Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: Sz2FzQBj2hKNMBHFeZvbN7+Hs7sl6max6RQwZhueZi0=
Subject key identifier: 22:93:03:AA:0D:0F:8B:C0:79:84:54:EB:C8:53:DB:C8:FC:5C:4E:A7
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 019E1D591C2B4B5CA4509798EBCE294B1817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 1224
Signing time: Tue 12 May 2026 18:00:39 +0000
Manifest this update: Tue 12 May 2026 18:00:39 +0000
Manifest next update: Wed 13 May 2026 18:00:39 +0000
Files and hashes: 1: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: IK4mMCAIJT0aLxr850AFCO8Rgrse1oRP5HF+8akobLg=)
2: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (hash: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4=)
3: tPolntRW3EVoA5WCEpAsWda33Aw.roa (hash: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:1c:2b:4b:5c:a4:50:97:98:eb:ce:29:4b:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: May 12 18:00:39 2026 GMT
Not After : May 13 18:00:39 2026 GMT
Subject: CN=229303aa0d0f8bc0798454ebc853dbc8fc5c4ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:48:ec:a8:1e:34:03:3f:a5:8c:d5:94:f7:c1:
53:69:8f:38:59:6f:b4:d6:a3:f7:42:4b:3c:5e:3d:
7c:02:c3:63:2a:3b:7e:87:e9:4d:6c:f6:d2:9d:22:
e2:bd:18:04:cb:bb:1f:3b:2c:0a:1f:2c:2b:8c:5c:
f3:19:db:c6:13:ea:23:03:3c:e2:6e:05:3a:10:b9:
82:48:49:51:9d:99:03:12:bd:a5:ab:df:2d:49:42:
fb:8e:8c:51:be:26:71:9e:c6:cf:ec:e4:b0:7f:74:
df:b0:00:a6:50:02:df:42:8a:94:5c:8f:53:21:09:
33:b5:54:4e:ee:c5:92:43:7f:3c:82:2e:00:5e:6b:
ef:3c:74:89:76:10:1c:05:fe:75:3b:d3:8b:76:9f:
d0:b6:7c:e0:a8:a6:db:92:b9:c8:8b:36:80:27:51:
a2:b9:c9:74:45:eb:fb:57:66:40:52:e8:93:82:07:
72:41:62:a4:e0:3a:09:9e:5b:cf:a3:83:32:f9:5b:
43:23:0f:7b:cb:6d:49:82:13:a4:f2:45:d1:48:03:
50:c3:af:b9:8c:3e:f5:0e:c5:e3:81:03:bd:f9:9e:
66:b1:42:48:a4:97:fb:80:87:06:6d:3a:8c:70:bd:
a3:51:9e:96:ce:ca:3d:b8:f6:b0:37:c4:50:02:2f:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:03:AA:0D:0F:8B:C0:79:84:54:EB:C8:53:DB:C8:FC:5C:4E:A7
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:77:d1:29:5d:03:b6:cb:33:14:2d:1e:b4:50:05:5e:92:74:
25:9a:1b:84:54:58:33:8a:f8:49:f8:00:ce:dd:cd:58:ad:90:
f1:f2:fc:7b:77:af:04:36:5b:53:70:bc:e6:34:57:ff:fd:bd:
91:89:7d:3a:35:eb:fc:49:ce:6e:5b:f5:d4:b5:9d:22:4b:90:
83:a4:42:27:86:ec:00:a3:aa:3a:2d:d2:d5:c3:cc:51:77:89:
c6:82:03:1b:cf:44:cc:d1:cf:5b:b9:2e:80:ae:85:f8:87:a3:
25:ed:8c:2b:0e:76:fa:2e:5b:4d:65:47:e1:6d:5a:0c:8c:9d:
a2:fb:48:c8:68:de:be:7e:e8:e8:d7:82:21:50:6f:bb:41:00:
d9:75:94:4f:cc:d5:d1:8a:90:8b:1e:31:5e:d8:fc:9e:da:21:
f6:a4:7c:8e:1c:f2:70:e6:22:2e:bd:08:a1:96:35:7c:0f:da:
f7:42:9b:d3:07:14:62:f3:ce:7d:6c:03:0b:51:43:55:e7:c9:
45:15:fb:0b:99:00:6d:4c:0a:5c:5e:d2:3b:89:69:98:53:f0:
1a:5b:55:c6:22:b4:36:3b:1e:60:b7:34:91:29:d3:7f:d0:e8:
90:72:5b:a6:1a:79:4b:12:9c:eb:88:01:8c:e4:34:62:f4:7a:
34:97:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:21 2026 by rpki-client