Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: R5+iizQAR3NgSBByK0zNLQ/BxS1TAdZlmvQcSP1tLIE=
Subject key identifier: 36:13:BC:03:EF:26:FA:6E:E8:44:7E:6F:C5:97:D0:83:54:1F:BC:F4
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019E1ED9D7443AC27641352851D6BB44708A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 05FB
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: FRusadGqShBxkpoL2paCp-tYl9I.roa (hash: u0M4J6xRL9yocHk0JRl+kCiGzN5rm3Nwf2AuG18JDLc=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: lLQnF1WUethZLG2RrCrJP7mdanVFEf8DSvYC+5tI9bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d7:44:3a:c2:76:41:35:28:51:d6:bb:44:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=3613bc03ef26fa6ee8447e6fc597d083541fbcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:a6:3e:aa:28:39:e9:27:df:0c:7a:81:7a:
88:b2:8f:69:6c:54:20:71:c1:d8:72:cf:06:a9:fa:
66:28:b2:83:5d:ce:24:c1:ec:ad:7a:0c:7a:a0:49:
01:8c:08:6e:9f:4e:17:bb:bd:c3:8a:e5:d1:ec:ea:
cc:35:fe:42:00:6c:ee:25:70:42:23:22:31:d4:3c:
2d:31:73:a9:14:e8:35:71:a8:a4:55:b0:af:9e:57:
0d:6b:f4:d2:fa:ee:9d:a7:ca:08:2a:24:a4:dd:c3:
66:86:7d:97:d8:4c:a8:fa:7c:d8:7e:88:08:57:df:
7f:6c:e7:32:bf:d4:a8:4f:74:d7:0f:9e:df:a1:75:
3c:47:a1:3b:b6:c1:b4:81:74:9f:f5:aa:8c:2c:d0:
12:ba:72:d6:3f:e6:6d:74:e3:a3:f1:88:f7:5a:33:
2e:26:fb:64:39:74:7c:76:47:64:4f:ce:06:6c:31:
db:5c:ab:62:3a:23:d7:95:45:46:99:ca:5b:be:62:
95:d0:8a:89:d9:1d:d0:b0:9d:72:14:3d:3a:af:05:
f7:0d:3a:53:1d:75:47:1a:34:84:2d:a3:bc:71:10:
fc:31:75:ac:f8:15:18:1e:d8:07:27:1f:9d:c4:d4:
1e:79:b8:d5:cf:0e:91:ec:49:d2:b3:6f:74:ad:dd:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:BC:03:EF:26:FA:6E:E8:44:7E:6F:C5:97:D0:83:54:1F:BC:F4
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f3:c2:4c:05:46:ba:09:c0:ac:9a:41:0f:5c:af:8d:ff:8a:
ea:f6:45:6b:8e:4d:31:27:7e:a4:d1:7a:7c:8d:b1:e8:00:be:
b4:b6:65:58:ee:7c:98:2c:84:0e:8d:db:f7:1f:98:55:33:f6:
70:9f:d7:35:e7:cb:7d:53:f1:81:51:5d:ca:c8:ad:88:ba:1a:
56:f8:e8:f8:47:91:de:ea:6a:ad:77:e4:d8:a3:76:c5:bd:70:
27:c2:1f:17:bc:9a:eb:94:9f:6b:e2:13:6e:b6:9d:56:fc:17:
77:33:03:f3:64:fb:57:11:15:82:40:65:9b:8e:2b:e3:3d:50:
5b:b5:15:1b:34:b0:f8:52:7b:61:25:17:e3:a0:c5:e9:f5:bf:
59:bd:3c:f3:69:3c:a7:f5:b2:95:f2:f9:76:69:1d:19:43:89:
60:d0:22:5a:d2:45:0e:17:e0:60:16:f8:58:6d:74:a7:e3:0c:
28:2b:6c:10:f0:0e:5a:ca:fe:2a:38:8e:11:4b:43:d2:8e:28:
6c:02:f2:5c:c4:64:99:29:95:57:9e:4e:c1:e9:24:92:44:26:
07:c5:34:64:2c:f0:f5:28:4d:75:e5:4c:28:b3:f3:32:ea:fb:
3a:5c:ed:d4:34:11:e9:4d:76:7b:c2:2c:ff:41:b3:3a:4b:6b:
07:90:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:53 2026 by rpki-client