Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: 44I+4DMWQq9JLncJJEaVEKAiq+W8W3y6P0ehDpuvbDQ=
Subject key identifier: AA:90:61:E3:51:10:48:F9:BD:4D:4E:02:36:F3:C4:0D:BE:26:00:00
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019E1D90A39977DD53D743E6F8E4EAF3BC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 1286
Signing time: Tue 12 May 2026 19:01:18 +0000
Manifest this update: Tue 12 May 2026 19:01:18 +0000
Manifest next update: Wed 13 May 2026 19:01:18 +0000
Files and hashes: 1: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (hash: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268=)
2: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (hash: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: M+V9D0Oo5vj233FM5XGJvczC5IemM3IR20K6kIvKpMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a3:99:77:dd:53:d7:43:e6:f8:e4:ea:f3:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: May 12 19:01:18 2026 GMT
Not After : May 13 19:01:18 2026 GMT
Subject: CN=aa9061e3511048f9bd4d4e0236f3c40dbe260000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:4f:52:91:ce:25:27:6a:f9:0b:6f:46:0e:
99:36:33:28:2e:ad:dc:a8:6a:ca:18:9c:93:22:17:
10:e6:4a:87:54:06:43:0f:02:d9:b3:b5:3b:54:7d:
c5:b1:48:92:2f:b4:92:55:9a:80:80:79:4f:86:eb:
d7:b0:e9:a5:a6:ec:6c:5c:92:88:31:78:86:9e:20:
a8:38:98:5e:28:b6:37:53:2d:48:29:73:5f:61:f2:
47:7b:33:15:ef:0a:ce:a8:61:c8:ac:7e:4a:1b:4a:
f5:3c:5f:76:c8:34:9f:f1:86:4f:5d:98:75:25:af:
d8:16:c6:26:59:ad:fe:a1:f1:c0:62:ae:f1:e5:b5:
6c:b4:fc:b3:7a:22:14:c4:ca:03:fb:13:4f:b5:9b:
a2:62:e1:7f:5a:16:76:4a:44:99:ac:09:2b:1e:f1:
73:1a:46:20:4e:74:14:91:48:db:e8:b3:ec:c8:0d:
2c:06:59:18:d0:9c:c2:33:13:4f:c4:3b:1e:47:2d:
ff:26:49:28:f5:02:a2:dd:a7:dc:b2:3a:1b:2b:b2:
9c:92:ef:a9:ce:6d:88:53:6a:7d:8d:60:26:7a:38:
a7:22:ba:53:b0:7a:0d:f3:37:7c:84:be:13:c8:d9:
f0:c5:20:6a:91:b1:2d:c3:34:74:f7:c1:52:3a:f4:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:61:E3:51:10:48:F9:BD:4D:4E:02:36:F3:C4:0D:BE:26:00:00
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:35:09:b2:7a:f3:64:6f:b4:0d:24:32:74:47:5f:5c:05:9c:
73:25:92:66:8c:7e:71:cc:bf:b4:76:51:80:4a:0c:a6:59:f0:
54:61:72:ab:19:92:c5:58:b7:c3:a7:be:15:f4:ee:48:10:b9:
47:12:fd:b4:c8:a4:f3:85:e4:af:79:74:16:fe:78:f5:81:35:
69:4d:c3:fd:87:25:d4:69:c4:1e:af:6b:df:66:67:c3:59:5b:
9c:9d:a6:ee:e4:a8:f0:9f:fb:8a:e4:25:02:4b:c4:e2:a6:c8:
d8:db:0b:de:7f:ee:e3:22:e8:7e:1e:c4:20:12:b0:46:79:21:
f6:e6:b9:95:f4:f5:9c:46:4e:c5:a2:a5:c2:5b:eb:f5:4c:4b:
f3:c7:4d:40:fb:37:39:3b:77:b9:2a:48:ce:7a:a3:b8:d5:77:
c4:a4:f1:b2:e5:ba:84:33:b3:c5:8c:aa:6f:df:89:c3:f6:be:
ff:ba:14:02:9c:2c:30:b5:ec:db:e9:ea:7b:7d:d5:2f:ac:0b:
73:65:a2:7e:e7:6b:cd:3e:87:04:d2:dc:50:9f:6d:68:e3:cb:
a5:9e:df:14:07:9f:8e:27:49:ca:c1:0d:d2:71:50:1c:60:e4:
f5:36:58:00:2b:54:18:39:34:8f:98:26:9d:ad:89:d8:5f:2b:
e6:f5:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:57 2026 by rpki-client