Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: rMA0tOFBpDRem3LlgVnf9+qK/Msj2lb1qOBGj5uS79c=
Subject key identifier: 66:E9:6B:B0:02:6F:39:AA:65:2A:84:96:9F:E7:4C:7D:8D:E2:1B:D9
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019E1E6C0750A1D6ADB357A75C5373A44DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0ACB
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: Fveff80/7CAec4m45ftgp9zE2fWZRlbF/CfNCpftf68=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:07:50:a1:d6:ad:b3:57:a7:5c:53:73:a4:4d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=66e96bb0026f39aa652a84969fe74c7d8de21bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:5f:7b:e1:5d:d0:88:9d:d9:50:37:76:56:
41:4b:d2:e8:4e:c4:b5:c8:80:30:55:89:40:bd:7d:
f1:58:24:b4:45:34:38:9a:d7:40:a8:17:3b:8c:36:
32:01:c5:55:25:67:e8:0e:89:b4:5b:60:b4:00:79:
be:44:fc:87:22:4d:01:ae:40:65:ba:8e:96:c9:2a:
f3:9a:41:40:d3:03:03:5e:bf:10:da:62:39:33:c8:
74:ea:73:11:43:67:95:26:64:83:0e:b7:4a:eb:ed:
88:bf:e6:20:3e:80:af:ee:83:1d:1b:e7:81:d8:46:
00:1e:bc:d7:98:12:93:63:3e:5e:f7:2a:92:69:63:
1c:ad:a8:1a:91:48:48:6d:95:cb:28:4e:ab:52:82:
80:90:b4:c8:07:83:a2:02:5d:6f:31:bf:0f:21:63:
98:c6:64:e0:de:7e:21:11:00:a6:d5:fd:76:94:d0:
d9:c9:c0:82:88:3e:ec:b0:a6:bb:80:8e:14:07:e0:
9d:2b:31:97:3f:ba:b8:5f:18:ea:6e:64:b5:4e:1d:
a9:ef:60:db:a1:81:a7:20:11:91:e9:78:14:ec:f7:
9a:9b:77:1f:b5:33:82:eb:d8:62:9e:60:b1:a6:d1:
7d:29:e6:88:64:a5:55:95:8e:68:db:dc:b5:85:b0:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:6B:B0:02:6F:39:AA:65:2A:84:96:9F:E7:4C:7D:8D:E2:1B:D9
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ee:af:e4:76:e0:cf:6f:d3:14:01:35:88:7a:30:c8:4b:4b:
7b:8e:95:f3:43:ef:60:49:73:c0:38:e0:eb:cf:0f:00:42:c5:
28:0e:39:7f:01:13:47:79:8e:27:74:bd:50:55:0c:54:63:13:
85:4b:9e:29:37:ed:51:25:90:aa:19:03:59:38:19:8c:39:69:
5b:c7:e0:18:50:cf:0a:03:bc:18:61:e5:a1:e6:d2:c2:77:b9:
9c:21:af:35:35:b4:a6:59:0e:ca:67:86:02:d3:29:a0:45:34:
bc:09:f4:67:fd:b3:bb:ef:7f:33:a7:a4:64:ea:c2:74:ec:73:
ee:2a:5d:4d:63:00:59:a8:1e:c4:3b:45:09:a0:46:3f:5a:83:
4e:9e:af:5d:82:3d:65:56:74:06:db:32:84:09:b3:08:12:da:
6b:5c:6b:32:a5:d3:f7:84:a9:64:ba:e4:0e:0b:92:14:0c:3a:
ce:d0:b4:05:37:34:f8:ed:fb:35:0c:01:5a:7a:19:37:d0:21:
50:42:38:4f:f5:4c:ce:a0:24:0c:65:2c:52:06:35:9d:a0:2c:
de:58:7c:e8:82:4b:2c:76:97:67:b4:51:1b:97:6c:39:1e:ed:
19:80:d2:78:25:68:ba:8b:65:9d:9c:38:be:06:79:09:39:75:
64:11:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:09 2026 by rpki-client