Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
File: qpzqolwClcyPY42qbWT3Ii9rCS8.mft (raw, json)
Hash identifier: N3gFTzvHqGABkKWIKA06z/gOs8S8qKl/R8QQWgIkfJQ=
Subject key identifier: F5:28:4C:D3:71:61:FB:12:A0:54:21:B1:96:97:AC:AE:0F:4B:1B:FE
Authority key identifier: AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
Certificate issuer: /CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Certificate serial: 019E1FB5BC42CCE7865A2B4654D8329078CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
Manifest number: D3
Signing time: Wed 13 May 2026 05:01:04 +0000
Manifest this update: Wed 13 May 2026 05:01:04 +0000
Manifest next update: Thu 14 May 2026 05:01:04 +0000
Files and hashes: 1: 5yQDORsjAc2qkrpGb2sFa87WdeQ.roa (hash: 6lWA3h6svKzAnLIBjtQj55IORN1aTf/i5R1xbiHi7hA=)
2: YR0KezbAbuwIwjhj2avNGcLc02U.roa (hash: rah4d1f8WB0+ik2fE3EWyLXPHfSge2y2R4kVqT1hjgw=)
3: qpzqolwClcyPY42qbWT3Ii9rCS8.crl (hash: Bc/t55R9diozbdocVOtR9E0LzlZ721/9lziZbSabIgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:bc:42:cc:e7:86:5a:2b:46:54:d8:32:90:78:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Validity
Not Before: May 13 05:01:04 2026 GMT
Not After : May 14 05:01:04 2026 GMT
Subject: CN=f5284cd37161fb12a05421b19697acae0f4b1bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:b9:15:0b:49:61:fa:dc:75:98:ff:11:05:
4c:be:85:a3:ac:07:79:1f:ca:ef:16:80:2c:e7:e4:
f9:10:77:03:d1:42:79:30:96:78:9c:bc:c6:5d:6b:
a4:8a:10:cd:84:80:ad:e2:28:8f:f6:fc:f0:75:a6:
46:e6:9e:f2:bf:7a:52:19:8d:8f:f1:c1:d5:c0:ad:
68:20:b0:fe:ec:41:c8:d1:cd:d7:d7:64:2c:a9:c3:
e3:05:8c:2b:1e:80:9e:14:49:bf:c5:b8:ff:37:9b:
2f:5e:45:f6:30:0d:d9:52:6e:3e:08:43:a3:76:94:
fa:3b:84:0a:ac:2c:61:a2:db:b4:a2:ec:96:73:5f:
45:65:0c:1f:37:41:71:bd:5b:9e:9f:a3:46:1e:54:
26:3f:13:31:d8:01:20:6b:d4:5f:31:c2:85:9a:9d:
85:f9:87:bf:6b:f4:f7:7a:2d:65:f0:23:a8:09:ff:
35:49:e4:d6:96:23:b6:fc:44:50:72:18:44:5e:f3:
83:da:b0:bb:f2:dd:17:bc:73:b2:81:40:85:74:f2:
fc:9c:0e:58:ff:55:5a:c2:8b:f9:72:ef:e6:c3:39:
3e:e7:06:de:3a:ae:c1:90:4e:32:3e:16:83:7d:f2:
36:05:a6:99:26:e5:87:6d:49:4d:dd:d3:a7:bf:b2:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:4C:D3:71:61:FB:12:A0:54:21:B1:96:97:AC:AE:0F:4B:1B:FE
X509v3 Authority Key Identifier:
keyid:AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:54:1e:a8:18:a4:43:6b:8e:3c:b0:97:b9:45:84:97:8d:
b0:d3:35:3f:75:f3:af:08:54:e3:16:20:68:ac:d0:23:13:fb:
1c:6e:63:d7:6f:33:6b:d0:40:97:a7:ac:b8:43:10:90:7e:81:
0e:4c:e9:34:a1:73:4a:06:b9:2a:a8:9d:8a:ac:c5:29:9c:0a:
fb:3a:84:f6:b2:bf:9e:eb:1b:3f:2e:a4:ae:c4:8e:64:01:18:
01:8f:04:6e:5e:72:7a:fb:39:37:24:f1:74:d8:10:72:00:b4:
c9:51:03:a5:95:cc:f7:22:88:79:a7:3b:6e:ec:f1:30:62:89:
fc:e1:ae:3b:c4:e2:a4:64:e8:0e:20:f4:42:df:d0:48:a9:a3:
f8:6e:ed:3e:1e:05:b7:d8:09:1b:1a:fa:08:1f:7a:de:ba:a8:
a8:4f:45:83:35:98:61:b1:ba:45:da:89:07:0b:1a:d1:d7:6a:
f9:91:6f:cc:f3:a1:5f:e8:48:84:ec:e0:55:db:f1:c6:d6:34:
a1:5c:f8:0d:a0:d2:bc:dc:69:8f:d6:0a:a7:94:6f:c1:4c:6a:
e4:7a:d4:f3:96:a9:f1:2f:61:3f:0b:cc:c5:2c:d6:1e:0d:64:
bc:17:a4:06:1b:d6:44:bb:35:64:84:cd:a4:8a:a2:5e:ca:f5:
d6:8f:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:34 2026 by rpki-client