Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: tVL9JA9PLt5B1tgGZhP7EdPvzj/ovyUM3iO6VuzhzlE=
Subject key identifier: B5:29:91:B0:85:C0:10:15:29:5C:AD:F2:1E:15:09:0B:3A:B3:A8:2B
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 019E1DFE00170F95936FBF4DBBE40F73AE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: yrn9Siz4DIzWFW5h5wOAW8YOgrh3p6zJiBSDrNDJXT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:00:17:0f:95:93:6f:bf:4d:bb:e4:0f:73:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=b52991b085c01015295cadf21e15090b3ab3a82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:0c:3f:1f:b3:d1:ba:61:6c:2b:1a:34:db:
88:d7:21:9f:75:24:c3:2a:60:80:f2:b7:a9:7d:4c:
c8:74:30:aa:dd:cd:0f:8b:6e:1a:e2:49:b7:4a:a8:
86:f2:82:a5:f0:a6:43:66:fa:e1:1e:34:4e:bb:45:
0b:27:6d:35:c2:19:33:1e:16:31:c9:8c:08:46:68:
63:dc:88:5a:1f:7a:f2:83:b8:ea:e4:d2:7c:e0:9d:
b3:39:b3:c1:0b:26:43:5d:91:77:d0:c2:8f:d8:2e:
45:5a:e0:11:d9:25:1d:67:62:64:45:82:c5:0e:e5:
02:cd:72:48:36:a0:fc:7b:8f:95:36:82:42:61:b8:
23:8e:99:b3:9a:72:7a:12:d9:3c:97:12:d2:68:81:
3b:ae:cf:18:75:53:49:34:d6:88:01:04:05:20:e0:
31:34:5e:6d:85:ad:a9:ac:8f:8a:5c:e5:ed:bd:c7:
df:b7:cd:83:0f:9e:dd:02:a8:59:ba:0b:d7:26:bb:
27:24:2b:7f:06:1c:f2:c3:09:be:e8:b6:c6:9d:13:
e4:1a:85:03:af:23:e1:3c:f9:77:a4:97:5b:1b:87:
2e:82:59:20:aa:e5:c3:a2:89:f6:47:a5:8a:e9:f5:
ce:35:c5:b5:b7:96:52:e2:e2:9a:2f:c6:42:7e:bf:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:29:91:B0:85:C0:10:15:29:5C:AD:F2:1E:15:09:0B:3A:B3:A8:2B
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cf:ad:4d:99:5b:a2:90:1d:8f:9b:23:c4:73:2f:cb:cc:de:
91:bb:a5:94:d4:ff:6c:51:4b:6a:55:3c:f4:df:5c:57:62:c6:
1e:00:c6:51:f3:eb:76:d2:9c:ce:40:59:df:e8:97:91:2e:13:
de:21:33:0e:3f:b7:98:96:d5:09:7a:af:91:9e:90:5b:69:6f:
63:21:c5:a3:23:c9:95:ac:79:5d:83:c3:65:f9:50:b4:a7:2c:
81:1f:01:8f:fe:19:5c:e0:1f:2e:61:fd:da:12:d8:5a:39:5c:
6a:76:b1:c6:16:2e:bf:1b:be:a8:36:96:0b:cd:39:36:05:b4:
a1:54:0b:42:04:ec:08:8a:da:79:18:70:3a:31:a3:5c:1c:d0:
99:94:dd:62:5a:ef:56:79:95:fe:f6:a1:88:e0:72:b8:9c:f8:
5d:24:b0:0f:92:a2:1a:29:ba:b8:c2:ce:d9:93:fe:14:82:fe:
df:09:d4:14:ae:f4:10:d1:99:4c:03:aa:77:5a:84:f6:8f:f1:
34:84:26:7a:91:85:ef:0c:49:23:a5:e7:d8:5d:4c:5f:bc:62:
8d:c9:68:37:c4:bf:28:f8:0a:57:c5:f6:eb:9d:55:70:6a:bc:
78:aa:6e:29:08:d3:50:47:6b:af:a4:e4:f5:ee:3e:55:cc:b3:
76:e8:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:04 2026 by rpki-client