
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: /mPcQNqEoGlGf/GB2E8mURPOMlWmT+lP68TNvZrQwmY=
Subject key identifier: 8A:E9:6C:0E:CB:53:14:50:AC:F4:7C:26:47:FE:8D:EB:A6:06:6A:E6
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019E1D22C9A1E1B237860948FDB58B057F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0D15
Signing time: Tue 12 May 2026 17:01:19 +0000
Manifest this update: Tue 12 May 2026 17:01:19 +0000
Manifest next update: Wed 13 May 2026 17:01:19 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: 6vfMfSUujnz3UIR3CiHhu9nhrbbSEgliHQI3j+D3yog=)
2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c9:a1:e1:b2:37:86:09:48:fd:b5:8b:05:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: May 12 17:01:19 2026 GMT
Not After : May 13 17:01:19 2026 GMT
Subject: CN=8ae96c0ecb531450acf47c2647fe8deba6066ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:0f:3f:7d:d2:85:bd:2b:4d:ff:9e:82:e5:
3c:2e:62:a9:54:46:f3:7b:10:78:8a:97:bd:4d:73:
14:40:68:0d:90:a6:86:10:bc:78:ac:3e:97:18:1d:
1f:94:11:b5:7a:77:69:1c:94:61:71:db:1c:e2:d1:
e6:8e:01:2d:7e:37:c9:df:a5:f6:cc:91:7d:7e:59:
56:3d:13:35:c8:fd:78:67:ab:1c:b2:3e:e8:ed:7c:
d5:8f:e2:70:9d:f8:d0:33:fc:25:01:c6:a6:e5:1f:
84:41:13:70:f4:37:80:90:92:4f:28:02:7c:ee:c2:
88:67:fa:36:01:be:a1:21:03:da:57:47:ac:f5:38:
03:24:fb:6c:b8:6c:f8:66:77:4c:2f:6f:99:d0:e7:
34:56:38:51:9f:2b:01:e6:61:9c:56:5b:4d:b4:ec:
45:8b:1b:6f:d8:c6:60:48:e0:a1:9d:d9:3c:97:69:
7a:c2:a5:61:64:5d:82:45:77:9b:34:9f:bf:ee:24:
16:5c:21:81:bd:5b:ae:0f:36:30:a5:43:23:90:11:
02:32:7a:47:bc:df:44:dd:2a:88:c7:4f:0b:9e:6c:
ff:3e:81:29:9b:e6:98:d5:59:4c:79:b2:93:aa:06:
55:ed:7b:c6:74:ba:8c:bd:67:97:22:25:e1:49:54:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:6C:0E:CB:53:14:50:AC:F4:7C:26:47:FE:8D:EB:A6:06:6A:E6
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6b:c5:af:cc:2d:30:bf:43:d5:1b:46:b8:64:36:ca:91:90:
16:9f:34:e0:ca:3d:82:2f:e4:0b:e6:f7:d4:f1:86:93:e2:e9:
ef:74:28:72:d7:14:61:9d:89:13:a0:2b:0c:9b:76:31:a1:29:
04:97:43:d6:34:79:33:62:b6:69:a4:a8:c3:ae:b3:60:ec:cf:
70:ab:8f:d6:24:1e:3f:72:19:d6:22:a1:23:d1:46:7b:e0:4b:
e8:57:41:db:0a:68:ca:8a:33:75:9e:ec:09:ed:55:61:f0:cf:
65:3a:ca:b0:23:4c:ef:94:df:c4:2d:a1:d7:28:f4:f6:92:d7:
bd:2a:9e:d0:97:f7:a4:b6:bf:59:e7:83:2b:4f:9f:8a:51:96:
b2:69:f5:ff:7b:05:78:b9:a2:d7:e2:e7:ad:17:3d:44:59:00:
07:da:ba:71:91:bf:e3:e2:ed:1c:54:d6:28:f6:7a:0f:23:c8:
cd:d1:06:af:72:fa:94:92:b6:35:b6:7c:a7:70:99:72:6b:be:
5f:af:a5:97:04:ed:f5:32:81:9c:9f:cc:dc:d5:f2:65:c3:b6:
8f:3c:47:6f:ed:5b:1b:46:4e:f3:27:83:64:e1:80:e4:dd:24:
10:7b:ef:42:6d:30:53:0c:05:0b:16:c6:89:61:f7:c0:7f:6c:
9b:98:02:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dIsmh4bI3hglI/bWLBX8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0
NWMxNDMwHhcNMjYwNTEyMTcwMTE5WhcNMjYwNTEzMTcwMTE5WjAzMTEwLwYDVQQD
Eyg4YWU5NmMwZWNiNTMxNDUwYWNmNDdjMjY0N2ZlOGRlYmE2MDY2YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxQPP33Shb0rTf+eguU8LmKpVEbz
exB4ipe9TXMUQGgNkKaGELx4rD6XGB0flBG1endpHJRhcdsc4tHmjgEtfjfJ36X2
zJF9fllWPRM1yP14Z6scsj7o7XzVj+JwnfjQM/wlAcam5R+EQRNw9DeAkJJPKAJ8
7sKIZ/o2Ab6hIQPaV0es9TgDJPtsuGz4ZndML2+Z0Oc0VjhRnysB5mGcVltNtOxF
ixtv2MZgSOChndk8l2l6wqVhZF2CRXebNJ+/7iQWXCGBvVuuDzYwpUMjkBECMnpH
vN9E3SqIx08Lnmz/PoEpm+aY1VlMebKTqgZV7XvGdLqMvWeXIiXhSVTWgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIrpbA7LUxRQrPR8Jkf+jeumBmrmMB8GA1UdIwQY
MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy
LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4
YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmvF
r8wtML9D1RtGuGQ2ypGQFp804Mo9gi/kC+b31PGGk+Lp73QoctcUYZ2JE6ArDJt2
MaEpBJdD1jR5M2K2aaSow66zYOzPcKuP1iQeP3IZ1iKhI9FGe+BL6FdB2wpoyooz
dZ7sCe1VYfDPZTrKsCNM75TfxC2h1yj09pLXvSqe0Jf3pLa/WeeDK0+filGWsmn1
/3sFeLmi1+LnrRc9RFkAB9q6cZG/4+LtHFTWKPZ6DyPIzdEGr3L6lJK2NbZ8p3CZ
cmu+X6+llwTt9TKBnJ/M3NXyZcO2jzxHb+1bG0ZO8yeDZOGA5N0kEHvvQm0wUwwF
CxbGiWH3wH9sm5gC6g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:05 2026 by rpki-client