Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: wsbvpA7S+GUGFbe9PxoIZeZy2gLOuoXdj2mou752WXk=
Subject key identifier: C1:25:A6:3B:44:F3:C7:06:50:BE:75:DC:01:98:93:58:20:21:04:CB
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 019E1C0F79D6F2664BADAA6488512E7A5B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 0409
Signing time: Tue 12 May 2026 12:00:36 +0000
Manifest this update: Tue 12 May 2026 12:00:36 +0000
Manifest next update: Wed 13 May 2026 12:00:36 +0000
Files and hashes: 1: 1-w8Q-F1I4Vy41impjChS3fMIIAk.roa (hash: PVWxllXwJBpTCgl4ua9BNgJtEDKI8J3jMk9ds1kt2/o=)
2: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: GhVA2Bixt8oRNfzagYOWgSqmaLXZ7hML/b6SRG4XwNQ=)
3: yb-12kSjdtmFiYKJ7b0iZYnL188.roa (hash: d+vCdRtSTB6tb47VKY7kwlb2RuHWojh//M171AF/m/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:79:d6:f2:66:4b:ad:aa:64:88:51:2e:7a:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: May 12 12:00:36 2026 GMT
Not After : May 13 12:00:36 2026 GMT
Subject: CN=c125a63b44f3c70650be75dc01989358202104cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:b8:6c:b4:47:17:9b:cc:88:1e:44:3c:f4:
ea:e0:92:d8:c8:c7:be:79:d5:0b:4a:a7:71:f2:3f:
2e:e3:32:b7:60:cb:61:94:35:31:6d:6d:ec:aa:9a:
85:0b:54:e0:d4:db:32:98:6f:aa:1f:b8:d2:2b:82:
6e:ea:10:3f:4e:e7:36:0f:5d:f9:db:54:9d:bf:d6:
1b:5f:bc:46:c9:d1:26:fe:59:9a:0a:61:d2:9c:8f:
05:06:0b:f7:a5:f7:3e:e9:df:fd:55:d0:93:0f:ab:
1b:43:c1:b6:05:82:f1:2a:85:2a:91:6c:0c:a8:e9:
b9:3c:d4:be:56:75:08:84:cb:58:fd:49:41:15:63:
5b:fd:85:e0:92:e7:8c:7d:89:65:1b:5d:fa:af:d0:
7c:81:b4:ec:e3:06:ef:5c:a0:0c:06:df:d8:34:39:
99:76:a2:50:48:9a:2b:a5:35:cf:06:67:10:72:c5:
fb:4a:00:a0:09:39:d8:4e:db:99:8a:68:9b:b9:cd:
44:e0:e2:ca:e6:98:b5:dc:c6:9d:4b:cd:42:48:4c:
cb:92:03:6d:27:02:4c:8f:ec:23:88:c1:1a:18:71:
07:4a:db:5d:ce:33:e4:f0:ba:47:bc:49:52:20:02:
b9:ac:33:2f:ee:65:19:f3:8c:f8:fa:20:e8:82:73:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:A6:3B:44:F3:C7:06:50:BE:75:DC:01:98:93:58:20:21:04:CB
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5f:1f:a2:a3:ad:ba:a2:69:ef:54:f3:82:2a:08:cf:a9:cc:
0a:e1:72:9c:7c:da:ea:4f:e8:8f:a3:e7:0b:15:f0:cd:f6:eb:
ee:ad:fd:14:e3:73:6e:95:9c:82:ac:6a:21:1c:a4:9b:1a:4f:
c9:9b:1b:6e:cb:24:fd:a7:1a:61:92:93:ef:2a:88:69:e5:b0:
38:2c:46:3a:aa:72:8b:76:d8:5f:43:7e:62:b7:07:b5:4e:66:
f7:11:41:99:61:48:e4:88:5c:3b:4c:6a:a5:51:68:09:eb:89:
18:d0:ab:4d:4e:75:dd:86:77:64:c8:5b:76:4b:92:88:6d:7b:
44:d2:fb:13:47:95:fb:b1:a0:dc:2e:a6:4c:d7:eb:e1:fe:56:
9d:2b:73:86:1f:4d:6a:f2:13:3e:6f:a7:3d:5d:3e:52:7c:fb:
05:15:91:f1:76:33:6c:63:d8:0b:1c:f6:3d:c3:fa:55:73:e3:
76:30:14:96:ec:a6:cc:a2:45:3e:1f:bb:cf:a6:07:c8:58:61:
34:e6:a1:92:25:55:a3:25:88:f3:e0:cd:f2:ad:79:e8:76:92:
37:55:5b:ab:29:5e:66:cc:ec:9a:20:7e:f7:fa:5c:5d:88:6b:
78:82:cf:6a:f2:b7:c1:c3:0c:f8:2f:46:78:55:a7:27:3e:fc:
d2:78:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:12:50 2026 by rpki-client