Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: UdWYXlw5S7WxtgBsrEY/5KToUkgoK3tYtzHOt/fVUBY=
Subject key identifier: 4F:66:C8:07:4C:FD:0E:BD:22:7D:AD:08:53:DB:C6:90:2A:FA:DA:EA
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019E1EA337F4F4C0F946D6C5F000FE787D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: 011E
Signing time: Wed 13 May 2026 00:01:13 +0000
Manifest this update: Wed 13 May 2026 00:01:13 +0000
Manifest next update: Thu 14 May 2026 00:01:13 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: wlsrALOOUCEyCAh0TK9xl+cFkU4orxkiadZwTi/jiUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:37:f4:f4:c0:f9:46:d6:c5:f0:00:fe:78:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: May 13 00:01:13 2026 GMT
Not After : May 14 00:01:13 2026 GMT
Subject: CN=4f66c8074cfd0ebd227dad0853dbc6902afadaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:6c:f9:2b:3a:4e:36:75:08:12:2a:a8:65:
7d:f3:6b:e1:e6:1f:6a:2f:8d:8c:c2:a6:76:d9:45:
04:be:aa:20:46:96:17:44:38:f3:5b:44:7a:c6:34:
8a:7b:e4:7f:d7:92:b9:50:fb:e5:e5:ea:90:e6:ba:
9a:e9:d2:28:55:9b:49:f2:72:61:af:e9:69:8e:95:
7d:14:84:d5:15:2d:22:d5:f2:38:c8:c1:1d:bb:eb:
8a:4e:f3:0f:c8:fe:b1:fd:f4:f0:9a:da:71:f6:0e:
34:1c:a4:78:76:c2:df:1c:ed:60:80:a2:31:03:50:
28:41:95:82:2f:32:0f:4a:e4:70:be:42:ee:cb:04:
c7:85:51:7e:b4:f7:d0:f2:69:3b:b9:c1:8a:e5:51:
d5:f5:15:6f:ef:00:a8:61:c7:e0:a2:1b:36:52:25:
b8:06:04:5b:1c:29:ac:87:e3:98:90:13:06:b4:51:
b6:ce:36:0f:da:57:36:7e:85:69:a1:6a:40:0a:30:
88:61:11:9d:5e:d7:d6:c4:8d:a8:f6:f5:2b:1b:f6:
67:1d:25:e7:bf:e2:6a:fa:b9:4a:cf:83:c8:af:db:
4d:9d:ac:6b:c5:48:dd:56:a8:2f:5e:56:b0:42:4d:
d5:44:f7:01:42:8b:95:85:fd:70:86:01:ac:79:9f:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:C8:07:4C:FD:0E:BD:22:7D:AD:08:53:DB:C6:90:2A:FA:DA:EA
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:60:97:25:9e:68:3d:a6:10:a4:ea:0b:64:b0:6e:ae:5f:
56:b6:73:cc:aa:88:db:66:c9:92:59:c5:a6:3e:6a:fd:b5:64:
e6:70:d1:97:67:d6:74:15:51:b1:2e:00:61:f1:9d:c2:70:4a:
eb:f9:92:59:7b:4a:27:24:69:4b:4c:8b:0f:59:a3:35:32:05:
86:cc:9e:d9:e8:49:46:8e:45:9a:c4:a5:d1:38:22:9f:b7:b3:
b4:19:1c:df:19:b6:2a:8f:4c:49:a9:8b:d1:5f:04:92:0f:26:
8c:7b:36:c1:65:a4:4b:b8:af:45:65:99:54:b7:21:23:9b:40:
a0:7a:2e:d5:8d:84:de:51:31:eb:3e:98:07:db:24:3c:d0:bc:
74:a2:7d:48:b7:ae:86:2a:d1:c4:3e:e8:f5:46:95:a5:f4:56:
d2:19:21:03:ea:f7:b3:73:04:d8:57:11:ed:36:53:10:4c:0e:
23:09:c1:b7:5b:f9:d4:a5:0b:d2:7c:1a:2e:6a:43:9a:57:0e:
82:3e:d8:79:b3:85:c4:84:4a:5a:b0:0c:5f:fb:c4:c8:37:bd:
0e:9a:68:d1:55:a7:5f:9e:9d:4a:aa:3d:61:f4:5e:f5:ac:b4:
93:38:05:8a:21:d2:4a:84:0f:dc:b6:79:fe:70:87:2d:fe:76:
32:65:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:10 2026 by rpki-client