Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: 6jVYPoyN2zHN1WpVnlG/k2lOPfHdU3I3eaXRC+hixzo=
Subject key identifier: 53:7D:8C:55:08:7F:D1:7F:A3:5B:F6:5F:F3:09:EF:02:16:2F:B5:E7
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019E1E35110AD67A3A369211568BA6298216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 22:00:54 +0000
Manifest this update: Tue 12 May 2026 22:00:54 +0000
Manifest next update: Wed 13 May 2026 22:00:54 +0000
Files and hashes: 1: 33AkLs4T5_ew6mnnyWq5Pd5URH0.roa (hash: D7jZ0XkJNtIAmG30h9W8QSsDeq/g0BH6iSc+/oPyUco=)
2: HnCge9v0VMFv4p4n7gbHmPrHGJY.roa (hash: d62k4x4IFTUWXOO9eicQRIOUN/u5FXiup6Gnw1Q4kpc=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: UeXeuyXYsNSjFTE1GdmYTKmg38D97UBsP7jtXLHUjiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:11:0a:d6:7a:3a:36:92:11:56:8b:a6:29:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: May 12 22:00:54 2026 GMT
Not After : May 13 22:00:54 2026 GMT
Subject: CN=537d8c55087fd17fa35bf65ff309ef02162fb5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:35:00:e0:3a:02:a0:78:02:26:9f:11:79:
36:9f:17:60:24:a9:50:f9:11:0e:da:4a:e7:30:29:
4a:18:ec:d3:c4:fa:83:75:97:0e:3c:ab:d3:08:ce:
7b:e6:14:5f:d6:ee:3a:c2:6b:53:a4:ec:c9:3e:55:
fc:45:01:4e:2a:9e:09:2d:81:69:99:1b:91:72:6a:
eb:37:d9:61:5b:54:b7:0d:89:b3:5b:14:0d:c9:2d:
fc:af:d0:dd:b9:be:71:0f:00:da:ae:32:f2:01:76:
6f:bd:ce:25:ef:1a:a8:ae:5a:ee:94:07:d9:53:0e:
25:7c:13:1b:b4:6f:9f:0e:36:30:ff:c0:07:57:80:
69:21:4b:e2:d7:72:55:86:10:0f:c7:03:23:3b:4b:
5d:a1:f7:21:18:37:33:15:57:b1:ba:65:37:4a:1d:
a2:9e:46:35:05:91:e4:d4:9a:1f:8c:5c:d1:ef:22:
ad:16:f9:51:d9:1c:65:45:c8:74:3d:67:6c:3e:ac:
98:8d:97:88:67:ad:db:e7:9d:ab:7d:86:f5:aa:2e:
66:a6:23:6a:12:5d:00:aa:ed:eb:9d:55:ad:f0:41:
4d:02:6d:bc:0a:27:ec:2e:cf:85:ee:0e:0b:08:9c:
f0:f4:76:c9:0d:05:76:09:f0:03:05:53:b7:97:8c:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:8C:55:08:7F:D1:7F:A3:5B:F6:5F:F3:09:EF:02:16:2F:B5:E7
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e2:1f:e1:62:fc:6c:4e:d3:80:5f:88:21:6e:2b:5a:6a:42:
91:3f:db:65:ed:9d:35:07:61:15:df:c8:b1:6b:06:ab:09:d6:
0b:05:ca:00:9e:46:c1:49:cc:90:c2:9b:20:bf:66:75:aa:f4:
03:bd:6f:00:50:fd:cc:62:42:2d:ed:51:a9:30:d8:f0:ab:d2:
3f:d7:04:d6:d3:3b:01:3e:7f:60:9d:1f:f9:6e:83:7c:97:9d:
66:88:80:c9:0e:47:23:c9:b3:f3:a9:71:c3:bc:f3:1a:c5:a1:
e8:a2:fb:37:bd:f8:83:83:3a:24:be:c5:db:38:21:bf:54:5f:
b3:d0:1d:e0:ae:9f:11:a3:56:71:0a:60:c1:5c:e9:12:f4:53:
fb:30:01:18:f8:ff:7b:c4:8d:09:b5:b9:74:aa:29:84:03:90:
37:10:a2:fe:ee:d1:54:95:08:59:d8:03:d0:b0:68:7c:6f:4e:
4e:3c:e1:43:a8:f7:6b:fb:47:84:19:05:bc:d0:f7:3a:8a:39:
d5:55:3a:8e:d3:3f:e5:3b:a6:af:81:c3:17:9e:43:79:5a:15:
55:0c:02:0a:ed:2d:44:89:b7:af:c0:55:00:80:86:5d:77:77:
90:2b:67:9e:a8:17:d3:83:82:32:9a:5a:1f:28:39:24:ce:ea:
de:ee:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:28 2026 by rpki-client