Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: xf3yrxTZvQ6YH3xOGQfFxF99RidxrxZ6wqvRtKHGC9c=
Subject key identifier: 1C:FB:43:FF:1A:BA:8C:06:17:DE:6D:58:C2:E1:AC:A4:41:24:90:ED
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 019E1C46BE455758D875F900A12A68DFB610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0BAC
Signing time: Tue 12 May 2026 13:00:58 +0000
Manifest this update: Tue 12 May 2026 13:00:58 +0000
Manifest next update: Wed 13 May 2026 13:00:58 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: l2iUNnVmCoDxDH1fPEc5OkKbKtwrJPnpdfzM7JWqFrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:be:45:57:58:d8:75:f9:00:a1:2a:68:df:b6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: May 12 13:00:58 2026 GMT
Not After : May 13 13:00:58 2026 GMT
Subject: CN=1cfb43ff1aba8c0617de6d58c2e1aca4412490ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:b5:9c:7e:67:de:8e:0c:23:c4:75:ba:ff:
cf:23:41:b5:55:cf:1f:5c:d7:97:1a:46:d2:e5:00:
98:46:dc:83:63:f8:50:13:b4:c7:6f:22:a9:f1:80:
23:fe:46:a7:45:eb:c2:9e:6d:1c:79:c0:ed:71:0b:
ce:a6:3b:2e:51:67:bc:d9:da:59:65:89:d0:a6:ee:
60:2e:4a:7b:46:c7:f6:8c:d8:e8:47:99:24:79:4b:
4a:64:5f:8d:51:17:f5:27:b0:a5:88:d7:12:d1:bd:
95:f7:3e:5c:af:73:b6:ee:27:51:69:a5:bd:24:53:
18:17:57:a0:6c:5f:c0:97:5e:b2:af:cf:65:d6:47:
5a:12:18:79:dc:c1:32:63:63:59:96:28:c7:19:da:
9d:d7:ee:5c:31:0c:de:bd:66:0b:db:c7:9f:cd:fc:
4d:44:59:38:2b:d7:0b:7f:57:5e:14:34:4c:5b:5b:
99:a3:2b:5c:49:60:6d:1c:a1:e7:f4:6a:8c:c0:2b:
36:3c:d2:5c:88:d5:7a:25:fe:6b:69:68:da:79:97:
57:31:e7:2b:00:2d:a5:4c:ac:a3:8e:a9:bf:2f:1b:
ba:d9:2c:96:7b:4c:ed:46:1b:d6:70:1b:86:9b:96:
77:4a:ff:10:99:d3:51:52:92:d7:78:e0:19:31:fe:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:43:FF:1A:BA:8C:06:17:DE:6D:58:C2:E1:AC:A4:41:24:90:ED
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:71:f5:13:3b:bc:23:cc:f6:9f:57:2e:42:df:27:e8:4e:dc:
4d:36:41:f3:aa:fb:83:de:c3:b5:d5:7c:47:5d:d7:23:9a:55:
00:63:bd:b8:c2:3f:5c:ff:64:45:73:26:05:fa:72:65:8f:53:
03:f1:90:25:2e:7b:41:77:f8:bc:11:e3:5a:d6:ed:8c:f0:4b:
91:0d:4c:50:e2:3f:58:0e:69:63:60:9f:8b:fc:29:66:92:46:
ec:cb:95:e1:45:29:46:be:e7:fe:c7:59:56:86:e3:df:b2:4a:
f5:16:c2:a1:d7:59:2e:27:c9:e0:a4:01:c8:c8:3e:34:18:0e:
0b:06:8b:5d:b7:cf:f4:cd:25:42:b5:61:22:ce:59:e5:9f:03:
7d:3d:07:a3:ec:f8:75:f5:8a:24:92:86:c5:2a:9b:4b:1e:1b:
71:04:97:c7:19:d8:75:2b:87:25:54:90:e7:be:30:cf:6b:a6:
8e:0b:98:ea:aa:2e:fd:65:76:01:9f:0c:15:13:aa:b9:ad:61:
c3:25:24:b6:90:01:d0:f4:a0:aa:db:b1:17:98:eb:34:f5:a6:
96:62:af:c6:3b:6d:79:5e:8b:c0:1c:0a:a2:81:d6:6f:d9:ab:
41:f2:ef:72:76:a2:ec:43:b7:5f:ad:fa:69:12:12:f6:fa:46:
44:49:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:27 2026 by rpki-client