Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: 9clzbBa22Gs3kSDd3bUOjAglWxAeKz0SzJeZ4uL34bU=
Subject key identifier: D3:E4:B6:A2:9C:6A:18:DB:F4:4E:0D:66:73:5E:2A:64:D5:DC:05:E9
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019E1E358A655D25E527906983F0F1BA78E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 22:01:25 +0000
Manifest this update: Tue 12 May 2026 22:01:25 +0000
Manifest next update: Wed 13 May 2026 22:01:25 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: VjAr4i7Tm+95SZoryAUytAKv1Ddzws34O+fOX9pcUgc=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:8a:65:5d:25:e5:27:90:69:83:f0:f1:ba:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: May 12 22:01:25 2026 GMT
Not After : May 13 22:01:25 2026 GMT
Subject: CN=d3e4b6a29c6a18dbf44e0d66735e2a64d5dc05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:69:1c:c2:05:a6:ba:f3:6a:0d:29:87:e2:
23:4f:3c:1c:39:79:c8:a9:72:b8:f5:81:af:d7:57:
b3:13:08:12:8f:b0:8d:d4:ff:87:5e:9c:0d:47:f8:
76:2a:f0:51:da:b4:50:c1:d0:3a:5c:9f:a3:d1:71:
28:d8:b3:d4:25:fe:ec:9e:2b:4b:e3:ac:e2:da:23:
03:5d:a1:5d:ae:14:5d:55:9f:57:4b:69:f2:72:16:
bb:c8:fd:2f:79:62:91:72:3e:ef:3d:78:3c:89:17:
47:99:e4:31:a3:17:bc:36:58:96:cb:91:47:1a:84:
96:fd:4e:cc:f2:eb:28:95:87:21:8a:4e:20:4c:14:
65:e1:dc:f4:ea:58:21:76:16:dc:6b:8a:2c:d0:65:
90:30:31:ec:c9:ab:09:18:cc:d6:03:40:c4:31:8d:
1b:5e:ab:42:f0:e5:01:07:34:27:da:3e:f1:5b:00:
73:50:da:5c:ce:87:c3:69:88:e7:7c:4b:83:39:26:
b0:57:8a:4a:40:86:ea:8c:d3:94:ef:d8:c0:cf:10:
bb:09:0e:cc:5f:31:e3:8c:09:a0:17:11:f9:3c:aa:
9a:e2:e4:93:ea:3f:6c:a8:6d:d2:a9:76:db:af:a4:
ba:e7:ec:6f:60:69:66:59:77:1c:d7:7b:44:81:97:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:B6:A2:9C:6A:18:DB:F4:4E:0D:66:73:5E:2A:64:D5:DC:05:E9
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d9:e6:82:94:49:39:b0:21:d2:01:26:4f:0f:07:58:ad:5d:
03:23:d8:93:db:98:f0:f5:9e:64:7b:5b:8c:15:8c:f3:ae:14:
7e:e0:b6:01:a3:53:5c:b2:0a:7a:68:fb:95:98:9c:dd:3e:6b:
11:70:4e:68:59:b0:96:21:53:32:9f:9f:7e:f6:42:cd:1a:e8:
95:08:a3:15:49:82:ab:31:41:73:39:4c:b6:a3:f4:57:c3:50:
23:e3:5a:8b:0b:86:71:06:d0:ae:3b:39:64:4d:49:ae:2d:be:
46:23:a6:20:fd:c2:46:c3:7a:ca:fa:a4:bd:10:30:8e:3f:63:
da:d0:46:45:e1:d3:39:78:8b:25:0a:37:bb:87:d2:8a:b2:7e:
7f:82:45:78:52:b7:fd:fe:ce:88:6d:06:5a:ce:2d:e4:17:0c:
8e:b9:1a:2b:a3:f2:3b:de:f0:42:4c:d5:1c:cd:df:b4:d3:58:
ce:a8:ed:8a:d4:ed:84:89:37:42:39:2c:17:e6:71:a5:b5:6d:
27:dd:bf:38:e4:24:1f:24:96:9a:fb:0f:11:55:1c:f3:cd:11:
b6:fe:48:03:98:75:bb:e1:fc:08:39:33:10:ff:c1:e8:e5:52:
40:7f:2f:07:19:39:8f:e7:5e:c6:b2:1a:14:bb:85:42:1f:b5:
26:62:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:39 2026 by rpki-client