Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: HjvRQR3rMaLtcg+1uyWs7JsjlOszxOwiNFAQUnXEapg=
Subject key identifier: 6A:99:65:6A:2E:CF:E4:0C:74:0A:C6:80:BA:74:88:E3:1A:FC:32:0B
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019E20FEFA2835A9A577DA2B1F585CECF298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:00:41 +0000
Manifest this update: Wed 13 May 2026 11:00:41 +0000
Manifest next update: Thu 14 May 2026 11:00:41 +0000
Files and hashes: 1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: E8JAyL5otRoCAKKbAAUbkpqiccsHcO1H4AwVrL33csw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:fa:28:35:a9:a5:77:da:2b:1f:58:5c:ec:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: May 13 11:00:41 2026 GMT
Not After : May 14 11:00:41 2026 GMT
Subject: CN=6a99656a2ecfe40c740ac680ba7488e31afc320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:ee:59:0c:35:5c:09:be:96:86:14:d6:49:
0f:9c:7d:d1:b7:f0:ff:e3:cb:91:cb:c6:60:71:7f:
3d:1b:34:28:13:52:03:37:d5:70:df:28:2d:68:33:
4b:1b:82:7b:76:ac:71:a0:4d:58:6b:89:06:2b:33:
aa:b2:67:73:be:f3:45:76:f6:7e:ea:b0:a8:18:d1:
51:f8:ed:e2:41:62:13:d9:7c:0a:90:1e:5f:a2:24:
dd:c6:fc:fd:9c:c5:13:37:79:3d:08:c5:95:11:c2:
b9:98:5d:53:2c:c1:54:f8:f6:2e:f8:05:9e:4f:10:
94:d9:a3:00:0e:c0:2b:84:e1:fa:a3:be:fe:12:31:
af:36:69:8a:ef:19:07:d0:fe:b4:18:89:bd:1e:fc:
ee:29:d9:87:1b:b4:7c:1b:ec:94:54:3c:9e:8e:96:
19:08:5d:25:59:0d:8e:db:9a:98:57:28:04:8a:70:
9a:02:d6:a9:1c:0c:ad:a0:ec:ee:03:f6:8d:22:f3:
c1:e2:9c:05:f2:c4:63:4e:03:28:d0:27:8b:f6:b9:
4f:22:83:e7:cd:ef:36:91:37:86:05:35:e8:f5:4d:
7d:f7:0f:65:62:75:cf:14:06:ea:99:28:82:74:34:
09:50:86:31:ea:71:83:99:a2:ee:ab:67:6b:db:c4:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:65:6A:2E:CF:E4:0C:74:0A:C6:80:BA:74:88:E3:1A:FC:32:0B
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:0e:e6:f8:ea:e8:48:db:07:12:95:84:76:c5:2f:94:4d:
9c:01:e5:c6:74:8c:7c:05:1b:4b:46:51:6c:0a:ef:3d:dd:41:
98:43:eb:85:f8:22:8d:7d:77:53:3e:0b:a6:fc:5f:10:dd:b5:
25:96:a1:d6:da:92:6c:de:11:bc:bd:ce:fb:a5:ff:07:8a:81:
f0:cd:dc:da:37:88:e6:c0:36:09:5e:36:a4:2a:4e:83:6d:51:
b1:c2:41:03:6b:45:d1:ee:af:cb:65:2a:e2:f0:30:a7:63:3f:
c8:0a:79:68:fd:ff:88:2e:9c:73:6e:5c:20:40:ef:67:c3:69:
ce:b5:7d:b8:6d:97:17:7d:28:05:83:17:98:86:8a:b6:4c:15:
2b:0f:26:eb:2f:36:e7:64:22:80:eb:10:1b:a1:a4:30:94:48:
0e:69:e7:ca:6a:1e:61:b6:4d:21:45:08:a9:4c:79:5e:d2:80:
97:ae:27:e9:66:4f:3c:e8:2e:42:49:1d:48:89:70:45:25:eb:
35:27:6d:e0:ca:27:4f:05:3f:5f:13:7f:d5:03:96:d2:5b:e2:
40:62:36:e9:9a:4e:86:6d:c4:ff:f2:4e:46:04:a9:f9:3f:7f:
2a:27:2a:bf:5a:73:6e:e6:b1:10:ac:dc:d6:e9:5f:d7:f1:39:
45:67:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:13 2026 by rpki-client