Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: wpCjczisSixXJZZoQiNiYGaKMHvMqyExy19zSKIALpU=
Subject key identifier: 0C:3D:FA:43:31:67:E2:32:F3:A9:96:66:07:BC:5B:98:D5:3C:88:93
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 019E1C46AFB84BDFD429D8A849AA7BF9A9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 13D1
Signing time: Tue 12 May 2026 13:00:54 +0000
Manifest this update: Tue 12 May 2026 13:00:54 +0000
Manifest next update: Wed 13 May 2026 13:00:54 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: 8d2tonnw7rKbtORfB20LGF/q/jphx7trY4tHC3XrxQc=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:af:b8:4b:df:d4:29:d8:a8:49:aa:7b:f9:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: May 12 13:00:54 2026 GMT
Not After : May 13 13:00:54 2026 GMT
Subject: CN=0c3dfa433167e232f3a9966607bc5b98d53c8893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:49:f1:bc:40:c6:c7:3b:60:e5:b1:3e:15:
eb:7a:c2:dc:dc:39:f3:aa:c2:d1:76:5c:c4:95:7f:
fd:55:ce:11:b3:03:db:e7:f2:05:5d:69:36:38:05:
5c:d1:f9:3a:20:c5:e5:7a:4a:e4:36:fa:35:17:92:
3b:07:ae:15:71:00:3e:a2:3f:7d:05:f5:62:a9:6e:
d1:c9:fe:9d:cd:d8:83:9f:2e:71:74:f7:d6:da:56:
18:d5:8e:c3:7c:bd:73:7c:2b:bf:5c:6d:88:0d:47:
81:3e:45:de:2b:c4:f1:98:3c:20:bc:d8:33:91:4d:
f2:8d:07:15:d6:db:be:ee:75:a1:02:ed:d5:4d:99:
6d:0d:aa:f7:fd:f7:bd:f3:62:7c:8b:d4:c3:2e:23:
17:69:91:8d:ef:f1:07:42:3e:8f:52:2b:3d:20:e5:
77:61:3c:c9:9a:ed:39:6c:a9:04:bc:35:73:23:0a:
d8:49:94:67:5a:7f:14:c2:bc:4c:7a:05:c1:b5:90:
82:3b:1f:0a:02:22:b7:7d:3d:6f:05:25:e0:b7:fe:
6f:01:ff:52:d3:df:80:ba:d2:41:fc:50:3f:c4:0f:
a3:c5:2d:30:0d:45:cc:ae:3e:75:36:bf:b1:29:bc:
5d:40:19:79:9d:84:ce:2c:3a:97:a9:81:70:24:3c:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:FA:43:31:67:E2:32:F3:A9:96:66:07:BC:5B:98:D5:3C:88:93
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:e6:ac:e4:f5:f3:bb:1a:a4:01:36:74:92:51:6e:3a:a1:
95:0d:be:e2:4f:78:80:e5:fa:bf:d9:4f:d3:0e:38:09:03:8a:
05:43:75:31:a4:7d:a7:c6:25:81:47:28:47:49:08:30:55:38:
ca:83:15:a5:b4:62:b8:11:51:f3:f8:7f:a4:1b:31:1d:85:55:
79:49:fa:6c:58:88:b0:7c:4c:7c:22:7e:de:52:21:49:03:72:
f5:b9:d6:6d:19:39:25:ed:05:9e:83:f7:78:bb:a8:00:b0:c5:
5a:5a:61:a8:d2:01:d2:30:23:82:b6:f0:89:eb:c1:be:f4:a5:
ee:9a:92:f3:c6:b0:c7:a4:68:0a:3a:8e:51:37:c8:30:2c:ea:
8d:02:06:24:bc:94:f3:f7:51:3a:10:d3:da:8e:47:a4:5f:29:
25:45:00:6d:92:4a:89:fb:8c:12:fe:6a:81:bb:4e:0b:c1:ac:
8d:6e:88:eb:35:06:d5:89:86:dd:66:ae:b0:37:36:92:ba:fc:
31:6e:4b:82:1f:f0:ae:69:cd:ab:1b:94:f0:88:91:53:a2:0e:
aa:18:2c:cd:20:15:b8:68:be:9e:c7:10:c6:3f:4c:a0:bc:3c:
fc:5b:f7:17:95:37:7a:27:43:2a:65:7f:db:69:6f:22:98:58:
b8:af:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:57 2026 by rpki-client