Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: NV1gGjCmqX55eqip+qdphyztkgcogwHA238q7Y99CKg=
Subject key identifier: C6:B1:CD:5D:87:AE:23:0D:D8:92:DC:36:31:0F:44:BF:40:5E:39:9A
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 019E1FB5BB9C1D0BE7923D9F8BEC84FCF2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 05AD
Signing time: Wed 13 May 2026 05:01:03 +0000
Manifest this update: Wed 13 May 2026 05:01:03 +0000
Manifest next update: Thu 14 May 2026 05:01:03 +0000
Files and hashes: 1: aSIDX5WLR1A1a-e0CCn8Rm1sYHc.asa (hash: A2WMcHk2uY0A/akcC7UBsiivFyfzZonC6SeSkOH6b8Q=)
2: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: GWfc/HkOB+iLYn4bHWnjq/u8VG/Q5w1tCKrS7StX2UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:bb:9c:1d:0b:e7:92:3d:9f:8b:ec:84:fc:f2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: May 13 05:01:03 2026 GMT
Not After : May 14 05:01:03 2026 GMT
Subject: CN=c6b1cd5d87ae230dd892dc36310f44bf405e399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:26:7b:08:3a:30:d8:b2:9b:a9:df:47:70:
f2:8b:04:44:18:a8:db:ca:6b:c7:e8:2e:22:c5:53:
c6:f2:81:19:c7:59:86:ac:d1:e9:65:7c:7a:7c:5b:
6b:52:75:07:aa:93:70:58:13:e6:0b:5b:c1:74:a6:
a5:89:c3:3c:be:d8:86:b0:01:a1:77:81:9e:85:ce:
70:86:ff:4b:77:05:5a:93:58:fb:6e:46:49:b0:4b:
b8:53:25:27:cf:b8:ba:e9:2b:03:75:16:09:9b:71:
03:73:bd:ae:4a:cb:24:92:30:39:92:1d:6c:b0:1f:
55:9c:66:7d:31:e3:e4:ae:a7:2d:f4:d7:b8:9e:a8:
99:bd:60:f4:78:85:f7:01:4c:0b:6f:08:c8:49:28:
71:d8:0e:6a:74:b5:a7:1e:10:2e:bb:2f:4a:8d:11:
c8:81:73:9a:80:2f:3c:07:10:e8:9a:79:cf:f2:b6:
30:18:eb:fd:21:ed:d1:c9:11:30:69:f1:58:0b:68:
1e:3b:51:59:ef:2b:85:ae:e1:b5:ef:b4:b8:12:2b:
62:a3:23:9f:f4:7a:46:3f:60:79:f1:70:a9:11:58:
3d:48:80:ab:12:87:66:70:c0:7f:ed:5f:68:33:1a:
8d:e0:67:f0:75:8e:c3:86:14:69:6a:cb:02:ed:49:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B1:CD:5D:87:AE:23:0D:D8:92:DC:36:31:0F:44:BF:40:5E:39:9A
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:9f:62:da:22:ac:22:b0:24:e8:ef:b3:b2:4d:31:ad:ea:
ba:06:e9:ce:1c:44:47:94:41:5d:52:ad:00:1a:18:29:25:2c:
eb:02:7f:1a:27:28:0d:66:49:8d:10:21:4c:cb:d8:5f:aa:61:
39:b3:58:18:1c:80:a0:40:76:d3:fa:1f:16:82:0a:62:70:f0:
df:c1:c9:26:0e:a5:93:78:35:a2:74:02:d1:6b:a6:4c:90:c1:
51:7c:e1:30:a0:ad:7b:ed:68:79:9d:69:6c:68:86:7a:a4:35:
ab:87:f1:2c:90:ad:99:23:90:03:25:79:97:25:d7:49:59:46:
05:7b:4e:b2:26:72:72:09:66:da:a9:b8:d0:74:a9:bf:58:bb:
3f:8e:f0:7f:3a:e5:87:4e:c3:f0:00:97:1b:f2:73:20:92:d4:
3f:ce:2f:6e:33:74:54:7f:39:bd:35:c3:04:35:19:40:45:0b:
51:2c:d2:39:7c:70:b8:e8:7a:0f:88:7c:e8:5d:01:6c:00:77:
dd:12:77:43:b2:ca:06:10:d5:43:70:d0:2e:55:10:9b:4e:35:
07:9d:db:a7:d9:5a:3c:f2:8b:46:b4:1f:26:98:1a:51:0e:8b:
aa:96:4c:bd:9a:34:22:1b:ee:ca:b9:91:31:39:b2:ee:e6:1b:
47:75:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:55 2026 by rpki-client