
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: DLZAN/CpQI2eC+CAgZIZwuIROUjXA77IMKlLCQ0UQIk=
Subject key identifier: E2:DF:1F:76:F9:51:F3:F4:3D:DC:33:7D:CF:FA:EE:68:48:FC:7B:86
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019E1DC766C5727108CCC7A09A3F08006DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 080C
Signing time: Tue 12 May 2026 20:01:07 +0000
Manifest this update: Tue 12 May 2026 20:01:07 +0000
Manifest next update: Wed 13 May 2026 20:01:07 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: AWMXQTJvP1tnXnN795to3AZdcD8+5vUIU6pJkglMlz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:66:c5:72:71:08:cc:c7:a0:9a:3f:08:00:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: May 12 20:01:07 2026 GMT
Not After : May 13 20:01:07 2026 GMT
Subject: CN=e2df1f76f951f3f43ddc337dcffaee6848fc7b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:42:ba:af:9a:3e:e5:10:68:02:2b:0a:fa:
e3:ea:14:7d:be:30:87:94:25:3a:62:79:a6:e2:5e:
bf:92:b6:97:49:2a:27:46:08:11:e7:30:98:b9:e0:
f4:aa:e9:2f:a8:85:8d:49:d0:41:c2:c2:83:4e:f3:
73:f7:b7:0b:46:bf:19:a1:e5:36:6c:99:0a:fa:13:
c7:81:35:a8:23:8f:54:2d:40:a2:f7:15:8c:79:dc:
b2:87:0f:74:71:b8:c6:ce:d8:3b:e7:5b:63:dd:bb:
07:23:24:9f:1b:21:84:11:a1:4a:eb:0c:76:af:a1:
fa:73:bf:4b:9c:5c:0a:1c:ff:b6:70:e4:af:df:ee:
5c:de:93:fa:ae:e8:46:93:4c:74:8d:e7:63:df:6a:
70:03:0d:d2:24:81:5f:08:d9:8f:a1:bc:59:43:93:
43:c2:77:ff:ae:8f:5f:08:d2:60:28:20:99:3c:1a:
76:8d:f2:f0:7e:1d:86:25:4e:c9:19:eb:b7:50:9e:
3d:a4:6d:3d:72:67:a5:d1:7f:41:c7:89:d1:f8:cf:
25:a3:d0:4e:73:6c:70:39:e6:b1:47:1e:95:67:bf:
7a:66:8c:fd:fe:7d:30:d3:24:fb:aa:47:97:ce:2b:
10:f5:8d:dc:7f:2a:32:30:6b:f1:d8:81:ce:1a:ca:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:1F:76:F9:51:F3:F4:3D:DC:33:7D:CF:FA:EE:68:48:FC:7B:86
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:91:ff:50:c7:a2:69:90:7a:67:19:bc:ae:8a:5b:33:97:d5:
b4:24:ca:48:5f:05:8b:bd:d0:e4:9b:77:dd:9e:6d:38:48:d3:
62:83:38:0b:ac:69:83:0a:ac:17:ac:1c:e2:a3:f9:6d:c4:92:
89:f2:32:40:12:d2:e6:b2:9d:e0:0e:5a:2e:26:b9:0f:8f:d6:
b1:1b:33:2d:70:26:ba:65:fd:b6:69:37:23:59:f3:72:02:90:
12:b7:e8:45:70:cb:37:a0:58:17:a1:2e:9b:11:cd:21:a1:ef:
3d:62:f9:83:16:95:58:72:2b:57:d6:fd:64:b2:c4:25:fa:54:
82:72:45:84:cc:65:97:f6:12:3b:cd:c9:63:b0:78:c3:14:49:
ab:f2:a9:d8:67:fa:52:f1:12:75:5b:64:2c:b6:63:69:d1:6b:
01:8c:96:51:37:11:b3:59:9e:e9:7f:f4:41:55:7f:3f:ac:11:
d5:8b:27:c1:c6:b3:33:57:c2:2b:fa:a2:ef:0b:fb:98:c8:eb:
d7:bb:ea:8e:a4:78:f0:c9:75:5a:ea:17:1e:14:66:cf:d8:8d:
2d:95:b4:fb:f1:95:a3:9c:7c:1b:b7:d7:24:61:71:4b:94:45:
b9:d3:71:8b:86:15:4c:11:49:5f:47:9b:07:77:e1:9a:ee:ef:
b4:a9:0b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx2bFcnEIzMegmj8IAG3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx
MTcxZjEwHhcNMjYwNTEyMjAwMTA3WhcNMjYwNTEzMjAwMTA3WjAzMTEwLwYDVQQD
EyhlMmRmMWY3NmY5NTFmM2Y0M2RkYzMzN2RjZmZhZWU2ODQ4ZmM3Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowRCuq+aPuUQaAIrCvrj6hR9vjCH
lCU6Ynmm4l6/kraXSSonRggR5zCYueD0qukvqIWNSdBBwsKDTvNz97cLRr8ZoeU2
bJkK+hPHgTWoI49ULUCi9xWMedyyhw90cbjGztg751tj3bsHIySfGyGEEaFK6wx2
r6H6c79LnFwKHP+2cOSv3+5c3pP6ruhGk0x0jedj32pwAw3SJIFfCNmPobxZQ5ND
wnf/ro9fCNJgKCCZPBp2jfLwfh2GJU7JGeu3UJ49pG09cmel0X9Bx4nR+M8lo9BO
c2xwOeaxRx6VZ796Zoz9/n0w0yT7qkeXzisQ9Y3cfyoyMGvx2IHOGsqJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLfH3b5UfP0Pdwzfc/67mhI/HuGMB8GA1UdIwQY
MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt
ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl
LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5H/UMei
aZB6Zxm8ropbM5fVtCTKSF8Fi73Q5Jt33Z5tOEjTYoM4C6xpgwqsF6wc4qP5bcSS
ifIyQBLS5rKd4A5aLia5D4/WsRszLXAmumX9tmk3I1nzcgKQErfoRXDLN6BYF6Eu
mxHNIaHvPWL5gxaVWHIrV9b9ZLLEJfpUgnJFhMxll/YSO83JY7B4wxRJq/Kp2Gf6
UvESdVtkLLZjadFrAYyWUTcRs1me6X/0QVV/P6wR1YsnwcazM1fCK/qi7wv7mMjr
17vqjqR48Ml1WuoXHhRmz9iNLZW0+/GVo5x8G7fXJGFxS5RFudNxi4YVTBFJX0eb
B3fhmu7vtKkLmw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:00 2026 by rpki-client