Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: 00ibViWDz2LtgdZwLMMz5Ra2X27k79v2FvkIbjj3M+0=
Subject key identifier: AF:12:62:7F:E3:1F:01:C1:86:E1:B4:91:4A:54:77:F5:C1:C7:41:06
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019E1E6C13413C0F79453F396C8F8DF088FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 09CD
Signing time: Tue 12 May 2026 23:00:59 +0000
Manifest this update: Tue 12 May 2026 23:00:59 +0000
Manifest next update: Wed 13 May 2026 23:00:59 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: 8IHGJyRT3IVejnps6vFwJ4nKURDxZQptsHtYoqZjLIY=)
2: R9Y6GrgbgpdjEIL15ST3hGQBv8A.roa (hash: ScvlNZwo3odOWYF4CC8lvyezDpeI3+SX0JX8xZyPseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:13:41:3c:0f:79:45:3f:39:6c:8f:8d:f0:88:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: May 12 23:00:59 2026 GMT
Not After : May 13 23:00:59 2026 GMT
Subject: CN=af12627fe31f01c186e1b4914a5477f5c1c74106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:00:47:b2:6b:17:1d:42:49:6b:d0:f5:50:
f4:93:05:c4:52:3b:33:54:4c:58:f2:07:bd:8a:33:
24:ee:aa:a5:5c:8c:b4:51:20:f0:de:58:e5:e4:94:
2b:7a:75:c1:d2:97:25:38:67:3d:16:c6:20:68:da:
ab:09:a8:20:18:45:b3:7d:98:e6:49:c2:a3:a3:21:
a1:8c:f1:fc:fd:73:b9:86:e7:69:f2:b7:ce:e4:91:
92:55:b1:b5:a4:88:91:40:3e:ee:7e:1e:ee:c9:e2:
30:3b:26:85:e9:88:62:c2:10:f3:9e:c7:2b:91:25:
f2:42:08:93:b1:65:43:3f:e3:9e:cc:a5:01:39:74:
98:c0:7f:76:99:5a:46:8e:ae:6a:ee:ab:ad:13:2d:
3a:5a:f8:f8:73:66:62:5b:6a:ad:88:bc:2b:c7:56:
74:0e:bf:91:2e:48:66:af:f8:a6:02:21:e2:2f:b9:
1a:80:43:bc:8f:06:2f:1e:fe:49:f3:41:16:c1:1e:
a9:43:3c:ef:f4:04:0e:4a:67:11:ce:56:08:46:04:
46:2b:1a:be:39:04:00:e4:fd:e9:ed:b3:93:71:30:
27:47:ad:9c:53:ea:cf:97:45:e9:66:46:be:1e:df:
e0:31:0e:6e:76:4c:16:9a:b8:50:5c:0d:7d:13:b5:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:62:7F:E3:1F:01:C1:86:E1:B4:91:4A:54:77:F5:C1:C7:41:06
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:c8:9c:b4:85:4e:ea:83:b7:b0:ea:98:6d:6e:70:05:08:
21:fb:56:79:61:08:b8:6f:df:7c:5d:4d:99:28:8d:98:89:d9:
5c:a9:f7:48:f1:77:77:0d:a4:ba:7d:14:19:5c:73:cd:37:54:
ea:b3:83:49:99:64:1b:cb:20:80:54:53:6c:db:50:b6:9e:a4:
05:64:9a:4f:40:8a:5d:dc:8d:78:fc:72:17:ef:35:e9:bc:16:
b6:c4:18:c6:1a:af:87:39:2e:34:39:48:c4:de:62:aa:ea:fc:
ea:3c:33:da:46:82:26:33:8b:f6:aa:aa:90:d7:d4:99:dc:5b:
0b:49:d9:af:fd:6f:24:01:ac:04:79:d4:b1:4a:97:b5:90:b2:
81:66:ce:b4:81:55:6a:92:6f:65:36:3e:28:f8:6e:dd:30:c6:
3b:b7:30:ba:5b:57:a0:1a:dd:ad:31:33:b0:d4:a9:f0:34:f9:
3e:42:75:f8:82:a5:81:52:86:35:46:8f:90:57:b5:f4:bc:9d:
d9:4a:1d:2c:49:80:af:bb:7e:87:24:a9:8c:bd:6a:56:71:e9:
a2:5d:b5:0f:09:62:29:45:42:d2:ac:0f:4d:8f:aa:a2:54:c2:
d6:05:8c:70:6b:1b:8a:36:a5:b6:fc:2d:a6:02:ef:9e:0f:cd:
96:a8:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:44 2026 by rpki-client