Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: gavcL3IG+nZlBBYWpY2LoX3Qi6LG4rfDc1+43JZRwm4=
Subject key identifier: 8A:AB:E1:A2:45:EE:26:E9:1E:8E:8A:20:AB:B2:A3:50:CB:11:64:B4
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 019E2091C6CC1729045BA4676DB633C89ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 091F
Signing time: Wed 13 May 2026 09:01:24 +0000
Manifest this update: Wed 13 May 2026 09:01:24 +0000
Manifest next update: Thu 14 May 2026 09:01:24 +0000
Files and hashes: 1: KUoewwdfRmOf_tbAsPp_9X-LAEQ.roa (hash: LGunqhuUXzXuULPWvo35kZbrmM/8QY9qb8IveKrkACU=)
2: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: rspVPZOrdxt8v9aosNTiojyOpsVmuF44rqI1wawnJqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:c6:cc:17:29:04:5b:a4:67:6d:b6:33:c8:9a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: May 13 09:01:24 2026 GMT
Not After : May 14 09:01:24 2026 GMT
Subject: CN=8aabe1a245ee26e91e8e8a20abb2a350cb1164b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:f1:b0:8e:02:fb:f4:11:dd:22:27:fd:b0:
f6:61:a4:4e:88:68:d7:21:24:d3:cc:71:ae:ad:cb:
a6:63:63:b9:46:73:ce:83:45:3b:eb:a1:70:32:bd:
39:74:98:96:68:99:a1:4c:61:1e:e7:d9:ce:7b:0e:
62:8a:37:61:90:4d:b0:a5:61:1b:66:e6:8e:92:fd:
00:62:c7:51:e9:11:09:1f:7a:79:2c:d5:82:7f:52:
1d:d8:34:9b:ed:aa:75:f2:ef:87:45:fa:11:34:e6:
99:11:7f:d5:b7:bf:f3:85:f6:39:4a:fb:45:53:77:
c6:ae:77:9e:fd:a3:1d:27:ef:9d:69:1c:87:71:55:
2c:45:02:fe:c5:22:1f:2e:9c:f1:06:f3:03:cc:f0:
ba:8a:c4:a0:09:23:dc:f5:65:94:aa:c3:6a:af:16:
e7:e2:6a:03:86:50:f2:e6:78:ea:0f:bf:49:a4:c8:
a1:e3:94:35:5a:af:a4:37:11:d2:82:8e:a1:c8:a4:
b4:ee:3a:54:fe:e1:f5:b5:9c:84:54:ec:88:b2:28:
16:22:34:6c:1f:09:6d:1a:02:75:d3:97:07:c9:a7:
7d:31:ae:eb:11:6b:c3:f8:51:f5:22:92:de:0f:1c:
fb:62:9f:84:40:dd:cc:b5:d2:1b:54:24:e1:99:33:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:E1:A2:45:EE:26:E9:1E:8E:8A:20:AB:B2:A3:50:CB:11:64:B4
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f2:14:36:5c:31:3e:39:b3:61:a8:7e:8a:be:48:96:fd:75:
74:fb:19:c0:c9:b2:8b:8d:42:41:7c:f7:f8:72:b3:17:80:6a:
59:f9:0b:5b:bf:d4:d7:af:a1:ae:4d:57:cf:90:18:c8:9b:be:
01:3e:b1:03:ea:2d:02:1b:d3:bf:1e:ea:03:06:84:8d:25:5c:
2d:9a:66:e3:33:0f:1a:fd:9a:8a:36:f1:ba:99:b6:d7:8e:5b:
ce:53:51:e5:c5:93:8d:b6:4b:2c:c2:2b:93:50:51:95:cc:f7:
cf:9c:df:72:ce:c9:1c:1e:48:e9:2e:16:60:29:1c:9c:50:37:
f4:c3:47:5f:8a:39:b0:1b:19:e2:11:3a:a9:c8:b0:5f:e9:5f:
3a:a7:ef:39:29:7f:25:1c:da:47:16:e3:eb:46:9b:24:9a:d9:
f7:9d:6c:63:5d:3e:70:ae:38:30:95:1e:92:42:94:f7:de:66:
64:d0:48:6c:8f:bb:17:0c:ef:1f:dc:cd:94:33:b9:9b:b6:82:
30:17:b2:a1:48:10:19:37:6f:a7:77:8f:06:44:c1:9d:ed:f5:
59:8b:c2:2a:47:f9:01:56:a0:67:e2:fe:5e:05:09:cd:66:54:
68:06:4f:da:da:01:8b:7a:90:19:de:2b:26:dd:be:6e:14:de:
bd:57:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:00 2026 by rpki-client