Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: Gy5xLJ0lyQfvvKjsCmMl7teKY8cW71VNbqgAZC6d3Zw=
Subject key identifier: 36:C2:30:7D:6A:53:AF:2A:A3:93:AE:49:36:D4:14:8C:8B:1C:6B:4E
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019E1E6C41143CBE9DD2D57C7BE4F1FBF548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 01B5
Signing time: Tue 12 May 2026 23:01:11 +0000
Manifest this update: Tue 12 May 2026 23:01:11 +0000
Manifest next update: Wed 13 May 2026 23:01:11 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: zyvVGbVqKue8wrkhVb5qrRwAQ9mdegBDpTkGwW4Itfc=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:41:14:3c:be:9d:d2:d5:7c:7b:e4:f1:fb:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: May 12 23:01:11 2026 GMT
Not After : May 13 23:01:11 2026 GMT
Subject: CN=36c2307d6a53af2aa393ae4936d4148c8b1c6b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:cb:48:81:67:10:c5:4d:8e:40:2c:b8:91:
f4:f9:43:55:7e:3c:2f:82:16:cc:e4:c8:29:9e:85:
39:36:17:88:49:e5:80:c9:57:a1:91:9c:8d:ff:c8:
8d:02:0a:1b:87:d7:3f:db:c2:46:21:94:27:f4:c1:
40:cd:8a:a0:20:ac:78:38:b5:25:36:d7:99:65:57:
f5:65:d3:8b:62:98:e9:d0:85:f6:11:80:d0:5a:75:
a5:8a:0e:db:49:60:52:5d:ab:9f:43:33:c2:fa:c9:
f7:58:08:ff:ac:42:22:e1:6f:1e:35:10:79:f5:2b:
4d:97:02:cc:b4:b3:71:61:ee:67:c2:f5:43:c1:e8:
38:47:2b:c7:b3:e8:e0:73:0e:e4:3b:65:24:fc:d1:
27:da:e8:8e:ca:06:a3:32:08:6d:27:35:7b:a9:86:
1e:ba:8c:72:f6:d0:c2:ec:2c:f4:53:66:d7:aa:17:
45:c8:8d:bc:0c:6c:aa:e5:d1:46:bf:ca:93:b0:6f:
03:89:68:c6:90:26:86:6a:d6:54:b6:36:a6:7a:5a:
5e:9f:71:f6:8f:46:a5:43:c5:5f:c5:be:63:80:b0:
74:cf:a9:8e:30:cd:2d:05:42:21:42:f8:34:d5:66:
72:d1:f2:e0:a6:70:99:55:e7:75:3d:26:b5:8a:30:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C2:30:7D:6A:53:AF:2A:A3:93:AE:49:36:D4:14:8C:8B:1C:6B:4E
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e0:bc:f8:7e:4c:d7:ce:05:6f:b7:52:70:e8:a8:89:d8:71:
64:4f:f4:cc:f9:f2:c7:ce:24:9e:be:2f:7a:fd:b3:c6:30:0c:
26:58:3e:d5:8d:3f:fd:a8:a5:ae:6b:d6:46:f5:d7:76:10:e0:
c8:80:c5:f0:36:db:58:ae:df:54:aa:3e:2a:6d:1c:db:88:2c:
44:c2:de:9f:74:91:79:be:20:46:0c:c7:83:1f:27:3c:da:83:
fa:65:d5:b5:e4:c2:aa:11:4d:53:92:f6:3c:2d:f3:a9:cb:19:
71:88:62:14:52:91:87:4d:05:8d:dd:67:51:59:e7:0a:9b:4e:
18:ea:0c:42:d2:10:5b:b7:72:78:a9:ce:cb:93:1e:dd:24:9b:
db:d2:02:ea:f2:20:56:d2:73:d6:78:ea:4c:62:5b:ca:fb:d3:
1d:8f:be:f8:57:0d:bc:36:49:fa:94:bf:d6:86:5b:07:db:23:
39:e3:23:72:9a:2c:2b:a9:25:28:c2:46:92:7f:cb:f2:8b:95:
65:f6:f8:06:08:57:c5:a0:41:00:e4:14:44:6f:c6:fd:68:14:
1b:a5:22:32:0a:cb:0c:a8:ca:11:eb:b5:13:9f:cb:52:99:17:
7d:82:2c:0f:b3:de:50:e5:1f:ef:57:44:b6:c8:3f:d4:18:d5:
d8:53:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:24 2026 by rpki-client