Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: w4uuUc/6Bm5IEVxedB6YCgV9s0UpnAcF0YHbowj7s8E=
Subject key identifier: 8C:86:09:2D:21:D0:9F:F0:01:54:19:9A:39:A8:2B:06:00:08:D3:A6
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019E1E35C62B686921437E78C894BDF5F2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0CEF
Signing time: Tue 12 May 2026 22:01:40 +0000
Manifest this update: Tue 12 May 2026 22:01:40 +0000
Manifest next update: Wed 13 May 2026 22:01:40 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: aGBIFpdKp44qoE63sXMDRrUTz8z/Rt8yn92edXMzYXM=)
2: bgTj1AVpGOJ4PVrdSMxeLKpik_E.roa (hash: PA5QdaiNGx0nBgpS5K3tHFIeNRXLUOzm0Y2JaVTpock=)
3: lePQo6wZD_Sk6G9yXvisbl2Tsao.roa (hash: 4hQP72BMPYOrYdBAheaaMbRjYFT184+eQqEoi9pvU4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c6:2b:68:69:21:43:7e:78:c8:94:bd:f5:f2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: May 12 22:01:40 2026 GMT
Not After : May 13 22:01:40 2026 GMT
Subject: CN=8c86092d21d09ff00154199a39a82b060008d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:a7:42:fb:d1:54:40:21:f9:3c:a7:52:2d:
52:1f:ab:98:a6:2a:0b:bf:90:c5:5d:29:15:03:c6:
d1:24:ea:0d:45:1f:c1:f7:60:16:2e:72:02:0a:c6:
bc:18:81:5c:1a:46:a0:9e:aa:c6:8d:71:41:e9:16:
b2:02:38:eb:65:ba:64:f4:d8:fe:37:96:2e:8d:e4:
1a:e2:c4:df:81:f3:c6:f0:91:80:7a:fd:66:7e:40:
35:6d:50:61:3f:5e:06:46:91:58:8d:a9:b9:25:f5:
1d:9c:0e:89:10:9e:87:f3:e7:0b:47:5c:76:3a:52:
d3:ec:07:91:43:cb:c2:ec:6b:38:80:81:e2:a6:64:
9a:6f:66:20:11:dd:d5:7a:13:6e:99:15:65:7e:96:
e9:48:81:53:d9:a1:1d:b7:46:8b:8d:04:10:21:71:
69:26:6d:46:b4:69:99:ce:d5:59:12:66:10:d4:82:
2a:c5:28:d6:69:b6:77:a6:52:c8:a7:6b:9f:44:dd:
c7:2f:17:07:38:b1:88:86:d1:9e:91:ca:8a:63:c6:
81:7c:63:50:c0:56:bf:f4:42:33:df:8d:4d:b6:27:
3a:e7:f3:59:10:b7:68:3b:1b:bf:20:7c:e0:48:a6:
c0:a5:1c:e4:2f:12:2d:8c:c7:45:8b:90:05:ca:f7:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:09:2D:21:D0:9F:F0:01:54:19:9A:39:A8:2B:06:00:08:D3:A6
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:53:4f:fb:58:6a:67:4f:eb:60:d1:52:5a:db:e4:00:d4:40:
7f:a4:98:32:1f:e1:4d:7d:fe:5b:7e:47:ec:f5:69:2e:b9:ec:
03:d0:9b:e1:1f:bb:ae:91:ab:2f:45:db:1c:70:91:16:71:12:
5c:fa:36:5d:af:6f:2f:ab:18:29:74:d6:76:03:2c:c8:af:0a:
98:26:ce:0e:ac:66:7b:eb:01:e2:c6:37:f5:b0:aa:0e:dd:8c:
2f:99:eb:f8:a9:44:88:76:2d:7e:ea:e4:fe:d0:43:9b:36:2d:
3a:99:25:8e:c4:7c:a5:ea:09:92:0c:65:ec:ab:84:71:2b:96:
0a:81:56:2f:d9:66:84:43:24:67:8a:67:ee:7b:da:70:94:97:
d0:d8:86:b0:53:93:40:e2:c4:d4:c7:a8:fa:37:66:b6:5c:cd:
50:62:d8:e2:30:4d:ce:5e:e3:be:af:32:85:42:1c:55:ad:08:
67:e1:d0:89:3e:f7:a1:9c:e0:7a:5b:4d:30:d0:01:08:0b:f7:
a9:6a:35:67:65:14:aa:38:6d:f1:97:39:d0:65:0b:25:86:e2:
50:a1:69:ef:aa:4a:19:c1:da:c7:cd:c8:83:d1:e0:a1:c8:0f:
e1:a1:b3:db:1d:ba:fd:94:46:5a:fb:d0:40:2b:3e:18:3c:00:
29:c7:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:55 2026 by rpki-client