Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: xQwo/D5FOnniC1LlU9NiPvkwYGCsw07J1ByQAilCzUQ=
Subject key identifier: A3:1A:EC:BF:0E:3E:BA:5D:72:86:54:A0:21:DC:EE:19:F8:0B:EE:58
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019E1E35D0646CA6AC5C6C4992AAE4011705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 18E1
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: vKZVk0Ss2sOwIW8urtsPJ6qKeg3fRrr+OPjIDIjhkKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d0:64:6c:a6:ac:5c:6c:49:92:aa:e4:01:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=a31aecbf0e3eba5d728654a021dcee19f80bee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:ac:bc:87:6e:fa:0b:15:0e:e6:b1:af:e5:
73:58:66:3b:bd:c0:7b:06:b6:18:e8:8b:f5:bf:ad:
70:46:06:28:ed:06:31:ba:77:36:83:7b:2d:38:f2:
d7:7b:3e:d8:55:27:4b:f3:92:6f:38:c8:db:6e:87:
3a:cc:96:a0:8d:7a:e1:ac:5c:4d:77:f6:5b:48:59:
0d:88:55:2a:3a:ae:b5:8c:44:25:d4:14:c6:6e:1f:
62:da:07:f9:84:e3:90:e0:1a:4b:63:52:6b:da:70:
76:76:66:68:16:59:6f:59:93:b4:18:39:09:41:17:
25:1b:fc:22:a3:af:bb:0b:7c:08:08:ba:62:21:28:
6d:59:3c:79:2e:ef:f4:05:89:ba:bd:c1:6f:8b:6c:
17:37:89:e7:d8:e9:7e:60:f9:f3:c3:f6:6f:16:d0:
40:f3:b0:ae:20:82:96:e4:ab:47:90:36:35:49:a6:
7e:e9:04:b5:f0:e1:9b:26:a1:71:58:6e:ec:e3:e7:
c7:51:4c:2f:8d:cd:d2:a4:4f:f4:1e:b0:5d:87:57:
a9:07:80:5a:08:ac:1e:c8:48:6d:d5:87:2d:ec:97:
e7:e4:d2:a6:83:1e:12:95:73:6f:7e:bc:ec:a6:f5:
59:ae:1f:0a:00:52:b0:8e:00:ab:b3:d3:fd:ed:35:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:EC:BF:0E:3E:BA:5D:72:86:54:A0:21:DC:EE:19:F8:0B:EE:58
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:60:71:61:7d:1e:82:06:8d:8a:c9:8a:98:10:15:8a:0d:fb:
91:08:ed:c6:8b:f8:89:52:9d:15:18:c3:4b:7a:d8:e1:0f:7b:
c8:08:aa:02:74:df:61:60:3c:d2:b7:ce:50:a5:6d:37:48:b9:
ca:e0:9f:46:bd:50:19:08:5b:de:9e:e2:d9:56:15:21:66:9e:
0c:e5:cc:9f:ca:91:51:db:01:25:37:37:fc:2a:f3:94:81:aa:
f1:ff:2d:97:60:96:90:b3:21:8c:e9:fb:93:97:dd:38:01:64:
15:72:54:b5:69:33:95:6a:0c:8c:8e:43:85:8b:ba:99:85:26:
df:a6:5a:54:d8:4d:97:97:89:1f:3c:20:d9:e6:6f:cd:f6:d4:
fe:5a:99:1d:89:a7:22:ae:8a:f8:12:2d:71:45:b3:bf:09:57:
22:32:e1:b6:18:85:06:c1:7e:b2:84:6a:e5:8c:78:bf:f7:8b:
2e:ea:61:e0:3d:1d:20:11:29:c4:e7:c0:cc:a9:eb:39:28:f1:
00:df:b4:5f:a0:a5:97:bc:45:cf:f4:df:5c:c3:e8:4e:50:6e:
60:b7:ec:a0:1d:d6:98:8d:71:7a:16:60:a5:4f:bb:cc:46:c6:
a0:6b:a4:db:1b:a7:e8:00:4a:6c:e6:c1:59:a8:a5:4d:5d:fc:
12:e1:97:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNdBkbKasXGxJkqrkARcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjYwNTEyMjIwMTQzWhcNMjYwNTEzMjIwMTQzWjAzMTEwLwYDVQQD
EyhhMzFhZWNiZjBlM2ViYTVkNzI4NjU0YTAyMWRjZWUxOWY4MGJlZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyusvIdu+gsVDuaxr+VzWGY7vcB7
BrYY6Iv1v61wRgYo7QYxunc2g3stOPLXez7YVSdL85JvOMjbboc6zJagjXrhrFxN
d/ZbSFkNiFUqOq61jEQl1BTGbh9i2gf5hOOQ4BpLY1Jr2nB2dmZoFllvWZO0GDkJ
QRclG/wio6+7C3wICLpiIShtWTx5Lu/0BYm6vcFvi2wXN4nn2Ol+YPnzw/ZvFtBA
87CuIIKW5KtHkDY1SaZ+6QS18OGbJqFxWG7s4+fHUUwvjc3SpE/0HrBdh1epB4Ba
CKweyEht1Yct7Jfn5NKmgx4SlXNvfrzspvVZrh8KAFKwjgCrs9P97TWCawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMa7L8OPrpdcoZUoCHc7hn4C+5YMB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2BxYX0e
ggaNismKmBAVig37kQjtxov4iVKdFRjDS3rY4Q97yAiqAnTfYWA80rfOUKVtN0i5
yuCfRr1QGQhb3p7i2VYVIWaeDOXMn8qRUdsBJTc3/CrzlIGq8f8tl2CWkLMhjOn7
k5fdOAFkFXJUtWkzlWoMjI5DhYu6mYUm36ZaVNhNl5eJHzwg2eZvzfbU/lqZHYmn
Iq6K+BItcUWzvwlXIjLhthiFBsF+soRq5Yx4v/eLLuph4D0dIBEpxOfAzKnrOSjx
AN+0X6Cll7xFz/TfXMPoTlBuYLfsoB3WmI1xehZgpU+7zEbGoGuk2xun6ABKbObB
WailTV38EuGXBw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:58:03 2026 by rpki-client