Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: w8F8S1mT3gfcMrz5Unx31VaYCgywlCDLXseUvYq/QQM=
Subject key identifier: 3A:2F:B4:BE:3A:33:4B:C6:0E:6A:20:DE:69:0D:92:C1:E0:A2:9D:BA
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019E1D9046E798C0ADB2686C193D7216481D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 04F1
Signing time: Tue 12 May 2026 19:00:55 +0000
Manifest this update: Tue 12 May 2026 19:00:55 +0000
Manifest next update: Wed 13 May 2026 19:00:55 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 1j7z2YT2OjMant4+h3EIkMgJeDZ7ga0uaxHRroVYx1g=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:46:e7:98:c0:ad:b2:68:6c:19:3d:72:16:48:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: May 12 19:00:55 2026 GMT
Not After : May 13 19:00:55 2026 GMT
Subject: CN=3a2fb4be3a334bc60e6a20de690d92c1e0a29dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:97:e9:79:59:4e:7b:cd:3a:40:68:e8:7e:
a5:2d:de:d0:79:d4:7e:4c:04:a3:2a:a3:fc:e5:7e:
45:7f:3a:ed:d9:5f:23:51:f6:fe:17:bc:07:ca:40:
45:71:22:67:68:12:65:e1:c5:ac:f3:5a:c3:6d:fa:
bb:83:2a:8f:bb:5f:44:e9:29:47:4c:04:42:99:7a:
07:f7:cf:95:ab:19:f5:ca:05:de:0c:7f:dd:07:be:
f6:d6:c6:7f:dd:e3:c4:6b:eb:68:33:94:21:79:15:
f9:bc:9d:2f:05:ad:d8:c0:c9:f1:5d:fe:4f:41:24:
18:c8:6e:66:9e:82:7c:ac:05:b6:a0:95:9f:59:26:
6a:13:1f:14:99:b6:d7:c0:76:9b:68:1c:9f:7d:fe:
68:3a:06:73:37:d6:e7:93:82:e8:f8:ce:8a:2c:ff:
22:6f:6a:aa:b3:39:d3:e1:93:88:a1:06:f8:aa:ba:
3b:de:94:34:72:95:7a:69:ff:ce:28:46:cf:5f:96:
76:e2:80:b2:5e:f8:90:de:be:27:24:23:c8:d9:65:
aa:af:21:3e:33:f8:5e:11:7e:c0:40:fd:40:f0:2f:
9e:1c:69:d1:a4:a3:1b:51:f4:02:c1:f8:a2:03:a6:
8a:64:cd:f9:02:54:1e:92:e3:b7:f9:61:9e:53:45:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2F:B4:BE:3A:33:4B:C6:0E:6A:20:DE:69:0D:92:C1:E0:A2:9D:BA
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b9:21:f9:83:d6:eb:59:41:21:b2:79:d6:6e:f5:38:b1:a9:
a7:81:33:cc:40:fc:ee:86:2f:45:0e:e7:e1:15:09:4c:13:4c:
4b:00:f5:b0:51:5e:e0:5c:0a:4d:14:07:f7:20:96:40:2f:0b:
06:6d:c9:58:3d:ec:32:5a:13:9d:bd:ff:ce:15:5c:96:5d:a4:
f6:38:9c:4c:22:7d:b8:d8:a2:64:22:f0:85:c7:65:6b:25:06:
81:d2:2f:2d:89:be:1a:28:86:48:3b:0b:02:74:a7:2b:3a:86:
79:45:09:ea:c4:db:15:a8:30:00:51:f5:bc:0e:4f:81:16:75:
9d:3d:b0:ba:50:af:9a:8b:91:e3:12:e4:e7:2a:23:93:31:29:
70:74:6c:20:d5:33:72:57:b6:39:80:a1:50:4f:98:03:d5:af:
3d:9d:4b:be:42:00:22:8f:61:d1:33:3c:2a:ca:52:f2:e6:64:
4d:49:d4:ed:a2:70:0a:df:62:aa:9c:ad:26:6c:b8:86:8d:dc:
53:36:20:4e:da:a6:dc:ff:f5:8c:de:e3:f9:f0:41:09:f3:36:
55:84:4c:d1:a1:4b:95:3c:b6:b1:bd:23:8d:82:01:47:bd:85:
f5:f0:87:c0:2d:7d:e9:95:98:20:47:25:54:5c:56:75:06:2d:
70:53:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:04 2026 by rpki-client