Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: 6n3XMZc32myzoCuBiIyYMlbCoKsV/RVXWgItHJ+S51w=
Subject key identifier: 15:2F:84:76:C6:48:FE:B5:0F:1B:CB:26:1C:80:22:7A:77:05:40:CE
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019E1F7E8E58551C72F5E3799785747E1B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 0309
Signing time: Wed 13 May 2026 04:00:48 +0000
Manifest this update: Wed 13 May 2026 04:00:48 +0000
Manifest next update: Thu 14 May 2026 04:00:48 +0000
Files and hashes: 1: TvCeC-CTMvUOvfqvZDepdi4lqnQ.roa (hash: ESVtJ3kouBpjTr4WqJWzhzotaZoW4Cj/KB3SLHg/1MA=)
2: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: vS1nYM4aLbdhKloxL9GdXyygAk1uc3EKo1iG4Qs0nJs=)
3: yQ4lwVZKtZ37ncDrw-J5ETPGiug.roa (hash: YOCERM8UiZIP0yKzgGY8Yras8dDVp4zqydgV9vmHZ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:8e:58:55:1c:72:f5:e3:79:97:85:74:7e:1b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: May 13 04:00:48 2026 GMT
Not After : May 14 04:00:48 2026 GMT
Subject: CN=152f8476c648feb50f1bcb261c80227a770540ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:8d:34:fc:e2:d5:2e:a3:08:24:ee:5e:9a:
34:63:c3:20:22:c4:3f:8e:9e:c0:a0:22:52:12:3a:
d2:f6:ea:5e:41:d5:06:7f:66:a4:c4:8c:2c:cc:97:
ff:29:9a:94:4a:64:ac:78:c8:f4:e8:31:31:20:f3:
25:2e:79:0f:86:f2:9d:9f:da:27:ca:93:7a:11:bd:
95:da:f1:92:01:51:e4:f5:e4:72:b4:a4:ba:01:34:
a0:b6:09:bf:f9:e1:77:11:ff:22:e2:87:27:bc:ef:
31:7d:05:8a:ec:9a:28:c2:76:89:61:6c:77:0e:b4:
13:af:df:7b:d9:07:ec:34:e4:1e:a0:94:63:1c:2c:
f3:a2:71:6c:1e:b3:a5:30:9e:af:84:d5:92:fb:bc:
2f:29:63:87:f5:d7:22:69:d5:c1:ae:e5:4a:8d:41:
01:97:c9:fd:22:69:2d:d5:b6:34:69:18:c3:b7:a9:
13:cf:9e:15:35:a2:6c:27:a2:62:a5:70:64:6a:38:
f0:ea:7e:fd:ee:93:01:a0:af:d7:2d:88:f4:90:1c:
6b:85:8b:77:dc:cb:fa:37:7b:d7:a9:fa:7a:a4:ed:
9a:d1:3d:fe:8f:a7:e6:03:6d:f3:24:73:a8:b0:c3:
8d:4e:15:43:34:4b:da:1d:63:d2:d1:02:98:5a:7a:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:84:76:C6:48:FE:B5:0F:1B:CB:26:1C:80:22:7A:77:05:40:CE
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:73:64:dc:9e:30:31:c7:08:1c:68:22:78:b3:91:e6:54:5c:
a9:59:c3:c5:31:15:f4:9f:b1:d1:80:37:f3:70:5f:6d:f1:60:
b6:d6:ef:d1:0f:53:f7:08:3d:28:cb:f4:80:7c:42:99:e7:83:
62:26:02:90:b5:9e:4f:8d:e0:0b:56:2c:73:01:a9:59:2c:a5:
74:3f:df:c0:31:44:2e:31:2c:9c:31:a5:e9:17:6a:fc:90:09:
8a:db:9c:75:23:52:c6:8e:ed:4a:c2:16:32:05:69:77:35:1c:
38:25:eb:0a:8f:d5:f0:1c:43:02:c9:f7:2a:51:08:c9:91:65:
13:1c:03:3e:b8:85:31:7d:c4:04:33:4a:18:02:af:33:6f:d6:
a7:fa:5c:12:4f:cd:02:a0:ab:f1:cc:17:e5:2b:a5:a3:e3:c2:
1f:07:bf:27:86:f8:5b:cd:1f:c6:d6:80:1c:a6:1c:be:4b:5d:
ca:e3:f1:02:78:85:1b:80:7a:0a:51:27:61:7b:6e:ec:0d:23:
42:a0:db:0e:36:95:00:24:fc:42:8e:99:53:1f:b2:56:c2:2e:
bb:83:8b:09:45:bc:a4:d4:cc:2c:24:7f:27:7a:4e:a4:49:72:
79:f8:77:a2:8a:cd:9c:61:bd:93:d0:98:03:a0:a6:14:c8:5f:
88:4b:5c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffo5YVRxy9eN5l4V0fhszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc4MmNkN2JiOTIyY2E0YmM2ZTgwZTc4NTdmNDkyMmY1
YzIzYzQwHhcNMjYwNTEzMDQwMDQ4WhcNMjYwNTE0MDQwMDQ4WjAzMTEwLwYDVQQD
EygxNTJmODQ3NmM2NDhmZWI1MGYxYmNiMjYxYzgwMjI3YTc3MDU0MGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1+NNPzi1S6jCCTuXpo0Y8MgIsQ/
jp7AoCJSEjrS9upeQdUGf2akxIwszJf/KZqUSmSseMj06DExIPMlLnkPhvKdn9on
ypN6Eb2V2vGSAVHk9eRytKS6ATSgtgm/+eF3Ef8i4ocnvO8xfQWK7JoownaJYWx3
DrQTr9972QfsNOQeoJRjHCzzonFsHrOlMJ6vhNWS+7wvKWOH9dciadXBruVKjUEB
l8n9Imkt1bY0aRjDt6kTz54VNaJsJ6JipXBkajjw6n797pMBoK/XLYj0kBxrhYt3
3Mv6N3vXqfp6pO2a0T3+j6fmA23zJHOosMONThVDNEvaHWPS0QKYWnqV6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUvhHbGSP61DxvLJhyAInp3BUDOMB8GA1UdIwQY
MBaAFKpngs17uSLKS8boDnhX9JIvXCPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYt
YjQzMGU4ZGU3NzQ3LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYtYjQzMGU4ZGU3NzQ3
LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnNk3J4w
MccIHGgieLOR5lRcqVnDxTEV9J+x0YA383BfbfFgttbv0Q9T9wg9KMv0gHxCmeeD
YiYCkLWeT43gC1YscwGpWSyldD/fwDFELjEsnDGl6Rdq/JAJitucdSNSxo7tSsIW
MgVpdzUcOCXrCo/V8BxDAsn3KlEIyZFlExwDPriFMX3EBDNKGAKvM2/Wp/pcEk/N
AqCr8cwX5Sulo+PCHwe/J4b4W80fxtaAHKYcvktdyuPxAniFG4B6ClEnYXtu7A0j
QqDbDjaVACT8Qo6ZUx+yVsIuu4OLCUW8pNTMLCR/J3pOpElyefh3oorNnGG9k9CY
A6CmFMhfiEtc2w==
-----END CERTIFICATE-----
Generated at Wed May 13 13:13:43 2026 by rpki-client