Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: w95c48iDi1H6VHGBDLIQUdCnPNZnAeOxoYU8KFyHMQ4=
Subject key identifier: EB:7E:95:6A:11:65:FA:3A:AC:01:3E:06:2B:B3:20:16:34:D2:67:6D
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019E209145EDBDEDB1BD7DE990EB64C78D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0BE9
Signing time: Wed 13 May 2026 09:00:51 +0000
Manifest this update: Wed 13 May 2026 09:00:51 +0000
Manifest next update: Thu 14 May 2026 09:00:51 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: XnbLGy0KXLdPl+7ZyaelTIu32f/yNjX0FwJsNiKWUBM=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:45:ed:bd:ed:b1:bd:7d:e9:90:eb:64:c7:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: May 13 09:00:51 2026 GMT
Not After : May 14 09:00:51 2026 GMT
Subject: CN=eb7e956a1165fa3aac013e062bb3201634d2676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:cb:00:14:f1:d0:df:4e:b1:25:91:09:d1:
8c:a5:0e:ec:09:e1:22:d1:fa:a1:22:79:7e:d8:3e:
15:34:49:3d:1e:a0:41:02:f6:e2:7c:f6:27:ea:28:
77:5c:61:da:8c:b8:2c:56:4c:25:bb:af:ea:2b:7f:
66:ba:23:53:23:06:aa:cc:01:1d:00:ec:d4:66:8d:
d0:02:e5:3e:09:05:c0:48:01:ed:33:90:e9:13:ea:
5c:24:69:33:0a:af:92:c3:cf:31:af:de:a5:37:00:
21:09:f1:c6:13:cd:2d:93:fb:89:b1:e7:26:3d:8f:
ff:ba:41:31:73:8a:c8:4f:bb:27:9e:ae:66:29:4a:
f8:3e:9b:df:f3:a2:78:92:2b:ac:e7:47:bd:18:59:
2c:e6:88:11:1f:f3:b4:9d:12:89:22:68:ee:7a:df:
ea:d0:02:9b:fd:8b:8b:47:71:bc:48:56:15:2f:5d:
0d:56:1d:56:dd:15:6c:27:03:93:f4:27:66:df:c6:
1c:61:f9:e3:47:5f:a7:2f:98:38:73:a1:1c:d0:06:
1d:8e:04:af:2f:b0:fc:37:17:79:83:16:1c:63:09:
32:d7:b9:d0:c9:05:97:14:d2:0b:17:bb:fd:4d:ee:
ac:68:0c:53:8d:4d:1a:ba:61:23:eb:62:bb:ce:e0:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:95:6A:11:65:FA:3A:AC:01:3E:06:2B:B3:20:16:34:D2:67:6D
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:aa:0c:19:2e:0e:69:4f:4b:28:23:fc:3f:32:84:51:ef:f3:
95:98:75:a4:2b:d0:78:55:4e:63:8f:d8:0c:f4:d3:f8:ef:2d:
4b:16:98:6f:f0:cd:6f:c8:eb:b5:8c:de:10:44:de:f5:f1:2d:
0e:b1:e5:85:ba:b2:88:1b:35:89:a3:76:13:48:93:5f:7d:8f:
ca:28:15:ec:c1:8c:3b:26:d7:aa:62:8a:b6:a8:a1:07:2f:d7:
7c:2a:03:df:78:7b:f9:96:d8:ec:1b:5f:8d:b1:a3:e1:62:bd:
26:27:12:af:e8:6f:4b:db:d6:ac:5c:b0:f4:ab:be:9f:51:6f:
d4:e5:e8:ad:89:28:fb:ac:f7:4b:5b:88:42:bb:8a:50:e8:f7:
9a:5c:b9:cb:f2:cd:a5:98:07:27:b3:be:e2:7a:e4:50:1a:92:
60:e7:5c:af:bd:c8:41:4c:4e:cd:6f:17:08:17:fd:c6:be:ba:
d3:7e:35:4c:b6:c7:71:6a:0e:d1:44:c9:1f:4c:22:21:63:3a:
90:4f:91:d4:8e:5d:8a:4e:6b:ae:d0:62:49:92:bd:b6:af:fa:
d5:4d:41:70:97:17:8d:70:4c:12:29:22:40:68:0f:5c:f6:3d:
de:60:93:a4:10:71:aa:a5:a1:77:17:89:27:4e:7c:47:9f:47:
12:1b:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:50 2026 by rpki-client