Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: OJv0m0M6eGme0ngPrt3EwqnnnKN8n7DQ8K2+R6AdFm0=
Subject key identifier: C6:2D:BB:5D:EF:E0:02:AD:EE:EC:D5:17:1D:2C:48:51:7A:6F:3C:60
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019E1D23279AA63F09A2C1D4C7F06A01562A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 15FB
Signing time: Tue 12 May 2026 17:01:43 +0000
Manifest this update: Tue 12 May 2026 17:01:43 +0000
Manifest next update: Wed 13 May 2026 17:01:43 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: TruUUR1eqD41G0nyXwUHhrRwT+7kRg3VDMx/q+2k8WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:27:9a:a6:3f:09:a2:c1:d4:c7:f0:6a:01:56:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: May 12 17:01:43 2026 GMT
Not After : May 13 17:01:43 2026 GMT
Subject: CN=c62dbb5defe002adeeecd5171d2c48517a6f3c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:4b:57:f8:c1:30:a7:cd:65:93:3d:04:d1:
3e:e5:21:f7:f0:e8:26:6c:d8:fe:78:df:0a:fe:59:
51:50:48:a1:69:04:35:07:20:81:f6:75:36:62:1d:
62:71:5d:1f:c6:b3:91:8a:b6:db:1b:71:b5:13:95:
ec:cf:5f:d7:dd:07:84:de:11:39:b5:5b:58:f5:5c:
65:6c:2d:0f:f1:08:dc:b5:e0:db:a6:cb:4e:26:ee:
62:67:48:e2:c1:a7:4e:60:c2:87:7c:e0:83:9a:67:
15:ac:39:2b:25:9f:13:0d:0b:66:4c:41:30:9d:5c:
de:ff:fd:88:18:21:0b:15:d1:15:59:9a:2a:20:a1:
e9:ce:2f:dc:31:59:e9:fc:09:61:7e:f6:5c:32:60:
10:18:61:c8:db:7d:1b:72:c8:dd:d7:7e:8a:b2:27:
bb:c9:c7:33:af:29:7a:e8:fd:dc:40:57:55:02:9a:
82:2e:2b:c0:15:1b:1f:58:cd:cd:0d:ba:19:af:84:
84:5d:e6:dc:78:cd:af:5a:ec:e7:1a:c0:ec:ac:15:
0b:99:08:42:d7:eb:10:75:00:ab:32:fd:f2:ce:4d:
d1:fd:9a:26:c0:ff:09:e9:76:bd:e7:68:f6:41:11:
bb:4c:c6:45:1f:bb:3a:ff:5d:12:9c:d2:09:9d:b2:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2D:BB:5D:EF:E0:02:AD:EE:EC:D5:17:1D:2C:48:51:7A:6F:3C:60
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:1c:c5:f1:15:7b:6c:d1:0e:cb:4a:1e:85:77:76:48:02:
aa:a4:e0:83:30:92:04:c3:ed:e2:cf:d3:97:b7:7e:2f:d5:f8:
30:71:8f:37:a4:11:43:f8:e6:42:79:69:21:0e:58:e5:88:0d:
64:55:f6:01:db:b5:b5:8d:64:ea:5d:0f:21:c1:25:bf:df:15:
82:e3:18:6f:a8:e7:9e:57:3b:4e:bd:97:12:97:72:81:22:5e:
08:7f:b8:15:ce:2d:f6:d3:ec:47:3c:23:cb:a2:a2:96:1f:fd:
94:6f:fd:c2:c5:43:97:b7:00:02:6d:52:e9:b4:70:2a:57:0c:
d4:d1:bf:85:af:f2:1f:fe:3e:90:a8:e2:5c:4c:e2:9b:bc:02:
82:42:df:ac:53:3c:a7:ba:8d:c6:5f:c2:72:ad:46:20:f1:70:
fa:65:1c:9a:eb:0f:26:75:c4:53:66:ab:56:30:55:b8:bd:aa:
a3:f8:11:d7:67:a3:a2:d9:0a:b3:4b:3d:46:39:8b:21:bc:4e:
11:99:27:7a:fd:65:91:46:27:38:d7:89:3f:f4:2d:cf:76:c1:
d8:51:49:cf:38:d2:0f:e6:ed:5e:4b:48:de:d7:ff:ea:c4:29:
68:57:54:df:af:df:6a:33:07:55:2d:c6:52:40:3d:74:2e:89:
1b:b0:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:42 2026 by rpki-client