Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: ZnoZ9bA2r4VGpL8ZT7sEvgXhrknvJ+IweF/23sc0O9k=
Subject key identifier: 89:B9:53:B9:D3:3A:8F:A0:F5:8E:D6:BA:CC:1E:55:6A:FC:D4:1E:8F
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019E1F47904E30AD56560E04AF9B68ED0DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: F4
Signing time: Wed 13 May 2026 03:00:44 +0000
Manifest this update: Wed 13 May 2026 03:00:44 +0000
Manifest next update: Thu 14 May 2026 03:00:44 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: KQawzU4NYHO3Dy23pGhlMZdOJOGKTt52Af6s1Uv9HMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:90:4e:30:ad:56:56:0e:04:af:9b:68:ed:0d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: May 13 03:00:44 2026 GMT
Not After : May 14 03:00:44 2026 GMT
Subject: CN=89b953b9d33a8fa0f58ed6bacc1e556afcd41e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:54:7a:aa:88:31:ca:71:c1:41:14:47:9e:
3b:25:c8:10:01:27:db:53:4e:32:32:fa:15:7f:4f:
62:3e:6a:f0:74:b1:f1:d5:45:63:9e:8a:61:82:01:
d4:42:18:48:2f:4b:40:af:1b:a0:d2:43:5e:9f:0e:
b0:a5:8a:d6:a9:f3:22:7c:05:cb:87:46:7f:86:78:
2c:ff:7d:79:88:aa:d8:a0:97:f7:2e:9a:49:43:65:
00:a4:6b:71:0c:13:f3:2e:77:31:66:26:8e:1b:97:
06:78:bc:6c:52:d5:54:42:88:09:99:7a:2b:21:e6:
c2:84:77:c8:40:af:a4:b5:3a:25:c7:af:b1:ce:c2:
5b:90:20:70:10:26:5f:49:6b:46:e1:3c:36:58:a3:
68:5b:0a:2e:82:3f:01:e1:6b:d2:ad:1e:52:f3:14:
ca:d8:03:29:e5:e9:cf:7e:6d:70:27:91:f4:69:5f:
d9:48:93:5c:05:3e:40:41:7d:08:a8:02:9e:85:a0:
a2:0f:95:78:03:15:22:2f:e8:97:5f:26:09:b2:93:
b6:67:7d:e9:58:bd:73:e0:af:59:94:79:cf:13:93:
bd:b9:d4:7d:86:d9:e6:56:4e:b3:be:06:99:7c:d8:
12:1c:a1:2f:5e:6b:26:6d:50:ef:90:3b:55:50:e9:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:53:B9:D3:3A:8F:A0:F5:8E:D6:BA:CC:1E:55:6A:FC:D4:1E:8F
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:88:7f:11:0c:02:c4:f4:14:1c:29:b7:74:1e:c8:bd:1d:
ff:a0:fc:be:c7:b2:aa:82:18:ad:b5:92:51:14:22:dc:ec:ff:
5d:28:18:b3:4a:45:ba:b6:da:a7:56:72:0c:ac:d5:a3:82:60:
a1:c5:4e:c4:83:b6:ab:1f:d4:a1:28:a4:70:c5:82:85:96:52:
b8:5b:ee:8f:59:92:93:b7:6e:57:48:1b:7b:b2:77:6f:bb:3e:
b2:7f:0b:4b:a4:93:78:8e:56:ed:b2:34:e9:40:80:fb:49:b8:
28:84:f4:66:52:c2:e1:0a:29:6f:cc:84:6b:86:f3:b0:8a:2b:
d7:2e:75:fa:57:53:47:db:0e:f0:db:5e:0c:39:6b:64:a1:c6:
99:a5:5f:6b:ff:ea:23:b7:a0:57:87:78:e8:bf:2c:9d:ba:a3:
6f:f6:af:b7:4f:e2:da:1c:db:3c:4d:0b:09:f5:31:6b:eb:f3:
90:41:76:aa:b9:fc:7c:d8:f5:37:6e:63:bb:52:00:24:3a:09:
50:5a:ea:ec:b8:02:f1:a8:28:70:71:01:5d:01:30:24:aa:df:
36:ef:bb:d5:41:1e:73:95:fc:44:90:37:c0:20:92:d4:c9:46:
f7:61:ab:51:eb:5f:24:5d:82:2c:02:17:ef:2e:3d:c9:f6:da:
12:15:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:13 2026 by rpki-client