Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: 7bim85MMVEKtMuDqgn7RJv3zn529OzRVWte8I2GpAuI=
Subject key identifier: 4C:EC:E5:CB:5C:78:CD:AB:C9:A2:4E:AA:95:59:51:C7:71:D8:25:A5
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019E1F47EA6F79A1B2D722F643EF8674A715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 03:01:07 +0000
Manifest this update: Wed 13 May 2026 03:01:07 +0000
Manifest next update: Thu 14 May 2026 03:01:07 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=)
3: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: tTwyfiMVQ3oLvSXzt86hhikH9aOSysb2ITg6Do7nunQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ea:6f:79:a1:b2:d7:22:f6:43:ef:86:74:a7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: May 13 03:01:07 2026 GMT
Not After : May 14 03:01:07 2026 GMT
Subject: CN=4cece5cb5c78cdabc9a24eaa955951c771d825a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:c1:cd:d0:2b:a4:94:e5:7c:be:e4:14:74:
11:35:1e:c8:df:ed:b1:b0:d1:ad:98:96:1f:b0:2e:
d1:0e:7b:6e:a4:e5:88:50:3c:cd:df:72:12:2c:ca:
01:34:ed:c4:0c:4a:71:a1:fe:01:46:0d:5b:00:bc:
4f:a9:f4:11:e2:e4:e0:f6:f6:33:e1:91:69:56:fa:
ec:25:94:e9:a5:8c:0c:d9:ed:99:89:0b:85:89:fa:
5d:ab:ed:46:59:1f:ae:49:01:9c:82:a3:3e:1e:46:
7d:e3:43:01:49:18:36:2b:82:73:01:0b:1e:05:8b:
5f:b7:cb:52:2e:72:d8:dc:c0:74:bd:7f:83:79:95:
80:09:63:1a:c3:cb:19:13:b1:72:d1:b8:52:cc:e6:
43:5b:4b:6d:d8:7b:de:17:62:b3:37:4a:b7:30:49:
f1:7f:d3:b6:56:17:02:a9:84:dc:0f:01:0a:04:f8:
88:cb:5a:71:a3:10:b5:1e:ea:8b:fd:f2:f9:19:27:
1e:31:40:87:c9:f6:29:5b:6a:c9:db:b8:6e:f3:67:
3c:ef:b0:c8:9d:a1:17:f6:5c:cf:94:3f:c9:88:9f:
09:a3:60:47:8e:83:d8:33:01:e1:5d:be:d7:0e:b2:
20:d9:73:28:a7:82:df:d8:2e:b9:bc:fc:6f:7e:b6:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:E5:CB:5C:78:CD:AB:C9:A2:4E:AA:95:59:51:C7:71:D8:25:A5
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1b:41:df:17:a5:1f:89:0a:fe:3d:bf:03:1a:2c:e6:99:6a:
ec:23:df:cd:cb:31:0f:21:e1:d2:c9:8f:f8:8c:5d:d3:74:7e:
ee:5e:d6:57:eb:8d:45:11:7a:c3:03:e2:08:6b:fe:67:bc:f3:
c0:9b:d9:8f:72:80:9c:98:fb:dd:36:1c:64:8b:d1:f2:fe:f0:
41:d0:2c:ec:30:c4:68:9c:8b:43:9b:03:e4:be:f7:0f:a2:0c:
70:b8:17:db:c2:02:d2:89:b4:11:88:51:79:87:bf:3f:81:ea:
5b:29:97:f6:bd:69:02:37:a5:92:1a:26:1b:e1:ee:57:3b:b6:
42:4b:4f:19:f1:62:82:f8:8e:db:8a:69:1d:2e:fc:16:4f:86:
76:c8:e5:84:98:cf:7b:97:00:0c:20:c7:9e:21:3d:fe:96:4b:
53:de:bb:fd:50:46:5a:7c:1f:0d:3c:9c:8d:cc:7f:b4:7d:67:
2b:d7:08:f3:8d:3f:98:6c:6c:3a:d5:1c:75:f4:8d:3e:d2:d6:
30:b4:53:a4:ac:73:8e:05:bb:63:28:67:1b:cd:96:e1:47:28:
5c:9e:b4:59:90:48:d3:17:62:69:27:f0:fd:85:37:57:47:62:
45:00:11:27:7b:f1:80:3d:5c:b5:fe:37:47:1b:f7:5e:cf:05:
14:8f:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:51 2026 by rpki-client