Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: x8RGM6he94J/mYV9SLtrhyF/cW6bd409QAQ5MFnHBPY=
Subject key identifier: 75:A9:92:81:2A:E7:3A:CD:60:2E:71:73:FA:FB:24:B6:6F:34:32:37
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019E216DC05040095E9AB1DA074A0BE5CBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 15EF
Signing time: Wed 13 May 2026 13:01:41 +0000
Manifest this update: Wed 13 May 2026 13:01:41 +0000
Manifest next update: Thu 14 May 2026 13:01:41 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: rIExSdR4v4Ih6F9Us28Kh899YAbf5+2s2Yc7U3G62U8=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:c0:50:40:09:5e:9a:b1:da:07:4a:0b:e5:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: May 13 13:01:41 2026 GMT
Not After : May 14 13:01:41 2026 GMT
Subject: CN=75a992812ae73acd602e7173fafb24b66f343237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:19:d3:75:a7:98:94:3e:ac:9a:89:c8:99:
73:c6:25:da:1e:98:a8:e6:b9:61:f3:5d:21:32:9d:
65:be:89:f9:79:64:d0:b3:05:87:45:62:7d:f2:5f:
5e:b3:22:8f:24:cf:b9:8f:09:42:dd:43:db:8f:e5:
d3:bf:84:aa:4e:98:75:12:22:68:f6:dd:57:25:b8:
4d:b1:01:4c:54:84:47:7f:21:c0:df:b4:1a:4b:0a:
a3:39:59:c7:39:75:e2:ba:6f:1d:74:9c:7e:cc:02:
84:0a:1e:e1:c8:c9:9a:1c:df:69:5a:f1:18:9a:b1:
df:53:c2:a7:fa:6d:9c:16:1b:0b:39:5b:3b:a6:24:
58:ba:3c:bf:d5:d9:24:d7:0b:26:a0:fa:06:8c:ec:
20:a2:c5:0d:24:2f:12:f7:c2:53:4e:c9:c1:ca:06:
7f:0d:38:d2:96:87:78:aa:d1:ea:30:91:7f:bc:db:
e7:f1:2f:eb:1d:59:0f:b7:f8:e8:cd:b3:91:f5:8f:
8c:cb:4d:60:8d:9f:4a:b3:49:4b:ec:36:b5:45:5d:
81:20:33:51:09:fc:68:63:55:e3:a5:21:94:06:6b:
3f:9f:61:d9:43:9b:02:c2:30:38:48:96:7a:80:05:
b7:32:a5:87:68:41:c1:12:0f:da:1d:d0:7d:e9:fe:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:92:81:2A:E7:3A:CD:60:2E:71:73:FA:FB:24:B6:6F:34:32:37
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bc:2a:7f:1a:c4:c3:ae:c0:69:96:d9:09:4e:e2:0f:b0:1d:
94:f2:f8:9a:b0:9e:94:b9:13:ce:87:63:2f:32:e6:84:60:88:
29:ed:e1:c7:33:5b:bb:64:c6:52:aa:b8:45:8b:af:6c:0b:77:
91:bc:a7:df:6f:69:32:e3:b5:3b:cc:bf:05:4d:56:ec:67:e7:
d3:52:10:3b:c6:58:81:4e:f3:70:a4:3a:3d:70:4d:69:5b:c0:
8e:87:a8:21:94:13:75:0a:b3:4b:47:26:c9:82:39:dc:aa:f1:
dc:9a:2d:36:9d:ec:41:85:0b:6a:98:c7:63:31:fc:f0:0a:4e:
0f:b0:53:46:55:31:79:33:c9:fb:30:fd:11:40:64:fd:27:79:
b6:4e:3f:05:6d:2f:5c:b8:89:52:4d:95:da:12:09:15:1f:ee:
59:d8:01:bb:48:2a:7e:31:4b:44:fa:da:65:0e:07:99:c6:9d:
b8:ab:35:25:83:9b:7c:a9:16:b9:cf:a3:e1:5b:7d:25:7c:c9:
da:a8:0e:dd:db:1f:ed:a3:54:72:f0:2c:41:07:1d:0b:4b:a8:
13:3e:5e:1e:cd:05:dc:57:7b:43:b2:f4:04:b3:71:9b:4b:68:
0e:fb:64:96:cb:09:22:d4:fc:90:53:82:d0:bf:d1:1e:67:9d:
47:7e:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:21 2026 by rpki-client