Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: NdHg3xd9wJRdAOZykt2wE1Jj0VYnHXPnu+saqea6pOw=
Subject key identifier: 39:86:DA:15:97:E1:0A:09:17:72:FA:B1:F7:3E:5A:F8:93:17:C0:F9
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019E205AD1A3607DD05F6883807A296CFFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 08:01:23 +0000
Manifest this update: Wed 13 May 2026 08:01:23 +0000
Manifest next update: Thu 14 May 2026 08:01:23 +0000
Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: wCy6IS3HBu08HGZ5eqnA+grHyCyCmne4SQkMtHOe5So=)
3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:d1:a3:60:7d:d0:5f:68:83:80:7a:29:6c:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: May 13 08:01:23 2026 GMT
Not After : May 14 08:01:23 2026 GMT
Subject: CN=3986da1597e10a091772fab1f73e5af89317c0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:04:56:4f:03:a3:2e:37:ab:bb:84:66:9a:
cc:55:3a:19:99:5b:d4:2e:85:98:c2:57:df:0b:88:
bf:ba:52:d7:1d:b2:bf:8c:30:46:95:4f:23:05:c2:
65:11:36:05:d2:f2:ff:8a:21:f7:f8:de:d4:1a:61:
a9:36:60:6a:9c:61:e5:59:ae:30:b3:9a:e9:c6:83:
36:a1:2f:d0:82:9f:6d:04:d3:10:c8:a2:b7:ea:a8:
9c:49:1f:ae:85:f7:24:15:53:83:44:7c:8f:ee:a4:
35:da:6c:fd:e5:8f:8f:f3:96:3c:0e:5c:32:84:0d:
77:1d:2c:24:89:0d:23:2c:eb:25:cb:7e:5e:cd:a8:
72:1c:e5:23:15:2b:b7:90:1d:b7:0d:e4:7a:36:b1:
2a:32:7a:fe:7f:5b:e3:f3:20:78:52:80:7d:6b:db:
3e:32:b2:c9:16:5f:dc:66:88:8a:09:48:31:37:30:
67:d6:54:fa:c5:df:05:52:4c:e4:0a:63:9a:41:1b:
05:40:17:1e:7d:a3:03:d1:76:49:ac:52:e0:07:15:
04:ed:ba:05:64:6e:a2:46:55:9d:96:91:5e:9d:fc:
c8:6f:55:d2:f7:cb:a7:ee:f7:88:1b:e1:c1:dd:5a:
6b:eb:bd:aa:fc:32:e7:84:27:d4:63:e6:47:f5:b2:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:DA:15:97:E1:0A:09:17:72:FA:B1:F7:3E:5A:F8:93:17:C0:F9
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e7:62:1d:41:97:2d:a4:5d:d6:ab:b5:77:84:89:42:7b:22:
52:29:c3:25:85:84:0a:ea:23:06:5e:72:5d:8e:d4:e5:d7:7d:
eb:bf:b2:62:2e:54:3c:26:a9:35:69:2f:bb:60:f3:75:57:78:
03:c2:bd:7a:dd:10:01:67:be:72:42:4c:fb:03:3f:28:1c:56:
ec:ef:fb:82:b4:37:37:c6:82:e5:8c:10:19:72:b9:eb:4e:7f:
85:9f:72:70:43:8f:5a:ae:f9:11:84:1c:0c:f2:bf:e8:ce:e9:
ce:81:7b:3f:cb:de:11:11:dc:c2:5b:11:86:1f:b5:36:74:eb:
a7:78:f4:12:9d:b7:73:25:3a:99:7e:f8:95:2a:3f:3e:6c:0b:
65:9d:c8:3f:39:82:44:b6:88:41:64:cc:0f:dc:14:78:0f:7f:
4d:2f:56:8a:e7:19:36:e2:76:0d:0a:5c:bb:19:fc:79:32:f8:
07:4b:6a:46:09:5f:5e:d9:02:da:41:b9:84:e7:8b:9f:c4:55:
75:5b:69:1b:c2:6f:85:22:09:6d:9e:bd:cd:29:ad:75:a9:e2:
02:41:da:ae:22:b6:3e:17:18:91:05:83:6c:e6:8b:11:0a:c6:
47:53:bd:e2:8a:43:2f:30:22:f5:dc:71:16:22:b9:3d:3a:a3:
35:19:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:32 2026 by rpki-client