Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: Ro75tqkYOjXMF8ZP2QFk70oqBklS3lSwHva0KND/WMY=
Subject key identifier: 8E:5B:06:AE:B9:DB:16:1F:99:26:A3:D9:89:52:2E:59:B4:EA:9E:5E
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019E1F7EA01015E8881E2C8C0A36337710A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0E24
Signing time: Wed 13 May 2026 04:00:52 +0000
Manifest this update: Wed 13 May 2026 04:00:52 +0000
Manifest next update: Thu 14 May 2026 04:00:52 +0000
Files and hashes: 1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=)
2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: lrd6gLNPRNOiPrc49Wx7Ad1pU7jsFCO218X4QIgxlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:a0:10:15:e8:88:1e:2c:8c:0a:36:33:77:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: May 13 04:00:52 2026 GMT
Not After : May 14 04:00:52 2026 GMT
Subject: CN=8e5b06aeb9db161f9926a3d989522e59b4ea9e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:e9:ff:74:22:f0:27:82:fb:ed:73:c3:14:
a0:f3:69:9b:c9:22:73:60:9c:af:59:ba:e8:6d:a7:
a4:e3:1e:2f:46:68:7e:1b:21:48:d9:f4:52:05:2c:
f0:a3:c7:2a:e6:fe:4d:15:ae:60:55:62:31:2a:4e:
0d:fa:73:75:0e:fe:3a:4b:1a:a8:7f:15:ca:74:63:
60:1c:59:36:85:4c:86:29:57:42:63:33:fb:78:d7:
72:ea:57:fb:bd:25:c4:11:23:3a:ba:14:e5:c7:29:
ac:6c:ab:87:aa:57:36:f8:c8:15:5d:c5:a9:5f:51:
fd:b6:0d:cb:0b:93:aa:f0:de:16:8b:69:6f:50:88:
fd:5e:04:16:b3:d9:16:e5:b6:cb:49:50:96:2d:53:
68:0a:37:81:30:41:8c:d5:5e:f5:0f:0c:b3:e0:48:
f4:7c:89:60:a5:76:81:4c:1a:fa:0f:cd:4b:73:1f:
e6:8b:ab:0d:88:73:80:d3:98:b9:d2:34:3e:7c:e4:
46:6b:cf:cf:51:0e:55:a8:ac:4d:11:f8:e9:e9:eb:
1a:81:2b:33:2e:77:3c:38:29:ea:68:3e:dc:80:8d:
dc:cc:81:6f:38:70:75:e8:c1:b6:e1:b8:16:81:31:
7f:df:c4:af:80:c4:91:94:d7:01:dd:1d:b6:9f:27:
4d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:06:AE:B9:DB:16:1F:99:26:A3:D9:89:52:2E:59:B4:EA:9E:5E
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:7b:95:dc:f4:2d:cb:83:3c:04:05:ed:2c:e9:4b:39:2b:
e0:59:8f:f0:41:3c:b6:57:98:3f:87:29:e6:04:f7:bf:f4:f9:
d6:c5:c0:5a:b3:d4:7c:d5:50:c1:40:58:3e:91:fc:93:9f:ec:
95:9d:01:84:08:6c:bc:79:7f:db:d4:83:f5:c7:31:77:0b:db:
e3:06:87:6e:38:9b:b6:ff:98:81:65:de:f3:ef:97:a2:73:bf:
89:38:da:7b:c2:98:08:cc:32:42:2b:0f:03:5b:85:b2:9b:d5:
b6:6c:73:2f:40:3b:b9:6d:bb:6a:a0:aa:45:59:bc:e9:d2:1c:
cf:10:1d:4b:c1:76:28:65:9d:bc:0a:88:d7:fa:ae:c4:a6:7e:
5b:eb:05:b7:57:23:93:ed:d7:ac:0c:97:a7:87:2a:87:4c:da:
07:52:b9:e1:1d:55:66:b9:7b:33:05:17:65:c7:b3:a5:0b:0a:
e6:cb:af:a5:6e:6a:bf:8a:df:96:67:28:15:6a:c6:0e:00:89:
c5:3e:ad:6b:87:40:2b:9d:0a:4c:ed:e4:7e:7b:0f:9b:0c:8d:
05:08:32:e6:b3:0b:e9:08:a2:62:91:b5:e3:9f:80:00:e6:b2:
b8:d1:22:82:f3:19:ad:7c:f9:5d:8b:c7:8f:97:9d:70:c1:a5:
43:03:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:47 2026 by rpki-client