Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: jN0glFGOc91wpkw0oeyZv0V/h/p+0T+nVeH48nVeEaw=
Subject key identifier: 03:13:8F:D0:4F:AA:BB:D7:10:60:81:D4:AE:9F:92:4E:6A:FD:16:06
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 019E1EA3CB79742230897B5F068FBAD22B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1711
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: OFCs67DffEHin03fXSzbafPRilM.roa (hash: 6ap5zRRwDa5G9tEhkbImTGroNfBqTJcGLaIQpF4U370=)
2: ev65uGpdeskGU8rxMwP9DGzY7yo.roa (hash: mm84YFZH+EnFHVYRA5O2XqnvCrusjCtnVPoVlpbhPxc=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: sCiIZOx4BzoNNPMZgFLJjdD2fGiwr0wG03GL8gKYO20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:cb:79:74:22:30:89:7b:5f:06:8f:ba:d2:2b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=03138fd04faabbd7106081d4ae9f924e6afd1606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:2d:2b:9e:e1:23:60:f8:e5:78:49:94:28:
fc:7e:77:bc:7c:b5:79:59:13:88:e4:85:36:f3:0c:
b5:af:de:41:19:ba:74:9a:34:7f:a6:62:18:4e:0f:
50:e9:60:15:b0:f5:3f:49:e3:32:42:5d:03:e4:fd:
fb:e3:fc:cf:96:6e:09:2d:76:c3:df:0a:ff:9f:e3:
a8:c4:2b:0e:b1:6d:62:1f:7a:50:2e:78:80:50:e1:
a1:17:4d:fc:b7:68:53:ac:6d:50:56:9d:46:4d:69:
0c:7f:d2:95:20:89:81:36:50:5b:4d:4e:2f:3d:19:
bd:6b:f2:62:ed:ad:5c:9d:e2:92:c7:c1:62:3c:d3:
05:97:ce:15:62:6d:e7:dd:ab:7e:24:ec:6a:ee:b1:
05:f2:e6:61:08:6b:68:7f:dd:f8:0a:a4:45:8c:3b:
b3:d5:1f:3b:7d:37:b2:d1:47:7e:03:61:d0:ba:a9:
06:44:7a:36:fa:49:29:fc:c2:36:a5:77:9c:f8:c1:
70:9a:90:b2:d4:5f:25:b2:8a:29:76:83:0a:aa:e6:
c5:14:a2:f8:9e:bb:b1:4a:f4:6f:4c:47:a2:c6:66:
c9:af:fb:1c:fe:d8:a2:e7:39:8d:31:3d:a7:a6:ba:
5d:16:61:54:77:55:46:ba:b2:34:81:d4:28:59:bf:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:8F:D0:4F:AA:BB:D7:10:60:81:D4:AE:9F:92:4E:6A:FD:16:06
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:e4:82:ab:3a:cb:1d:0b:f6:5e:45:c2:5b:83:2d:1f:67:
d6:63:83:10:fd:71:a4:0f:12:87:70:0b:4c:e0:57:4d:27:4e:
06:5a:91:5f:d0:ce:4e:8c:85:b0:af:32:5c:f4:05:e2:d1:05:
f0:ce:94:b0:2b:6d:fd:65:6e:14:13:22:26:5d:6a:d5:b0:2e:
74:7b:d3:2a:36:f7:0a:46:4f:bf:c9:23:95:cc:d4:49:91:95:
8b:7d:f4:72:88:f7:8b:c6:37:11:ac:7b:a8:bf:84:14:77:47:
93:6a:a8:07:7a:8d:09:81:94:11:4e:76:b0:f7:b0:b7:40:e3:
eb:79:23:f0:7d:23:d0:60:ff:29:45:48:a1:18:82:82:ff:24:
78:ab:c4:43:ac:46:be:4f:5d:fa:f7:9a:80:00:ca:37:8a:9f:
3f:ce:8b:ab:54:16:55:40:a7:70:ef:0d:db:ad:d0:7b:bb:51:
ed:74:d1:96:6a:3c:54:72:fc:9e:e5:29:ac:d6:70:02:da:0b:
3f:34:ea:65:2b:c8:72:70:50:4c:69:48:de:c9:0a:0c:0d:97:
64:65:92:2f:de:25:6a:0f:19:93:88:7a:96:e1:7d:22:e8:91:
af:74:1e:ea:5f:ef:72:88:ac:75:79:a2:30:14:1f:e5:98:70:
08:3b:e1:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo8t5dCIwiXtfBo+60it3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh
ZDQzNDIwHhcNMjYwNTEzMDAwMTUxWhcNMjYwNTE0MDAwMTUxWjAzMTEwLwYDVQQD
EygwMzEzOGZkMDRmYWFiYmQ3MTA2MDgxZDRhZTlmOTI0ZTZhZmQxNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SctK57hI2D45XhJlCj8fne8fLV5
WROI5IU28wy1r95BGbp0mjR/pmIYTg9Q6WAVsPU/SeMyQl0D5P374/zPlm4JLXbD
3wr/n+OoxCsOsW1iH3pQLniAUOGhF038t2hTrG1QVp1GTWkMf9KVIImBNlBbTU4v
PRm9a/Ji7a1cneKSx8FiPNMFl84VYm3n3at+JOxq7rEF8uZhCGtof934CqRFjDuz
1R87fTey0Ud+A2HQuqkGRHo2+kkp/MI2pXec+MFwmpCy1F8lsoopdoMKqubFFKL4
nruxSvRvTEeixmbJr/sc/tii5zmNMT2nprpdFmFUd1VGurI0gdQoWb9a1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMTj9BPqrvXEGCB1K6fkk5q/RYGMB8GA1UdIwQY
MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRrkgqs6
yx0L9l5FwluDLR9n1mODEP1xpA8Sh3ALTOBXTSdOBlqRX9DOToyFsK8yXPQF4tEF
8M6UsCtt/WVuFBMiJl1q1bAudHvTKjb3CkZPv8kjlczUSZGVi330coj3i8Y3Eax7
qL+EFHdHk2qoB3qNCYGUEU52sPewt0Dj63kj8H0j0GD/KUVIoRiCgv8keKvEQ6xG
vk9d+veagADKN4qfP86Lq1QWVUCncO8N263Qe7tR7XTRlmo8VHL8nuUprNZwAtoL
PzTqZSvIcnBQTGlI3skKDA2XZGWSL94lag8Zk4h6luF9IuiRr3Qe6l/vcoisdXmi
MBQf5ZhwCDvhPA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:28 2026 by rpki-client