Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: ireluSMmstZioxBxDZMbXfJFeI3vTtGCWDW7JFUCnYo=
Subject key identifier: 27:13:CD:6C:B8:BB:41:FD:D3:5F:BD:76:0F:B3:3B:53:9B:3D:E8:16
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019E1E35966528F0E34CA24B1776C86B25F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 0356
Signing time: Tue 12 May 2026 22:01:28 +0000
Manifest this update: Tue 12 May 2026 22:01:28 +0000
Manifest next update: Wed 13 May 2026 22:01:28 +0000
Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=)
2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: mf7zCNuk4WPytWVMeuoaItOzqfXimyr2NWWBF0Mc2JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:96:65:28:f0:e3:4c:a2:4b:17:76:c8:6b:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: May 12 22:01:28 2026 GMT
Not After : May 13 22:01:28 2026 GMT
Subject: CN=2713cd6cb8bb41fdd35fbd760fb33b539b3de816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a1:61:23:ef:50:c4:c7:3a:c7:62:74:36:f1:
24:1f:8d:13:aa:d3:3d:ee:38:7b:4f:45:d9:94:e0:
81:bf:05:ea:00:b3:c0:3d:0a:7a:93:d9:28:b0:94:
27:83:85:53:66:79:79:72:c1:6e:d7:2e:08:e1:eb:
5a:25:44:3e:33:ab:a0:57:b7:dd:e3:92:5a:9a:85:
24:9f:4b:ff:07:2f:0e:9c:c2:8c:cd:fe:f1:46:c9:
ec:29:cf:f7:8e:36:e7:e7:ca:5f:89:4b:aa:3c:63:
8b:1c:88:20:0b:0d:37:ad:cf:66:91:19:db:c5:a8:
99:de:cb:31:f7:30:f1:5d:cf:2f:df:66:ef:8c:75:
7a:fb:a5:9f:4c:a8:f6:10:a3:44:cc:d8:8b:36:61:
5e:06:1d:39:a8:d7:5e:62:05:7b:8b:49:f0:ff:2e:
38:69:64:f6:95:4f:1f:46:6f:6e:bd:27:6f:67:a9:
1b:c6:68:62:f5:48:80:7e:65:1a:31:95:31:67:1d:
66:f7:70:04:97:c7:a5:4d:90:04:6d:ff:24:ae:83:
b3:95:ee:d7:23:29:63:67:43:2e:78:f3:70:ce:53:
f0:23:64:d3:b5:a8:fd:79:d9:ef:d8:b4:f2:10:c2:
2d:11:3c:ad:f1:9c:09:55:8d:21:a8:7d:10:18:6f:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:CD:6C:B8:BB:41:FD:D3:5F:BD:76:0F:B3:3B:53:9B:3D:E8:16
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ba:73:91:65:ff:cf:3e:8a:7c:d8:6a:e2:33:7b:96:e8:4f:
b5:3b:3e:90:41:21:12:6f:e9:fe:68:71:c1:d9:49:58:d5:15:
b2:12:dc:2d:53:e2:f5:10:81:6d:ca:19:3a:09:20:eb:cb:90:
98:c7:f0:4c:87:03:b8:82:a6:05:8f:27:c1:09:27:c0:56:2f:
00:72:c5:35:9a:42:39:ae:2b:88:61:27:d4:a0:d3:c5:62:9e:
8f:f6:ce:ca:d8:69:53:e0:cd:5b:40:ee:8b:fa:ca:6d:01:a2:
fe:6e:4c:8a:df:96:3e:0c:a8:a7:92:3d:bb:fe:cf:0a:72:ea:
ba:a1:4c:0f:79:2c:e6:7f:00:8c:9f:e4:5b:1c:a6:da:db:79:
e7:2f:4a:9d:2d:f6:0b:a6:ee:61:8a:29:47:a8:c9:8e:b8:6c:
d1:20:4b:04:34:0e:7d:0a:e3:73:86:b7:59:44:2b:e4:75:af:
65:f1:23:86:5a:98:76:33:e3:50:c1:a8:d9:65:1b:b9:40:dc:
59:2a:6e:8b:87:c8:10:a7:bc:a0:fa:13:25:1c:6e:ac:67:2f:
41:07:c9:b1:7f:8e:0d:af:23:4f:64:aa:44:0f:84:a2:e6:75:
79:e8:14:57:ad:33:e2:e1:f9:41:17:bb:4f:22:04:34:de:67:
6d:7c:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:52 2026 by rpki-client