Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: Wp/09bquSQSxZ3299+whDxrJblS3rpBTOlQkKFLaOyY=
Subject key identifier: 89:B8:BE:5E:7F:D5:1F:2D:94:61:99:B9:68:89:22:D9:14:E4:74:7E
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019E1D59C9D28AE6D2165AA0077FF3156FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0F9B
Signing time: Tue 12 May 2026 18:01:24 +0000
Manifest this update: Tue 12 May 2026 18:01:24 +0000
Manifest next update: Wed 13 May 2026 18:01:24 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: 6vHsSljkVoxJFMGnfVAlEgIKxp/zxkrn8/pDSDlkVug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c9:d2:8a:e6:d2:16:5a:a0:07:7f:f3:15:6f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: May 12 18:01:24 2026 GMT
Not After : May 13 18:01:24 2026 GMT
Subject: CN=89b8be5e7fd51f2d946199b9688922d914e4747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:46:28:8d:ab:7a:47:81:8b:f4:3d:4d:5b:
03:7f:c3:b4:45:b0:1f:a5:77:7b:b0:54:c6:ee:fe:
e5:fe:1b:9d:37:67:48:0c:4c:68:fe:7d:25:11:2a:
16:e7:fc:24:dc:d2:98:39:ab:69:1c:a2:00:38:ee:
5f:ab:a5:44:79:fa:7c:e8:0e:b2:c5:8f:c9:02:3d:
5d:75:a9:ea:af:47:6f:b9:c2:10:67:5a:cc:1f:f7:
5f:32:f6:66:c8:98:d6:cf:70:d0:95:f3:d1:07:c9:
b0:ac:9a:19:13:5f:4a:0e:c3:15:e8:7e:17:03:db:
12:cb:16:81:4a:98:40:d7:fd:5a:6e:b6:65:14:88:
85:e8:38:ed:25:b7:48:11:49:7a:82:31:ce:7f:20:
bd:40:4a:22:49:08:d5:23:30:6c:03:47:31:05:1c:
79:8a:18:89:86:ab:dd:18:be:f0:0d:00:6d:31:3c:
11:16:93:27:ed:18:df:00:92:20:2a:e0:34:65:05:
7a:45:05:d6:d5:10:3e:ae:56:4a:e2:c2:1f:d6:e6:
92:72:62:56:68:9d:d9:7b:1c:1f:e5:ce:47:2c:cf:
d7:b7:74:0c:41:69:d9:80:5f:4c:2e:c6:33:d7:37:
6a:f6:57:98:28:04:6b:02:fc:67:98:a4:dd:56:9b:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:BE:5E:7F:D5:1F:2D:94:61:99:B9:68:89:22:D9:14:E4:74:7E
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:1c:3e:69:ee:dc:4d:a7:b2:11:08:d7:ed:e8:0d:59:0a:
49:09:4c:95:65:f7:ef:a0:f5:63:41:58:ce:8b:b2:f9:cd:0d:
f4:06:33:27:07:05:f5:da:39:61:92:00:8f:af:5a:e7:fa:2e:
16:ce:9e:16:cf:cc:2f:69:fc:8b:7c:5f:b0:6a:9b:66:83:cd:
a6:cc:84:d6:2a:cf:a4:1c:92:0a:c5:a4:75:3f:35:05:e5:b6:
87:f3:01:7c:24:c8:3d:f4:e3:d3:56:c9:a8:4c:59:a3:85:6c:
45:4d:a5:18:5d:89:26:d3:0d:b1:eb:f5:3f:a3:48:91:0b:d9:
95:15:5a:28:83:0d:fb:ba:b3:df:0c:2b:0b:c8:b0:54:c9:d0:
89:9b:62:c8:95:04:d5:38:bd:df:e5:10:a7:f1:24:54:9e:51:
22:f0:4b:6e:e4:d0:c3:43:b7:9e:ab:49:b8:d1:d9:6a:74:55:
11:8e:f0:21:7d:81:93:1a:fd:cb:2c:d5:a6:43:c2:cf:fb:ba:
27:0e:4d:77:5f:ef:fe:ff:54:85:ee:54:86:7e:cc:29:bd:9a:
85:1d:29:18:e1:0c:26:b6:4e:e1:a3:5f:b5:60:9c:30:e3:77:
3c:bf:ec:3d:9e:88:7e:11:4f:85:36:1d:73:24:07:6e:24:48:
6a:52:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:02 2026 by rpki-client