Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: KFTfsVRIBe8d/EakW7th0SvrcTkrgIjQltJ50gICa0Q=
Subject key identifier: 8D:28:14:41:EB:8D:7C:6E:71:FE:22:79:6D:A3:6A:04:7D:F8:A9:58
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 019E1F47A45BA7CE15170FE80AB8A0AC7E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 0672
Signing time: Wed 13 May 2026 03:00:49 +0000
Manifest this update: Wed 13 May 2026 03:00:49 +0000
Manifest next update: Thu 14 May 2026 03:00:49 +0000
Files and hashes: 1: mRqgMQ1oyI_OLISSLDMm0vHAWUE.roa (hash: Yip22LT0+wHV/CLjrRT+qmDSA0wut/7NqfT12lIPjXM=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: YyhepCWpZI648J8algndVQg59e++GLlHlrbOMU57AnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a4:5b:a7:ce:15:17:0f:e8:0a:b8:a0:ac:7e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: May 13 03:00:49 2026 GMT
Not After : May 14 03:00:49 2026 GMT
Subject: CN=8d281441eb8d7c6e71fe22796da36a047df8a958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:45:6d:a3:0b:cc:7e:9e:5a:96:ef:b6:c6:
98:53:25:9a:68:57:71:1c:f6:d6:d0:57:3c:46:95:
b1:b9:ba:c4:3f:6b:99:ed:1b:30:c0:c3:4d:27:7a:
d5:c5:e3:80:fc:2e:53:40:9b:ac:e5:25:bd:30:00:
b7:2a:95:e7:17:cb:2c:f9:04:bb:4d:76:39:d5:3b:
e3:23:67:12:5c:3a:b9:7d:d2:d3:2f:1d:e3:22:45:
46:d6:4a:8d:5c:dd:57:a1:77:d0:96:03:c1:0e:66:
90:7d:83:68:84:5d:b2:39:c5:2d:39:db:c5:28:36:
8c:18:30:8a:b3:05:84:3b:97:0e:75:d6:fb:6a:a1:
92:76:01:97:a6:e5:18:5a:6d:4c:5d:93:0b:21:36:
b7:61:4b:9d:3f:83:4f:7f:e0:38:73:27:33:c4:8f:
67:c4:40:84:01:11:af:0b:be:4a:a2:4c:5a:44:05:
98:87:74:f1:ae:c0:9f:8a:85:df:2b:c4:72:66:d4:
ff:51:9a:66:d2:be:cf:38:3d:2a:f5:22:5a:24:6e:
f7:e4:e2:d7:01:54:dd:e5:02:96:e5:a8:0c:03:ac:
c5:b7:a4:50:29:b9:48:f4:23:c0:e4:e5:22:1f:64:
2d:33:87:0f:93:94:ee:73:20:5e:61:80:61:88:bd:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:14:41:EB:8D:7C:6E:71:FE:22:79:6D:A3:6A:04:7D:F8:A9:58
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:7c:4a:d3:9b:73:0f:de:ba:5e:f3:41:7f:76:e6:94:5b:
22:6b:a3:f4:57:b1:a7:13:d3:0b:5f:d5:58:99:c4:90:74:d9:
23:6f:2b:40:a5:1f:72:5e:19:55:ff:3c:79:10:dc:8c:51:16:
cb:66:45:ae:11:6e:33:f6:98:8e:75:59:0e:16:32:4b:72:78:
f7:8c:59:fa:f4:68:e3:d1:b7:d4:a0:9e:f7:e1:ef:32:f9:54:
bc:61:d0:95:6d:c1:47:d6:e5:65:fd:d1:a7:6d:93:2a:17:44:
a0:b2:22:77:7c:e9:69:8b:19:61:f4:df:37:a6:2f:7a:28:49:
16:2c:5b:0d:fa:1a:7e:f9:75:1d:8a:0f:1b:e3:6e:d4:ea:e7:
b0:dd:af:74:3e:e1:98:61:aa:8e:a1:c8:35:41:58:df:c7:fa:
8b:97:ab:41:7f:e1:b3:fe:67:ee:5e:10:d1:bf:dd:5d:42:1a:
c6:e4:5a:45:9a:a3:a3:67:7f:d3:04:05:58:a6:22:1f:bb:37:
13:91:96:f7:e8:bb:ee:27:27:7a:08:06:25:5b:e2:e4:ad:52:
5a:38:6a:6b:c8:51:d5:c1:fd:bf:aa:47:16:5d:0a:18:df:e4:
6e:f9:00:69:19:2b:1e:88:4a:bf:6c:90:12:71:13:4b:ae:eb:
ee:20:f9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR6Rbp84VFw/oCrigrH4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk
NjRmZTQwHhcNMjYwNTEzMDMwMDQ5WhcNMjYwNTE0MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZDI4MTQ0MWViOGQ3YzZlNzFmZTIyNzk2ZGEzNmEwNDdkZjhhOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ZFbaMLzH6eWpbvtsaYUyWaaFdx
HPbW0Fc8RpWxubrEP2uZ7RswwMNNJ3rVxeOA/C5TQJus5SW9MAC3KpXnF8ss+QS7
TXY51TvjI2cSXDq5fdLTLx3jIkVG1kqNXN1XoXfQlgPBDmaQfYNohF2yOcUtOdvF
KDaMGDCKswWEO5cOddb7aqGSdgGXpuUYWm1MXZMLITa3YUudP4NPf+A4cyczxI9n
xECEARGvC75KokxaRAWYh3TxrsCfioXfK8RyZtT/UZpm0r7POD0q9SJaJG735OLX
AVTd5QKW5agMA6zFt6RQKblI9CPA5OUiH2QtM4cPk5TucyBeYYBhiL1eTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0oFEHrjXxucf4ieW2jagR9+KlYMB8GA1UdIwQY
MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt
NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz
LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoB18StOb
cw/eul7zQX925pRbImuj9FexpxPTC1/VWJnEkHTZI28rQKUfcl4ZVf88eRDcjFEW
y2ZFrhFuM/aYjnVZDhYyS3J494xZ+vRo49G31KCe9+HvMvlUvGHQlW3BR9blZf3R
p22TKhdEoLIid3zpaYsZYfTfN6YveihJFixbDfoafvl1HYoPG+Nu1OrnsN2vdD7h
mGGqjqHINUFY38f6i5erQX/hs/5n7l4Q0b/dXUIaxuRaRZqjo2d/0wQFWKYiH7s3
E5GW9+i77icneggGJVvi5K1SWjhqa8hR1cH9v6pHFl0KGN/kbvkAaRkrHohKv2yQ
EnETS67r7iD54g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:20:25 2026 by rpki-client