Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: HHNajj9NPZb02FhJSRulwNnY9zGCFEx6AtPqVCwLNV8=
Subject key identifier: 21:52:39:1C:6C:FD:BA:04:1C:45:A9:D8:DE:C4:DF:AC:CF:C7:C4:51
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019E1EA37E4515E395B81CC67E6289BAD141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 18C9
Signing time: Wed 13 May 2026 00:01:31 +0000
Manifest this update: Wed 13 May 2026 00:01:31 +0000
Manifest next update: Thu 14 May 2026 00:01:31 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: gPblgot8XBzash6Tvj+86asb2zE9rT9x+1m0EDTiztU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:7e:45:15:e3:95:b8:1c:c6:7e:62:89:ba:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: May 13 00:01:31 2026 GMT
Not After : May 14 00:01:31 2026 GMT
Subject: CN=2152391c6cfdba041c45a9d8dec4dfaccfc7c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:22:b5:bd:9b:95:4c:60:31:14:39:10:00:
28:1f:6c:0c:5a:07:23:df:47:01:f8:3e:46:71:e8:
67:22:9c:65:ee:b9:68:41:ca:65:e9:de:dc:d9:91:
12:71:2d:ba:bd:cc:95:c1:0c:2f:3a:58:27:ee:2e:
6f:8c:c3:ac:df:01:36:9e:f9:9a:50:d8:a2:65:53:
6b:ab:d3:f1:dd:7e:8f:60:4a:55:09:2a:8c:e8:a5:
6f:2c:c4:72:99:6d:62:7d:4f:05:32:c7:2f:f2:ec:
48:89:7e:f4:bd:be:2a:5c:de:8f:a9:44:37:5e:53:
59:14:81:7a:c2:17:ba:b2:76:2e:e5:4f:0f:81:44:
ca:41:fe:a5:48:9d:7c:7f:0e:ec:6b:5a:02:12:b2:
3e:00:17:f2:af:e7:2b:5a:4d:6f:20:dc:06:69:4b:
17:4e:59:aa:f2:13:68:8b:76:7d:72:be:b9:b3:09:
d0:15:54:e0:71:4c:0a:c8:56:0f:64:cc:ac:1b:0b:
80:39:ea:d4:85:73:4d:d1:42:52:5b:11:ee:ff:a9:
60:12:bc:24:83:55:24:17:fd:00:aa:98:53:42:da:
f9:b2:79:57:9f:4d:31:39:a4:ac:b9:4f:e1:ef:8d:
5b:fb:2a:50:2e:88:5b:c4:3a:8c:5c:89:15:2c:46:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:39:1C:6C:FD:BA:04:1C:45:A9:D8:DE:C4:DF:AC:CF:C7:C4:51
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d1:f8:21:34:f4:29:47:2e:ce:32:fe:55:91:b8:57:1c:12:
be:aa:8d:4f:b9:53:41:78:aa:6a:fb:ba:09:27:52:2b:03:f8:
94:30:3c:77:39:ba:f2:51:bd:7d:78:20:18:9c:18:34:a1:88:
b5:b2:d4:44:ac:e8:0c:3b:e5:cf:bc:c1:41:ef:36:d2:2f:be:
81:a8:ca:18:78:15:da:31:0c:44:18:34:0d:91:ca:74:b3:ab:
5e:fc:cf:93:fc:29:10:32:a7:b2:01:2c:bf:17:30:eb:2a:b1:
a1:09:ac:84:9f:d3:49:ee:d4:8a:69:54:de:42:4d:c6:50:38:
22:98:3d:d0:75:59:e7:15:2f:05:7a:f8:e1:a8:5c:c4:d6:8c:
2e:9a:08:bb:45:cc:1f:e1:94:12:d1:7d:eb:eb:0c:b7:7c:d9:
26:08:4e:1b:8c:59:aa:d9:db:2f:c9:f1:02:1c:9f:64:2b:08:
f9:68:54:2a:4e:e9:03:80:62:0c:b6:79:00:e7:bf:a7:98:c3:
85:91:29:34:af:44:d8:01:5b:f7:f9:a4:43:53:78:29:c4:6b:
0a:68:63:08:04:46:b6:d1:63:01:a2:b2:92:4a:3a:ae:79:8a:
86:bf:46:52:78:53:88:ce:1d:95:a9:aa:67:1b:3c:44:54:0f:
a8:be:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:05 2026 by rpki-client