Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: lBXRuCisjWVpHbNXfpr/n5PSjbGppTn2Rei02zDFIK0=
Subject key identifier: A7:A5:7A:79:3C:62:55:4E:68:F7:EA:06:73:FB:05:1A:E0:67:1F:0E
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 019E1DC75215895E059468A7B71CE47446DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: 3bCsHEoLCTiW9Cd56flxqs8Ae3u4V5eyjYVVzaeeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:52:15:89:5e:05:94:68:a7:b7:1c:e4:74:46:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=a7a57a793c62554e68f7ea0673fb051ae0671f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:30:ac:f8:57:82:c5:5c:eb:7e:8b:51:ac:
fe:b0:19:9b:3f:bf:b5:03:6c:42:10:86:82:f9:ea:
d4:72:c2:e8:a3:b2:ef:e1:bf:b7:74:27:39:ca:43:
cd:ae:d8:9a:7c:bb:95:53:55:83:01:77:d3:ac:4d:
5e:46:c5:dd:97:d8:90:ca:c7:fe:90:bf:3f:00:10:
55:f5:83:ef:b9:8d:5d:af:53:01:f5:1b:46:6f:9b:
60:2e:ab:f1:da:36:82:26:9f:4b:77:30:53:73:1f:
95:80:7a:4e:2f:24:32:fa:ef:8a:bf:8b:af:e8:fb:
54:d3:ce:ec:40:db:c3:c0:37:be:fe:e6:90:a2:cb:
5e:c8:74:bd:2b:85:13:32:6f:fc:a5:04:42:00:8c:
95:1d:40:d3:0c:9b:07:db:3d:89:1a:88:c8:68:cd:
17:43:65:7e:9f:dd:7c:82:42:b5:f2:62:36:ec:1c:
aa:8b:fa:4f:b6:b6:f2:89:e1:17:fc:1d:48:0d:7c:
2c:3e:ef:4b:b8:39:6c:4c:4f:6f:a6:1a:e2:8c:65:
ce:6d:24:46:41:a1:11:f0:5b:e8:78:dc:e9:1a:0c:
b2:0f:8a:80:b4:16:fd:65:11:0b:69:a6:f3:b5:2f:
d4:68:4b:26:75:91:51:02:fc:3d:51:d5:07:0a:ba:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:7A:79:3C:62:55:4E:68:F7:EA:06:73:FB:05:1A:E0:67:1F:0E
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:91:f4:78:54:61:82:03:a5:71:0f:d7:a6:a2:17:2b:84:cb:
b1:1a:5e:4f:30:1d:63:1d:3b:80:5d:32:b8:a8:14:10:23:fc:
5d:9f:10:b5:91:71:90:45:41:7a:ec:92:12:86:9e:60:d7:27:
49:3a:ad:60:4c:e9:37:67:da:e7:3a:c4:8b:c9:9b:a4:7b:f1:
46:f7:23:47:1c:be:2c:e1:38:a6:8d:db:60:bc:fc:27:d2:a1:
07:d6:fb:02:ba:f8:9e:9e:c7:2b:e0:54:6c:98:a3:28:e0:96:
19:1f:23:fa:ac:aa:91:bd:3f:6c:21:10:34:0a:ce:e4:10:c8:
22:14:a5:26:0f:8d:b4:8b:73:0b:8f:04:48:25:9e:48:91:0f:
35:d7:16:6b:f3:bc:bf:bc:69:58:33:b8:c2:33:2b:a6:f7:af:
62:01:23:c4:fb:5d:45:b6:5c:6f:af:64:d2:fe:c5:25:88:d6:
79:a6:8b:bf:08:2b:cd:32:9c:de:d5:79:68:7d:0c:b0:a5:1b:
96:f7:2b:4d:36:1b:f0:8f:94:01:5e:21:71:f6:c1:cc:14:1d:
4a:87:36:64:a4:84:cf:18:a2:76:30:6d:8b:bf:9b:87:4c:26:
20:2b:f3:54:06:1f:9c:82:79:97:3b:7e:45:03:f5:79:f5:f4:
fd:5e:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:33 2026 by rpki-client