Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: bKxw56WOWFMpMFC+lt03Ityi+bKN5y3s43YqZNBTx+U=
Subject key identifier: 63:EE:A4:1C:11:88:B6:F6:1D:04:CA:8E:E1:60:4D:05:4F:F8:04:9B
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 019E1EA2E0550ADB47A733FBCA6C4957A934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 00:00:51 +0000
Manifest this update: Wed 13 May 2026 00:00:51 +0000
Manifest next update: Thu 14 May 2026 00:00:51 +0000
Files and hashes: 1: GzdfLu-BksDJwE9pfcgaIEcBTJs.roa (hash: 0uOTjDCwE9CC6NlLuvwra/kx1v02mWMFwmjFQbmGkMM=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: MIpxK3JGlgBF3bTmdBMEz5EfD8adzs633YCnwN3uZB4=)
3: ZRhUKW2L993xH1vo8_JfQDNvL-4.roa (hash: dqDDWP+wPoSkNiw6G5+CgUtA2olvFu/u/K+P7q4Sxgc=)
4: u1MF5XqndvG5UGN3sAIiEMCwAmM.roa (hash: 09WdJsC0RyyomkwiBQQyeEsIZCuoxjnDogc7nlWYUzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:e0:55:0a:db:47:a7:33:fb:ca:6c:49:57:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: May 13 00:00:51 2026 GMT
Not After : May 14 00:00:51 2026 GMT
Subject: CN=63eea41c1188b6f61d04ca8ee1604d054ff8049b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:ae:62:f4:95:50:86:15:f0:96:49:d3:4f:
4d:c2:d4:d4:c8:9d:a1:e1:28:0c:d3:d5:10:66:e1:
80:ea:36:22:f6:6a:07:40:25:ea:33:40:35:96:8b:
67:85:17:73:22:98:a4:14:c4:aa:db:64:84:f6:97:
3a:18:c8:cb:46:65:91:56:54:8b:f7:4f:61:53:1a:
5e:d9:66:10:10:8c:ab:64:28:85:a2:17:43:54:7e:
d7:3d:25:61:72:4b:5c:b9:5a:52:3b:35:d0:23:25:
93:af:3a:85:b2:50:4b:bd:4f:08:1b:b1:a0:a2:b0:
8d:c5:a5:62:cc:1a:67:d1:19:9e:91:a7:61:89:b0:
f5:cb:24:62:58:e7:5c:46:08:9e:28:5c:dc:3d:f6:
0f:1d:5e:33:20:0c:5c:a9:15:70:d8:3c:89:54:ff:
0e:eb:e4:6a:c3:00:48:ef:89:0c:88:91:14:79:b0:
eb:5b:96:86:7d:0a:b0:b6:b7:7c:34:57:75:5a:43:
11:dc:6c:c7:d6:a7:26:59:c9:5a:53:19:58:2b:b5:
31:f2:0a:56:0c:1b:0d:5f:89:1a:2f:f8:f5:ce:f7:
76:17:3e:d8:fb:bf:cc:d0:9a:d8:4c:82:16:af:10:
f9:3a:77:80:51:c9:07:11:aa:b9:c5:9a:55:f5:0d:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EE:A4:1C:11:88:B6:F6:1D:04:CA:8E:E1:60:4D:05:4F:F8:04:9B
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:89:b0:ef:87:fc:54:01:67:f8:91:ce:e3:ed:10:97:3b:09:
c3:cc:13:c8:01:4e:94:9c:40:2a:1b:31:90:04:3e:66:0e:ce:
76:ad:3c:e6:fa:16:30:be:d9:93:82:63:e5:b1:08:93:c3:d9:
4b:dc:84:9b:e1:71:d2:a7:9a:01:56:a0:15:3a:8b:98:dc:8f:
cd:0d:33:5e:4c:00:39:a2:e7:cd:a6:f9:48:f5:38:35:0e:c4:
51:78:57:17:68:f6:59:b3:bc:a4:50:7b:78:18:5d:95:ab:80:
ef:7f:75:7c:24:8c:25:f1:f2:0c:0f:bc:91:a1:2d:68:d7:34:
f1:8d:82:d5:a6:3a:e0:74:40:76:9e:8e:1f:97:1d:3d:9c:36:
7d:80:38:ef:79:5f:4e:d1:70:79:90:9d:1a:e5:6f:5b:09:07:
cb:77:43:63:44:42:02:bb:5e:80:98:79:a2:77:16:23:5a:e7:
1f:a0:c0:2e:12:c3:c1:a5:06:e4:7b:2d:37:37:23:78:c8:01:
d5:9e:ef:29:19:c5:f1:46:e3:61:a6:70:8a:dc:84:4e:1e:cd:
12:ef:30:02:98:e5:0d:29:b3:5f:f2:7c:72:f9:51:d9:ec:95:
70:2d:a3:e5:d6:2f:50:eb:ee:87:9b:14:d4:6f:f9:d1:4f:72:
f7:37:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:21 2026 by rpki-client