Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: 2vlsNk0B8LFM6wZHUcmt4nhNI4VZhn9SCSE1uVexVDY=
Subject key identifier: AA:AF:5D:A1:92:57:0F:72:6F:99:2B:4C:91:59:A5:E9:74:F1:7A:26
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019E1F7EDA24CAB378691E840C2E18A57B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 18A8
Signing time: Wed 13 May 2026 04:01:07 +0000
Manifest this update: Wed 13 May 2026 04:01:07 +0000
Manifest next update: Thu 14 May 2026 04:01:07 +0000
Files and hashes: 1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=)
2: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: n6vrXecKkTjpn5wkfEpGmKmUaAvb6ug2yMgm05vWIW4=)
3: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:da:24:ca:b3:78:69:1e:84:0c:2e:18:a5:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: May 13 04:01:07 2026 GMT
Not After : May 14 04:01:07 2026 GMT
Subject: CN=aaaf5da192570f726f992b4c9159a5e974f17a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:9b:ca:d1:7d:32:9d:cb:1c:5d:75:52:13:
2b:98:ad:7a:2e:a3:28:a0:c8:db:26:95:85:0c:e7:
dc:c0:60:4b:74:2a:47:db:7f:31:ba:87:e5:5a:7d:
c3:3e:45:2c:47:0d:22:40:ae:c8:68:d2:7c:9c:b8:
6c:43:24:17:a8:3a:66:1e:77:3c:7a:ed:8b:94:52:
d7:12:98:39:dd:a2:7a:5f:71:7b:7b:7e:db:98:b2:
93:28:ee:5f:9d:1f:b6:35:1a:3a:b4:3d:0b:ba:c5:
09:d1:1f:81:d9:cc:f3:a7:1e:77:37:03:0e:0a:14:
08:75:7b:e3:f0:70:41:82:84:86:c9:c1:40:14:a0:
f4:47:79:b0:ae:03:88:8e:c8:cd:8b:45:b4:84:28:
24:1d:76:bc:17:01:28:37:a6:bd:af:94:20:c4:97:
5e:c2:93:6c:28:4e:c7:8d:3d:30:60:44:96:99:59:
7a:f3:92:a9:07:d0:f9:f9:fb:e7:66:1f:3b:73:be:
c2:61:95:70:f1:f5:78:08:33:ea:40:ad:62:f4:1d:
b7:61:b0:aa:b4:ac:7c:00:ac:2c:8b:0f:50:8d:ba:
03:fb:3c:55:b1:c5:fc:59:41:a2:97:5f:ed:64:e2:
71:e5:69:60:1b:d7:a8:2e:ab:04:82:bd:4e:de:97:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:5D:A1:92:57:0F:72:6F:99:2B:4C:91:59:A5:E9:74:F1:7A:26
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:85:bf:6a:c0:93:d5:08:f7:3e:78:fc:00:ea:c7:b6:10:
f0:61:9f:ee:e5:ab:1d:a8:5c:8c:0f:70:a2:27:48:48:95:8e:
20:50:2b:b4:7b:ac:19:59:0a:e3:06:2a:27:01:0d:63:b8:c5:
2b:63:f2:53:09:5c:5a:d9:7f:27:f3:37:61:03:b2:39:e3:cd:
18:a4:bd:2e:97:6d:b2:e7:cf:31:82:24:46:8c:c3:9d:76:2f:
92:a9:4a:5b:ee:77:ef:1b:f6:0a:11:e7:51:c5:f7:c0:e3:b9:
c2:91:91:51:f5:c6:3a:28:25:c9:87:37:43:61:e2:66:ec:33:
6e:5d:58:c2:13:bd:bd:26:ce:f4:00:d4:61:22:f1:0a:88:66:
8d:13:d7:13:d1:3c:84:96:42:0e:38:bf:05:85:c0:6c:aa:d7:
2e:4c:d7:4f:a3:f7:87:a6:73:88:59:bc:f3:5e:26:54:e3:7f:
d2:66:cc:31:68:a9:85:78:51:b4:b8:69:6d:e7:0b:48:53:b9:
72:5b:ad:6c:6b:2f:f0:5d:df:d7:18:28:56:69:b9:24:79:44:
7e:47:ec:b7:d1:12:d5:fd:4a:29:6f:e6:ff:88:e8:80:bc:62:
2e:4e:e9:36:e5:77:10:6d:f9:7d:08:68:df:c8:cd:f7:43:bc:
8d:34:0b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fftokyrN4aR6EDC4YpXs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz
N2EwYzYwHhcNMjYwNTEzMDQwMTA3WhcNMjYwNTE0MDQwMTA3WjAzMTEwLwYDVQQD
EyhhYWFmNWRhMTkyNTcwZjcyNmY5OTJiNGM5MTU5YTVlOTc0ZjE3YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfybytF9Mp3LHF11UhMrmK16LqMo
oMjbJpWFDOfcwGBLdCpH238xuoflWn3DPkUsRw0iQK7IaNJ8nLhsQyQXqDpmHnc8
eu2LlFLXEpg53aJ6X3F7e37bmLKTKO5fnR+2NRo6tD0LusUJ0R+B2czzpx53NwMO
ChQIdXvj8HBBgoSGycFAFKD0R3mwrgOIjsjNi0W0hCgkHXa8FwEoN6a9r5QgxJde
wpNsKE7HjT0wYESWmVl685KpB9D5+fvnZh87c77CYZVw8fV4CDPqQK1i9B23YbCq
tKx8AKwsiw9QjboD+zxVscX8WUGil1/tZOJx5WlgG9eoLqsEgr1O3pcDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqvXaGSVw9yb5krTJFZpel08XomMB8GA1UdIwQY
MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt
OGI0NzkzZjkwZjE1LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1
LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKyFv2rA
k9UI9z54/ADqx7YQ8GGf7uWrHahcjA9woidISJWOIFArtHusGVkK4wYqJwENY7jF
K2PyUwlcWtl/J/M3YQOyOePNGKS9LpdtsufPMYIkRozDnXYvkqlKW+537xv2ChHn
UcX3wOO5wpGRUfXGOiglyYc3Q2HiZuwzbl1YwhO9vSbO9ADUYSLxCohmjRPXE9E8
hJZCDji/BYXAbKrXLkzXT6P3h6ZziFm8814mVON/0mbMMWiphXhRtLhpbecLSFO5
clutbGsv8F3f1xgoVmm5JHlEfkfst9ES1f1KKW/m/4jogLxiLk7pNuV3EG35fQho
38jN90O8jTQLFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:18:26 2026 by rpki-client