Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: qfSZkAKr/8IBJfyYfxPhgLSFl4BGGEz7sArTuNSpHbI=
Subject key identifier: 00:DA:1F:AF:BA:C2:DF:17:EC:73:FD:E3:18:EE:9D:FF:3F:1E:FD:D8
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019E20924859D4DA74A5B54C5027FB4AF7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 191F
Signing time: Wed 13 May 2026 09:01:58 +0000
Manifest this update: Wed 13 May 2026 09:01:58 +0000
Manifest next update: Thu 14 May 2026 09:01:58 +0000
Files and hashes: 1: 1Cl0aMxYJUQofTs8jhJi8Z3tcrI.roa (hash: jZVvi8ZT1AvnHScx7k4KswKgUZ3UXUEyUbpLzBDmLbE=)
2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: NPkW90A5wfejID9YyzmSxN3ZR0BQVzhhb52ZRRXujGM=)
3: YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa (hash: Mhnp5e3BJ7gjsyOPcctRIJrsmbal4VQexixZEqreufU=)
4: oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa (hash: Kcp7e66VbgmjHJFlZwdRCM4aHhG4oTWDRzXk2Vy002s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:48:59:d4:da:74:a5:b5:4c:50:27:fb:4a:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: May 13 09:01:58 2026 GMT
Not After : May 14 09:01:58 2026 GMT
Subject: CN=00da1fafbac2df17ec73fde318ee9dff3f1efdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:0c:a8:23:86:1d:78:3b:58:1e:79:54:5c:
6e:ff:3a:84:fa:0c:93:67:f0:09:09:d9:62:57:11:
a7:7f:c7:16:dd:18:7e:c4:95:17:28:ab:4e:9f:8c:
30:d8:0c:4c:4a:06:64:e0:b8:5f:43:ed:50:08:23:
ff:26:7a:d5:fb:7c:9a:23:76:26:bc:8b:b4:ea:b9:
8d:d6:69:c2:e8:14:d1:47:cb:64:97:aa:19:6c:a0:
ab:16:45:11:ba:a0:be:a9:27:7f:85:1d:2b:81:b2:
b9:5f:d3:7b:52:35:17:0a:ff:2b:e2:fb:d5:6a:fe:
11:b6:fb:2d:ca:2f:5d:b8:e4:a3:b0:b6:65:c7:7e:
83:03:cc:c3:4a:79:17:c6:94:34:89:dc:14:15:5c:
2c:a8:dc:70:b8:7e:ae:63:78:90:1e:27:8e:86:7e:
42:d3:06:01:4b:bb:3b:e8:b7:f4:4b:c8:f3:3a:c6:
b8:1c:10:fa:db:9e:26:ff:90:50:8f:86:d5:35:e0:
cb:ad:35:08:15:a3:c5:ec:b9:91:5a:be:a7:f5:f4:
f3:2a:bb:5f:74:22:16:ef:61:52:cc:08:68:91:19:
51:5d:15:7f:05:2d:e8:7a:41:74:26:16:83:11:7e:
c8:cb:58:27:da:f1:8d:5f:92:08:8f:41:c7:93:a5:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:1F:AF:BA:C2:DF:17:EC:73:FD:E3:18:EE:9D:FF:3F:1E:FD:D8
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f7:a2:be:c9:d1:78:7a:fb:b4:b1:a7:c2:de:0f:1b:e7:7e:
0b:d3:e4:63:e9:56:dc:b3:98:99:45:aa:5b:80:fc:10:a2:c4:
db:b8:07:fb:6a:55:b7:a4:1c:28:b0:05:3c:07:87:47:e5:d5:
f1:e8:6e:2d:3f:d9:2f:ae:4a:19:b2:46:94:e8:39:89:ad:61:
26:5b:aa:75:39:80:43:a3:b5:f8:9c:c8:58:65:78:b4:13:fe:
10:cf:c2:ac:ab:d2:2d:09:6c:6e:3c:7a:59:ba:21:be:ea:61:
77:78:8d:27:e6:65:b1:d0:a7:30:19:78:03:d8:86:fb:da:19:
8c:a9:38:84:ea:af:b5:b0:1b:84:4a:1d:4c:cd:b9:10:17:3f:
2b:a0:f7:aa:4e:b1:2c:3c:39:45:36:9b:ee:3a:ea:48:48:a6:
1c:b1:74:36:ce:48:fd:26:91:13:dc:7b:03:30:6c:cc:59:b8:
43:97:6c:76:a7:89:14:6b:93:09:13:a1:bf:0b:2b:a4:be:29:
3c:c0:f0:0e:26:93:a2:73:75:13:8e:51:9f:39:65:b4:b7:ef:
cd:04:d9:ba:cb:bf:55:06:0b:7b:66:9d:cf:d3:5a:6b:d4:24:
ab:ef:f3:2b:d0:19:1f:87:6c:c6:e3:63:1d:48:e6:89:b6:ee:
f8:a4:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:31 2026 by rpki-client