Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: QJ+TiJnf9eNBpqX5IZ0ZawWJGilQodUlg6SHi7F9dX0=
Subject key identifier: 93:2E:2C:F8:11:6B:A7:7C:2F:FC:9D:9F:15:47:8D:85:B5:94:F0:1B
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 019E1FB593E65E49D5548FD010D5C8561631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 019E
Signing time: Wed 13 May 2026 05:00:54 +0000
Manifest this update: Wed 13 May 2026 05:00:54 +0000
Manifest next update: Thu 14 May 2026 05:00:54 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: nHlE5IWOO2eAQLl6MfUXTayj0qHm2WARUVMN9QQYkpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:93:e6:5e:49:d5:54:8f:d0:10:d5:c8:56:16:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: May 13 05:00:54 2026 GMT
Not After : May 14 05:00:54 2026 GMT
Subject: CN=932e2cf8116ba77c2ffc9d9f15478d85b594f01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:4a:6a:aa:1d:22:10:78:59:97:b0:a9:ed:
e6:ff:a2:4d:06:f4:1b:94:16:52:dd:f0:ab:52:f2:
e0:8b:ad:76:8c:49:3d:d7:a1:ca:ce:35:b4:cf:5f:
c6:d9:7a:36:59:b0:a0:c9:a6:f6:d6:65:b4:9a:c8:
94:f8:28:8f:a4:b8:f9:b3:98:90:9d:39:5c:72:4c:
44:a3:63:78:27:8a:3e:7f:f5:52:ce:4f:42:6e:15:
41:69:e7:44:f9:0e:0c:5e:2c:22:07:44:6d:bf:5e:
f5:1e:d5:76:fa:b1:2f:2c:20:cc:1e:ae:fa:fb:38:
2e:7a:d7:41:c2:38:39:79:b6:a9:4e:61:27:81:52:
85:90:f8:32:0a:f2:07:9c:6d:bb:98:6b:64:2e:78:
3f:9f:25:5d:86:23:5c:8c:a6:a5:56:40:3e:bb:be:
72:93:79:08:03:82:91:37:6c:aa:c8:da:61:8a:d7:
21:17:dc:3a:d1:0f:6d:96:23:e8:dc:5e:89:15:d0:
bc:9e:47:b5:d6:59:67:0b:1f:ca:82:28:65:eb:41:
59:72:2b:1f:e1:4a:25:89:1e:65:b9:7c:95:8b:69:
f6:e8:cd:c8:07:7c:21:73:fa:5a:bf:51:80:70:7e:
32:8b:c2:85:05:32:a5:fb:ab:2c:e9:71:e1:78:20:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:2C:F8:11:6B:A7:7C:2F:FC:9D:9F:15:47:8D:85:B5:94:F0:1B
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6a:ca:c0:51:ca:d3:4f:4f:0f:77:e5:0a:f9:af:55:17:78:
39:cb:af:07:ec:a2:7e:2c:c1:d7:53:66:bf:51:13:88:17:21:
2d:5e:06:13:84:b7:36:ba:f4:44:ba:e5:cf:e9:35:1d:c0:e6:
c8:24:c3:6f:df:02:7b:90:16:4a:90:5e:7b:06:14:e9:db:2a:
f3:77:e5:b5:cd:e2:55:da:8d:37:51:91:05:7a:37:53:fb:07:
14:19:98:a7:7e:08:70:58:18:4f:a9:50:6d:71:a3:cd:29:77:
92:88:37:73:bc:d9:1c:56:d4:59:ac:f1:f0:c9:ae:b1:a0:d3:
91:87:82:b0:24:23:d2:71:b0:84:c9:4c:83:da:b3:21:e0:10:
06:b4:ed:51:c9:d8:5f:b6:b8:99:0b:fe:09:b5:f9:37:bd:d4:
96:db:fc:30:64:1e:16:ef:a5:f9:05:92:05:5a:6e:6c:55:01:
d3:ec:17:09:f3:28:72:1c:84:e5:77:b8:5a:b0:9f:ac:d6:0b:
f5:ec:50:56:75:68:30:55:00:07:65:5a:26:84:63:de:6c:01:
07:3b:2e:aa:80:bc:4b:59:18:d1:95:9c:1c:94:1d:37:a8:4d:
45:79:12:ee:20:13:8e:bc:c2:12:3a:75:66:5e:aa:4a:de:86:
67:4d:a7:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftZPmXknVVI/QENXIVhYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDQ1ODM5NTNhMDJiYzZhNjY5OWRlOTI3Y2Y0NTcwMDdm
MDU1MjgwHhcNMjYwNTEzMDUwMDU0WhcNMjYwNTE0MDUwMDU0WjAzMTEwLwYDVQQD
Eyg5MzJlMmNmODExNmJhNzdjMmZmYzlkOWYxNTQ3OGQ4NWI1OTRmMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6FKaqodIhB4WZewqe3m/6JNBvQb
lBZS3fCrUvLgi612jEk916HKzjW0z1/G2Xo2WbCgyab21mW0msiU+CiPpLj5s5iQ
nTlcckxEo2N4J4o+f/VSzk9CbhVBaedE+Q4MXiwiB0Rtv171HtV2+rEvLCDMHq76
+zguetdBwjg5ebapTmEngVKFkPgyCvIHnG27mGtkLng/nyVdhiNcjKalVkA+u75y
k3kIA4KRN2yqyNphitchF9w60Q9tliPo3F6JFdC8nke11llnCx/Kgihl60FZcisf
4UoliR5luXyVi2n26M3IB3whc/pav1GAcH4yi8KFBTKl+6ss6XHheCB28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMuLPgRa6d8L/ydnxVHjYW1lPAbMB8GA1UdIwQY
MBaAFKhEWDlToCvGpmmd6SfPRXAH8FUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMt
MTEzODEwYTlmY2FlLzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zMDMxY2MtYTcwNS00MmM4LTgwMDMtMTEzODEwYTlmY2Fl
LzEvcUVSWU9WT2dLOGFtYVozcEo4OUZjQWZ3VlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2rKwFHK
009PD3flCvmvVRd4OcuvB+yifizB11Nmv1ETiBchLV4GE4S3Nrr0RLrlz+k1HcDm
yCTDb98Ce5AWSpBeewYU6dsq83fltc3iVdqNN1GRBXo3U/sHFBmYp34IcFgYT6lQ
bXGjzSl3kog3c7zZHFbUWazx8MmusaDTkYeCsCQj0nGwhMlMg9qzIeAQBrTtUcnY
X7a4mQv+CbX5N73Ultv8MGQeFu+l+QWSBVpubFUB0+wXCfMochyE5Xe4WrCfrNYL
9exQVnVoMFUAB2VaJoRj3mwBBzsuqoC8S1kY0ZWcHJQdN6hNRXkS7iATjrzCEjp1
Zl6qSt6GZ02ntA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:30:51 2026 by rpki-client