 02:01:15 2026 GMT
Not After : May 14 02:01:15 2026 GMT
Subject: CN=c56e3a696cd29cdc8ae0b8bd20b179a35eef1103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:7c:9b:58:4c:0b:d1:77:35:53:2f:03:26:
7c:f5:ca:d1:b7:57:7e:1a:dc:93:1b:55:38:94:35:
03:49:7d:7a:6e:46:ec:df:9e:79:4a:e5:68:f6:8c:
17:5e:1a:de:c3:9d:00:8e:51:89:fd:16:bf:c6:e0:
86:fd:0e:2a:2e:30:61:b3:a6:e1:8e:fe:ce:41:25:
79:26:56:70:ab:63:d3:74:39:3c:1b:45:e4:22:19:
60:25:20:03:9b:b8:5f:69:92:cb:ca:16:f2:41:b2:
e7:90:2f:d8:7f:b9:d9:04:ea:be:8c:e9:f9:83:86:
7f:17:a8:50:6b:95:65:44:1f:49:c9:e1:3b:8c:1b:
5d:80:58:a4:b8:c0:98:97:70:1f:6c:84:b3:d8:93:
ae:1f:1c:7c:ec:80:d4:72:52:5b:2a:c9:38:5a:cd:
59:91:11:7c:54:88:e3:a2:b9:32:2b:8d:a9:b3:15:
d5:26:5d:ea:f3:c5:c0:31:61:89:c2:b1:6d:1d:b4:
24:c8:92:47:18:9f:33:93:40:3d:bc:82:ad:ac:76:
60:2d:90:c5:4c:e4:84:cb:d5:8e:35:1b:13:04:54:
22:f7:00:34:cf:05:22:6a:99:fa:06:2a:13:11:7c:
4b:8c:ff:21:64:0e:57:96:54:1f:20:b1:93:db:4d:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6E:3A:69:6C:D2:9C:DC:8A:E0:B8:BD:20:B1:79:A3:5E:EF:11:03
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:37:1f:e3:c0:e6:1c:1d:d1:c2:b7:80:5f:6a:16:32:6e:27:
e0:38:8a:43:97:48:be:b3:fb:41:5f:32:7b:16:72:d1:2a:47:
ac:37:88:8b:87:d9:ae:ba:89:35:cd:f1:6a:02:e2:4c:45:0e:
7f:b4:f9:b8:cb:85:5f:f5:00:95:c8:07:ae:eb:14:8a:58:80:
ee:7b:35:9a:23:5f:7b:bb:c1:88:26:c1:12:51:ad:fa:7b:e1:
05:d8:37:23:88:ca:af:e4:97:fe:7f:1d:45:b4:9a:aa:36:f5:
9f:45:4b:84:74:bc:e3:17:fd:50:15:7d:74:53:ce:15:a1:2d:
d7:26:57:72:87:47:28:74:b8:54:b2:96:de:72:3f:82:b1:c9:
d6:45:fc:fa:16:4b:e9:6a:3f:f2:e1:86:09:2b:7c:61:5b:a9:
d6:7b:76:57:bb:f4:95:ad:48:60:a8:35:d4:c5:03:b0:ec:71:
f9:0f:50:1c:fb:04:9f:ac:d0:77:72:82:f5:d8:9a:a6:62:cd:
ae:93:e8:7b:76:4f:44:8c:49:dd:89:e0:05:82:ca:1f:2e:0e:
5f:a5:e7:ef:a0:3a:8e:69:61:50:a5:d9:6f:7b:1d:45:58:65:
30:71:95:ea:2c:19:e8:f9:df:1c:79:1d:42:e1:84:76:9f:1d:
10:74:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:03 2026 by rpki-client