Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: HxRtJZcPEsorE4y5H8l0y8ynLYgS8dCJcrJ/KcVgd2w=
Subject key identifier: 2A:85:FA:47:38:18:7F:5C:A9:39:41:81:61:40:06:25:4D:09:63:1A
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 019E1DFDF48AB3F77F9A2511511AC5E3B9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 075D
Signing time: Tue 12 May 2026 21:00:42 +0000
Manifest this update: Tue 12 May 2026 21:00:42 +0000
Manifest next update: Wed 13 May 2026 21:00:42 +0000
Files and hashes: 1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: Ab3uezpzHpH98V8zMSxU67WRc5Kim+jHqgKsdCmoDPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f4:8a:b3:f7:7f:9a:25:11:51:1a:c5:e3:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: May 12 21:00:42 2026 GMT
Not After : May 13 21:00:42 2026 GMT
Subject: CN=2a85fa4738187f5ca9394181614006254d09631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:2a:b0:f0:e6:70:d7:78:23:c2:2d:38:86:
54:71:fb:02:2a:ed:98:15:7d:c2:be:86:74:92:1f:
4e:b4:81:05:fd:38:c3:23:16:50:6e:2e:cc:47:43:
10:a3:23:3f:e3:08:7f:31:60:ba:f4:7e:43:f9:a7:
9c:4e:38:cc:1c:69:38:7e:94:b2:a5:23:33:75:fa:
c3:9d:68:f0:f1:a2:7a:30:cb:57:36:9c:96:fb:7f:
ca:50:2a:00:46:9f:df:c4:cd:a6:cd:1d:50:e6:97:
7b:c7:e4:9c:2e:99:83:2c:3d:cb:3f:e2:51:41:ac:
b9:c8:cf:7e:85:8f:2b:b4:32:86:a0:ee:bb:6f:18:
63:be:69:da:b0:f7:77:a0:04:72:d2:a7:12:2b:b5:
e5:4f:6c:7e:8c:54:be:b4:65:da:a3:07:de:41:d6:
50:7b:3b:93:95:3c:3e:7e:a4:f8:3d:90:ae:f9:6b:
ea:50:27:59:85:34:3d:23:95:6e:e5:d4:7c:d7:f9:
28:35:bc:19:9c:7b:52:51:81:db:78:6f:aa:2f:25:
32:e7:06:b0:71:0e:54:23:ae:5d:6b:0e:77:a7:09:
5c:31:80:39:99:3c:01:c2:12:16:78:12:e7:11:96:
c9:2c:5e:9a:b2:70:12:84:e9:ff:60:e6:9a:5c:34:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:FA:47:38:18:7F:5C:A9:39:41:81:61:40:06:25:4D:09:63:1A
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c5:a2:0b:cb:92:9e:9c:13:89:2c:fe:1b:32:7c:4b:d3:96:
b1:16:49:e9:f2:1f:53:c0:85:06:55:65:92:a4:f7:d1:09:47:
94:e4:7f:bd:58:5a:b4:2a:bc:a7:cd:98:44:79:6a:5a:98:7c:
57:f5:bf:f5:f6:19:cd:d7:be:01:47:6b:29:7e:94:07:88:3a:
56:24:9b:8a:1c:fd:ef:9d:cc:cd:06:6e:62:5b:8a:f3:ac:f3:
71:12:be:cc:48:47:f0:b9:41:b4:e7:69:cc:25:42:0f:64:d8:
fe:11:ac:75:5a:ff:e4:3c:3c:c3:eb:64:8b:73:0b:1c:11:d4:
86:ed:6f:90:cd:e4:c7:65:17:1d:de:2e:a2:6f:28:79:32:d6:
38:78:45:cd:de:3a:97:f1:4e:73:fb:6c:32:bb:80:a2:87:70:
67:56:25:02:79:5b:a3:ad:c5:04:bd:23:f8:90:b2:97:c0:ba:
ed:c7:c9:b1:11:34:4b:89:b9:f0:8e:93:bc:5f:d1:20:4a:09:
eb:92:cd:c7:a6:e1:47:02:4a:b1:f8:97:05:e3:f8:fc:83:87:
b9:b9:b9:03:e3:b8:34:42:ed:76:86:6d:6f:9a:64:5b:a2:22:
31:16:aa:22:63:81:ef:a3:cc:e9:75:95:44:9e:8a:2c:47:ea:
bc:fc:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:51 2026 by rpki-client