Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: MivmINp8FKmON+6lGINQvBmyr3ggVNFWjgd/y1G1swg=
Subject key identifier: 86:31:8A:75:26:39:66:52:AD:6E:C4:40:C2:32:04:A3:F3:DE:29:31
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019E20C8B8F070B3E622EA4A80C400BC321C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 190E
Signing time: Wed 13 May 2026 10:01:25 +0000
Manifest this update: Wed 13 May 2026 10:01:25 +0000
Manifest next update: Thu 14 May 2026 10:01:25 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: kdQ0HclIGawB8MOIgh149IZFOijYLFBv4j4V6VPWVFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:b8:f0:70:b3:e6:22:ea:4a:80:c4:00:bc:32:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: May 13 10:01:25 2026 GMT
Not After : May 14 10:01:25 2026 GMT
Subject: CN=86318a7526396652ad6ec440c23204a3f3de2931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:1f:dd:ee:9b:57:a9:17:85:23:15:48:36:
a2:ad:a4:ef:21:e3:95:20:67:16:33:94:d5:91:26:
19:29:1e:be:5b:20:94:ca:07:73:4b:20:55:84:bc:
81:38:43:4f:1a:d6:be:b4:37:a8:aa:f0:f6:0d:fb:
73:ca:ca:26:3a:1c:5b:ea:32:4e:17:4b:81:c8:e5:
e9:38:16:61:8d:65:dd:a5:da:d8:1e:a5:48:ae:4b:
82:d0:9b:f2:14:4c:b2:b3:62:cc:41:f3:01:13:a1:
b1:4f:ee:a5:23:a0:7b:49:59:95:f7:1a:e4:b6:69:
b4:34:2f:3a:6c:bc:ce:11:51:7a:4f:fb:20:2a:40:
09:7f:0d:77:a3:f7:72:49:a0:82:27:b4:48:5d:a1:
36:16:ff:69:76:5a:de:22:27:83:21:70:98:4a:5a:
7d:c1:ea:d0:43:ff:c2:15:84:15:e9:20:1e:f3:75:
29:f3:2a:40:65:1a:d5:d8:b2:49:55:b1:57:df:0b:
00:53:1c:7b:68:ab:ab:02:a2:ae:e9:85:8b:0a:27:
40:2e:5a:55:27:df:25:44:23:97:ff:0e:42:ba:ce:
29:72:88:b4:be:8d:3b:07:fa:d3:ae:9e:6f:2f:13:
11:76:0a:bd:4e:76:28:5d:cb:b6:4e:9b:e9:9a:bc:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:31:8A:75:26:39:66:52:AD:6E:C4:40:C2:32:04:A3:F3:DE:29:31
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:98:74:6c:52:23:d2:ec:c3:a6:51:9c:4c:0d:c1:69:51:2d:
ed:42:f6:aa:4a:b4:fd:63:b5:ec:dc:50:ff:f7:ec:4a:04:2a:
cd:76:f0:c6:7d:90:af:90:f8:f6:63:95:b9:3a:75:fc:35:1b:
81:2b:a1:9d:ff:af:cd:2a:ee:58:cf:05:3d:32:8d:6e:dd:39:
96:c5:0b:d3:0b:f0:3c:9f:58:43:fe:1a:c2:ba:10:f7:3f:5f:
6a:80:9c:f8:08:c4:fd:be:bf:b5:2c:cf:9d:42:70:69:e9:14:
36:82:51:73:29:02:f1:e5:07:fe:0c:11:df:62:9a:34:d5:af:
6c:66:88:a8:85:77:97:17:9b:58:de:b9:bc:78:89:d6:13:d0:
4e:05:f9:72:47:f1:68:09:7a:bd:7d:ef:1c:3c:c9:8c:37:bd:
79:df:d9:49:4b:23:3c:6a:c0:0f:fa:32:ea:0b:eb:3c:70:74:
ef:50:7e:16:29:01:a5:83:8a:b6:b2:3b:71:cf:74:0b:ea:b9:
4f:83:1c:01:5c:c6:2a:83:8a:b3:20:0d:95:db:46:33:de:92:
f4:4f:92:07:f2:e8:1b:38:77:a1:e5:d5:f6:da:e0:8f:3b:48:
31:c4:ed:f8:02:9c:64:90:ce:ff:f6:18:e3:22:e3:eb:f2:c1:
51:3c:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:52 2026 by rpki-client