Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: bu7MMvE+s5QgSVRpWMskSaGu2RUT2CdcdA8aQ8Egmwo=
Subject key identifier: 78:9A:02:92:1F:BF:B4:B1:BC:BC:EF:5B:6B:F9:80:E0:59:9E:FF:2C
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019E1EA3DD3107A03F4759447FC8EAC5B697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 080E
Signing time: Wed 13 May 2026 00:01:55 +0000
Manifest this update: Wed 13 May 2026 00:01:55 +0000
Manifest next update: Thu 14 May 2026 00:01:55 +0000
Files and hashes: 1: 74Dpz122mMMut7bbXL6kEu6zz8E.roa (hash: p7VXpGGYO1rsvZkHdjohiYrbdkLflYguUEoDUa4uT/I=)
2: NHpHHZAIDzgwPpSy6ezW1FtmeD8.roa (hash: np0ySnVq+ohTQoZSQT/qPIOylTE9F9ExAUt5D1kOcwE=)
3: NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa (hash: Q/BQlYDMNejEhVFqRZbNSInpb1ogvcV67Q6DhAARUbc=)
4: NbeD14QOQVqxpCNvyr8gH_GQtrc.roa (hash: oswI2CSKNyAXKvPvhJzaCytbyJezZyC2UppT7NbsjUk=)
5: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: /xTe5EBxStw427+DA6fBC9139vfOmi4al9yMQ6J9RkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:dd:31:07:a0:3f:47:59:44:7f:c8:ea:c5:b6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: May 13 00:01:55 2026 GMT
Not After : May 14 00:01:55 2026 GMT
Subject: CN=789a02921fbfb4b1bcbcef5b6bf980e0599eff2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:1c:a8:14:0e:4f:a3:8a:55:2e:12:84:48:
2c:ab:49:97:eb:06:f5:67:72:ce:5b:89:bc:89:96:
ac:f4:9f:66:b9:d7:bd:1a:c5:05:5f:fb:a8:95:18:
0f:0c:a4:37:41:bb:1e:b5:c9:1a:6b:d2:78:7f:8e:
de:37:c3:c3:dc:5a:c6:cb:cb:db:10:7c:62:4b:c1:
c1:70:f7:89:4c:88:7d:ba:7a:9e:a8:a3:06:03:fa:
22:26:d4:15:d8:da:bf:c9:ed:81:8d:3e:91:17:40:
b7:4d:c5:f4:da:e6:c4:c8:34:70:ca:69:18:5e:d9:
f8:ae:90:05:60:70:33:b1:55:90:a2:42:d8:df:95:
79:1f:e2:20:94:d6:24:95:eb:0d:0f:bd:25:d0:44:
ac:ad:90:5b:9c:3b:88:2b:ec:c6:8b:2d:c4:c8:bd:
57:78:5f:5f:f1:f4:fc:8f:e1:b7:82:ec:67:a6:7a:
0a:51:e7:53:9f:ae:81:0d:5b:da:20:77:08:c7:cd:
e3:3e:00:45:90:18:8e:f2:5f:d0:08:3b:42:22:d2:
19:0b:93:ff:19:69:31:67:44:29:0a:4e:07:21:ae:
fe:d2:4d:3c:cc:75:6e:bb:4d:81:0e:c3:b4:2f:43:
5f:c9:12:f0:79:c7:69:e2:63:2d:b0:d7:e6:07:d8:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9A:02:92:1F:BF:B4:B1:BC:BC:EF:5B:6B:F9:80:E0:59:9E:FF:2C
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:93:94:37:fe:de:22:9f:6a:6b:b6:ab:7f:a8:b8:20:ac:76:
61:e2:d7:5d:17:54:ae:d1:3a:f3:ca:af:5c:f6:2a:c4:14:8b:
22:1c:67:45:9a:84:34:a3:9f:1a:8b:00:7b:ea:5f:e6:14:e9:
13:b1:46:99:9a:d2:75:d6:f4:70:38:c2:28:1e:c3:cd:a6:7c:
e9:40:a8:48:b2:55:9d:54:5a:36:42:bf:13:43:59:61:96:b1:
40:53:da:bc:fd:4b:d6:8a:33:39:d9:0b:ed:f7:ab:b4:d9:f4:
c9:fe:e9:e6:13:4e:27:7d:04:38:27:6f:9c:ce:f3:00:0a:a1:
c2:41:a0:44:0a:3e:2d:ae:f5:60:e4:3d:bb:c2:98:b7:71:8a:
b0:52:07:63:09:2a:ce:03:09:74:09:9c:da:9c:b1:dd:dd:31:
c0:b7:a7:79:3c:e1:d2:ab:32:20:ee:ea:e8:e2:4b:3b:09:8d:
1d:2e:10:59:e6:1d:85:7b:3c:12:29:76:83:f8:05:0c:f3:60:
f6:ab:b4:57:88:ae:40:7e:a6:de:f6:36:c7:08:b7:a4:04:15:
f5:b0:b5:d2:bc:aa:35:f4:73:bf:40:49:e5:18:bf:4d:23:ed:
d8:38:f1:ff:1a:46:76:e2:a1:e6:76:94:ed:48:6d:38:1b:7c:
a3:39:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:37 2026 by rpki-client