Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: Rs9+6X3hdcTWqi4tLIHjdWHFpJYKmSEUsBKcu+Snbfs=
Subject key identifier: 51:3E:68:26:0F:91:D4:56:7B:2E:1E:D5:D2:3F:71:AD:6D:A0:92:1F
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 019E1F7F281B5DCE0FEB553C0DA58317FF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:01:27 +0000
Manifest this update: Wed 13 May 2026 04:01:27 +0000
Manifest next update: Thu 14 May 2026 04:01:27 +0000
Files and hashes: 1: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: Iv9+zveFX5Jg+PVqsHZRKLUXX1G4Ys80pfwSI6T4upU=)
2: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (hash: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE=)
3: lWaDtpARbUJ2WwQgVuDOZ2ytV1Q.roa (hash: jLR4Kee9nPopi72xWjqK7/G5TtGJxgI8fqStb9xXKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:28:1b:5d:ce:0f:eb:55:3c:0d:a5:83:17:ff:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: May 13 04:01:27 2026 GMT
Not After : May 14 04:01:27 2026 GMT
Subject: CN=513e68260f91d4567b2e1ed5d23f71ad6da0921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:ce:62:4a:da:e8:7b:e7:af:74:04:70:12:
4a:08:b2:cc:a6:73:41:0a:75:41:22:00:bf:93:12:
5c:cb:c0:ce:a2:95:b7:fe:8f:29:8b:e7:a3:e1:82:
56:92:96:1a:19:c8:0b:02:27:76:2d:69:ea:66:fe:
f3:b3:74:d6:0f:77:22:19:b8:0a:7a:a4:d7:60:23:
69:f8:6f:d5:61:45:ad:d0:a3:35:d8:f7:bf:e8:43:
82:6c:88:3c:a6:6a:e0:f2:db:6b:25:3a:0d:99:b6:
e0:40:37:c9:1d:b9:ec:98:07:b6:81:3d:a8:e6:1e:
6d:7b:f3:2a:fc:91:87:27:61:c6:58:41:d8:cb:b9:
9a:d8:1d:26:4d:04:9a:6a:17:71:d1:b0:fb:d1:ac:
9d:64:89:92:ef:5c:ce:3b:4a:e4:c4:f2:28:26:b6:
65:aa:4c:86:c3:96:72:86:b5:ae:65:27:eb:18:6a:
04:14:a7:8e:c4:d9:16:8f:f8:16:e3:dd:7e:a1:a5:
09:6f:05:f4:ea:43:96:71:8d:ec:e6:d9:1e:78:03:
37:f3:2f:ca:88:b2:d2:b6:d9:7f:0f:55:20:92:5b:
e7:7b:b9:84:0b:3c:81:71:9d:49:d1:33:a5:d1:bd:
e5:03:36:46:12:e5:3d:27:6e:e6:43:66:cc:dd:99:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:68:26:0F:91:D4:56:7B:2E:1E:D5:D2:3F:71:AD:6D:A0:92:1F
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f1:6b:1c:2a:b9:3e:6f:9d:02:f0:ee:32:f6:d0:60:4d:62:
7c:01:60:3e:83:d4:c2:b4:e5:d8:38:d1:c5:65:6b:77:0e:d9:
b8:4b:5c:e6:14:fc:9c:12:75:d9:f0:65:fa:65:fc:5d:19:58:
80:7c:14:6f:07:84:1f:83:ae:12:6d:64:e4:39:55:3c:d8:e6:
79:b5:51:07:d5:94:29:f4:87:ea:39:52:f5:9a:5b:47:08:a9:
07:a3:1f:c9:ac:03:f6:25:35:8b:fc:30:98:b5:76:1b:35:49:
28:23:1d:46:c4:9d:6a:02:34:30:c8:27:29:57:58:11:81:95:
0a:f2:28:91:d8:41:7c:7b:de:61:14:71:94:49:f5:cf:41:2d:
1f:86:b0:ba:b4:68:e7:0d:26:51:fb:e9:8e:20:1d:e7:39:da:
83:7f:63:df:b8:52:71:cb:21:89:a5:da:13:1e:5f:ce:d5:a6:
04:17:77:46:89:91:de:62:35:18:3f:20:6f:67:a9:30:70:9d:
c5:bf:1b:e5:86:f8:16:03:b6:15:57:30:71:7a:aa:b0:8c:e5:
41:ab:15:ab:fb:7c:43:2c:cd:50:9b:c5:ed:29:44:78:00:49:
ee:5d:f9:d7:ec:3f:99:2d:cd:2f:61:4f:a4:93:d4:ef:a1:fb:
06:df:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:29 2026 by rpki-client