Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: 96u7+x7RDZ1InAH44YdUEgLd93CG0fgfk4ZAea5GpuU=
Subject key identifier: 87:70:E3:52:3E:42:8E:70:9B:89:5F:BF:29:4C:95:54:89:A3:3F:F1
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019E1E6C903616C7BD55A64D65A728D1F7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 97
Signing time: Tue 12 May 2026 23:01:31 +0000
Manifest this update: Tue 12 May 2026 23:01:31 +0000
Manifest next update: Wed 13 May 2026 23:01:31 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: QXD54g6k0A5LHTssgkObJjIafb9DBStM3or0QoMW3Tk=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:90:36:16:c7:bd:55:a6:4d:65:a7:28:d1:f7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: May 12 23:01:31 2026 GMT
Not After : May 13 23:01:31 2026 GMT
Subject: CN=8770e3523e428e709b895fbf294c955489a33ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:c5:16:72:2d:95:a7:84:74:75:48:8b:76:
f6:85:23:ec:31:39:4f:04:d6:68:35:0e:d9:e4:8d:
88:d4:0b:78:74:a6:56:18:4c:f2:23:3a:d8:be:d5:
5d:39:04:8e:e8:af:f4:50:50:eb:6d:32:63:7c:87:
ef:13:70:b1:07:e8:89:3d:2d:06:84:12:34:2e:67:
c6:9b:6f:d4:50:28:56:1b:5b:d2:af:2a:f3:2f:48:
bb:db:92:ba:f3:c0:d7:ad:c9:b8:68:94:bb:3d:9a:
a9:5d:ee:33:1d:ff:4f:90:47:28:a9:f9:73:37:bc:
94:06:d9:a3:7a:ad:1b:92:1d:8c:20:aa:7e:29:da:
18:df:8b:c2:bc:3b:af:65:2d:34:fb:97:38:a7:25:
92:3a:c3:90:c1:c4:a3:46:96:04:b6:8b:60:14:b8:
76:09:7a:cc:5c:87:4b:2a:9e:78:cd:46:7f:e3:ff:
73:03:ef:7c:6f:d6:fd:1b:f1:f6:21:fa:8a:f2:69:
bb:c8:0a:6c:94:03:08:fe:f0:27:8c:9d:5c:3c:8f:
58:cb:58:18:f4:47:e8:71:34:8b:1e:49:d0:1a:fc:
1c:2b:23:71:3a:4b:4b:74:e8:b3:41:87:50:60:f3:
44:4f:0d:9f:44:a6:1b:bf:52:6c:d1:49:62:31:4a:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:70:E3:52:3E:42:8E:70:9B:89:5F:BF:29:4C:95:54:89:A3:3F:F1
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:14:97:ec:fc:bb:82:57:91:b9:d9:b0:ca:ca:a2:53:d1:fe:
6e:74:14:74:29:d0:9b:1a:c2:c5:ab:a1:20:7c:a0:66:5a:e2:
e8:b7:c5:99:ef:e0:08:9b:88:7f:ce:29:45:19:3a:52:dc:33:
74:7c:91:94:0f:a5:f1:8c:7b:ed:70:6f:58:d3:2a:28:03:b2:
df:06:09:50:9c:09:76:70:b2:60:43:42:59:44:6b:16:f8:bf:
74:f4:04:47:92:f1:df:6e:34:80:20:30:49:07:8b:d1:ee:50:
f9:65:76:00:91:87:29:8b:e1:e4:5e:0e:ee:89:74:73:11:46:
f8:35:ab:fb:85:60:be:3d:f3:2f:1d:b8:72:10:fd:1a:50:0d:
7a:c1:1d:5c:ba:e8:a3:ff:73:13:ba:3e:4c:04:78:0d:b5:50:
fc:9a:5f:2e:0e:02:49:44:8f:19:b0:9e:22:be:74:a5:61:e2:
85:ce:e5:8a:f7:65:0f:08:8f:87:09:73:23:37:e4:1f:bb:61:
86:3e:4c:01:5e:59:f6:47:a1:e3:8b:e4:14:d1:99:b8:b1:90:
72:56:08:8d:3b:80:76:28:b9:28:8a:c8:e1:4a:93:1e:be:6e:
d5:95:5b:ec:64:39:a9:5a:a8:24:0e:76:83:cb:41:1c:32:50:
f2:0a:68:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4ebJA2Fse9VaZNZaco0fe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MDU4OGNhMjI4OTdjNjlhMTAyOTQ5YTY4MmY5ZjFhMzU4
MzViYWIwHhcNMjYwNTEyMjMwMTMxWhcNMjYwNTEzMjMwMTMxWjAzMTEwLwYDVQQD
Eyg4NzcwZTM1MjNlNDI4ZTcwOWI4OTVmYmYyOTRjOTU1NDg5YTMzZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArufFFnItlaeEdHVIi3b2hSPsMTlP
BNZoNQ7Z5I2I1At4dKZWGEzyIzrYvtVdOQSO6K/0UFDrbTJjfIfvE3CxB+iJPS0G
hBI0LmfGm2/UUChWG1vSryrzL0i725K688DXrcm4aJS7PZqpXe4zHf9PkEcoqflz
N7yUBtmjeq0bkh2MIKp+KdoY34vCvDuvZS00+5c4pyWSOsOQwcSjRpYEtotgFLh2
CXrMXIdLKp54zUZ/4/9zA+98b9b9G/H2IfqK8mm7yApslAMI/vAnjJ1cPI9Yy1gY
9EfocTSLHknQGvwcKyNxOktLdOizQYdQYPNETw2fRKYbv1Js0UliMUpLSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIdw41I+Qo5wm4lfvylMlVSJoz/xMB8GA1UdIwQY
MBaAFPkFiMoiiXxpoQKUmmgvnxo1g1urMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1RV0l5aUtKZkdtaEFwU2FhQy1mR2pXRFc2cy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNDI1ZjJiLTBlYzAtNDY1Ny1hMDUw
LTU2OWYxZGQwYzAxZi8xLzEtUVdJeWlLSmZHbWhBcFNhYUMtZkdqV0RXNnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VmLzQyNWYyYi0wZWMwLTQ2NTctYTA1MC01NjlmMWRkMGMw
MWYvMS8xLVFXSXlpS0pmR21oQXBTYWFDLWZHaldEVzZzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxSX
7Py7gleRudmwysqiU9H+bnQUdCnQmxrCxauhIHygZlri6LfFme/gCJuIf84pRRk6
UtwzdHyRlA+l8Yx77XBvWNMqKAOy3wYJUJwJdnCyYENCWURrFvi/dPQER5Lx3240
gCAwSQeL0e5Q+WV2AJGHKYvh5F4O7ol0cxFG+DWr+4Vgvj3zLx24chD9GlANesEd
XLroo/9zE7o+TAR4DbVQ/JpfLg4CSUSPGbCeIr50pWHihc7livdlDwiPhwlzIzfk
H7thhj5MAV5Z9keh44vkFNGZuLGQclYIjTuAdii5KIrI4UqTHr5u1ZVb7GQ5qVqo
JA52g8tBHDJQ8gpo8A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:57 2026 by rpki-client