Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: CfE6v0O9EeTPpgIuxvSAnes/WR5mf8sGFSew+c73Jnw=
Subject key identifier: 4C:09:AD:5D:E9:54:55:79:C7:B4:16:B8:30:2C:DF:99:8E:64:8C:45
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019E1DFE047F16FC1C90FCDBBB0335BBE252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 16D6
Signing time: Tue 12 May 2026 21:00:47 +0000
Manifest this update: Tue 12 May 2026 21:00:47 +0000
Manifest next update: Wed 13 May 2026 21:00:47 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: tfmCcaBAnOMMrX4rrfYg+cIntu7PCVojv+OWxsePFG0=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:04:7f:16:fc:1c:90:fc:db:bb:03:35:bb:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: May 12 21:00:47 2026 GMT
Not After : May 13 21:00:47 2026 GMT
Subject: CN=4c09ad5de9545579c7b416b8302cdf998e648c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:a2:3e:c2:5f:e4:f7:20:4c:b4:75:cd:d2:
b5:4d:bb:4a:e5:a0:a9:52:c8:a0:d8:19:dd:29:71:
2a:db:2b:31:91:1d:97:c7:60:b7:cd:42:62:bd:dc:
e0:00:31:a1:c2:0c:3d:39:2c:09:27:89:80:17:f5:
89:a3:fe:30:20:bc:2a:ed:9a:ff:9e:aa:14:d7:b2:
c2:78:60:70:9e:ea:04:a0:41:54:69:88:ac:ab:40:
73:91:04:96:aa:8d:b8:71:66:48:af:ae:f9:b9:bb:
e0:e8:48:6b:ea:52:d6:8d:d3:7f:9f:01:b7:a7:83:
1d:a9:70:bb:9e:87:ce:31:04:21:b1:6f:cf:b4:dc:
14:45:6a:73:d3:74:f0:b2:6f:ed:39:44:d5:53:43:
ce:36:ca:88:df:f0:60:18:5a:c3:7a:35:eb:07:d2:
25:b9:fc:25:a0:f4:75:87:bb:6f:73:66:9b:16:5d:
56:fb:e0:af:ec:a4:e1:e8:d3:3e:46:25:74:0c:2a:
a0:6d:3e:e7:6c:5c:f1:19:5d:69:64:75:26:72:e0:
90:1b:1f:89:06:35:75:ef:f4:89:e1:de:70:d8:08:
d1:72:c1:14:c7:f8:5b:00:b6:35:a6:52:08:d3:62:
e2:ed:02:fd:c4:e3:ea:85:bf:e6:87:fa:86:21:8d:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:AD:5D:E9:54:55:79:C7:B4:16:B8:30:2C:DF:99:8E:64:8C:45
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:65:5f:6f:be:61:bd:e2:a8:ca:c0:91:23:d9:7f:eb:12:
ce:fa:1d:85:99:e8:65:c1:67:2b:cc:49:c6:d7:8d:31:71:e4:
db:50:a0:d5:ed:82:81:d6:06:29:20:fe:20:ea:89:8f:55:97:
23:51:75:95:e4:bb:aa:5a:78:91:26:cb:50:2c:73:e4:2e:8d:
c9:6f:09:09:e2:01:42:a2:ba:f5:0d:a9:a3:4a:b3:43:e4:3e:
dd:cb:1a:03:a2:7c:a3:98:fc:f3:99:52:23:d7:50:25:6a:d5:
bf:e1:03:6e:d4:16:16:26:48:df:88:8e:18:ec:6f:df:ae:45:
4c:78:65:01:02:11:75:6c:10:7b:a2:61:dd:94:e7:7c:1c:cc:
de:ee:42:66:84:44:da:f2:60:d8:c4:42:4e:c0:dc:27:a9:bb:
7e:10:83:ce:fa:e3:88:c4:f7:0d:ec:27:65:e8:72:91:19:7d:
dd:ca:6f:bf:85:6f:2b:77:b9:96:4c:43:d3:71:24:3f:4a:63:
42:9c:26:de:ad:2d:56:ba:1c:b8:6a:da:88:2d:48:b1:85:55:
48:f2:b6:ab:45:73:24:f4:d2:1c:a7:92:31:4a:65:2e:55:d6:
13:d1:6e:17:9a:87:df:c9:12:23:5a:ba:90:16:cb:07:33:72:
8a:08:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:00 2026 by rpki-client