Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: tp0ZLh1gACAJMfnaEBxZpqvdJzGtMihjXRhcFV5bFuA=
Subject key identifier: 6B:3C:45:0E:64:9E:7C:9F:83:DC:7A:F4:AF:41:CE:84:B4:53:7D:90
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019E2023790970642D5A7A9F33AF8B30828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 07:00:56 +0000
Manifest this update: Wed 13 May 2026 07:00:56 +0000
Manifest next update: Thu 14 May 2026 07:00:56 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: C3cQfJH7JARji4viZ/sXbjThyfhYduA/iJYcG8hCj2M=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:79:09:70:64:2d:5a:7a:9f:33:af:8b:30:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: May 13 07:00:56 2026 GMT
Not After : May 14 07:00:56 2026 GMT
Subject: CN=6b3c450e649e7c9f83dc7af4af41ce84b4537d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:72:3e:c6:33:f2:42:cb:55:b2:23:4f:6f:
52:ca:4c:22:77:19:7f:c9:5d:ca:c1:cb:28:58:b1:
0c:bf:53:84:6f:f3:99:fa:12:76:fc:fb:9a:e0:e1:
96:1b:f8:f3:00:68:6f:fc:79:9c:fc:87:09:d8:70:
68:d4:8b:5b:ce:f6:d8:92:62:ca:1b:fd:87:b7:d5:
0f:3e:b3:d9:8d:76:9d:6e:b0:4c:34:14:8c:b5:6b:
9b:62:06:44:65:4d:5b:77:a6:6a:b0:b5:16:74:73:
6f:f0:6a:0e:52:4c:09:c4:33:af:88:80:a6:3a:03:
89:81:66:bb:28:20:1b:1d:c4:38:49:ff:bc:f2:4f:
5a:ce:d1:3c:bd:b6:c2:37:0b:68:7a:8b:f6:d1:7b:
02:d0:2b:f2:b7:47:36:1e:ff:25:bb:a8:20:b9:c5:
f1:b3:a7:4d:f7:35:db:3a:2c:34:9b:63:69:16:9d:
03:09:0c:30:c2:00:7e:c2:bc:83:a7:42:b3:84:7d:
16:d7:48:b2:b8:53:41:33:74:ac:27:72:96:2d:6e:
be:a2:ee:cb:b3:47:f0:c2:cd:84:89:da:5c:5a:21:
b9:6b:43:bd:fd:b5:b0:16:e4:4a:f2:d4:d5:37:50:
37:5d:8a:ab:04:a3:a7:15:ff:41:00:1f:43:ea:a3:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3C:45:0E:64:9E:7C:9F:83:DC:7A:F4:AF:41:CE:84:B4:53:7D:90
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8a:cf:89:ba:c3:37:11:f0:73:10:00:2c:07:b9:72:5d:ea:
40:2f:28:e8:4d:3c:a6:4c:c2:dd:a5:89:ea:f1:c2:c7:a5:a4:
d3:a9:d4:7c:92:ef:ac:16:81:0f:9b:56:29:e1:28:ae:ad:24:
fe:02:f5:57:41:70:bc:f5:ee:4e:c2:60:10:18:c8:f9:97:fc:
cf:aa:03:40:4a:1a:a3:64:69:e5:c6:3e:c6:80:0c:fa:e3:bf:
05:1e:f4:be:74:71:23:07:14:75:51:6a:63:b3:2b:44:0a:91:
d0:5d:67:28:15:1a:7a:a7:93:71:28:84:d4:c9:04:63:cf:6c:
84:2b:b8:aa:16:f2:15:98:74:d4:41:f1:72:e9:0f:68:88:9b:
4f:ef:f8:2d:c3:ee:a0:cf:a5:fc:a9:68:24:e2:15:1f:71:f9:
bd:ef:8b:d4:c4:bf:8a:d9:66:b1:40:a1:c2:ab:5d:df:51:65:
11:5a:52:71:ac:60:f0:b8:3a:21:4b:ce:21:50:5a:ed:ec:8a:
8e:74:e7:8b:1c:f2:de:dc:7c:fe:a7:d6:a8:62:8f:94:e5:69:
bb:5b:15:cf:b2:a4:39:fe:96:cd:55:71:23:b7:5b:49:fa:a3:
65:c0:e0:7f:e9:3c:d1:22:8b:3a:66:41:21:f9:b4:f6:05:5f:
87:1c:90:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI3kJcGQtWnqfM6+LMIKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjYwNTEzMDcwMDU2WhcNMjYwNTE0MDcwMDU2WjAzMTEwLwYDVQQD
Eyg2YjNjNDUwZTY0OWU3YzlmODNkYzdhZjRhZjQxY2U4NGI0NTM3ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqNyPsYz8kLLVbIjT29Sykwidxl/
yV3KwcsoWLEMv1OEb/OZ+hJ2/Pua4OGWG/jzAGhv/Hmc/IcJ2HBo1ItbzvbYkmLK
G/2Ht9UPPrPZjXadbrBMNBSMtWubYgZEZU1bd6ZqsLUWdHNv8GoOUkwJxDOviICm
OgOJgWa7KCAbHcQ4Sf+88k9aztE8vbbCNwtoeov20XsC0Cvyt0c2Hv8lu6ggucXx
s6dN9zXbOiw0m2NpFp0DCQwwwgB+wryDp0KzhH0W10iyuFNBM3SsJ3KWLW6+ou7L
s0fwws2EidpcWiG5a0O9/bWwFuRK8tTVN1A3XYqrBKOnFf9BAB9D6qN7ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs8RQ5knnyfg9x69K9BzoS0U32QMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADorPibrD
NxHwcxAALAe5cl3qQC8o6E08pkzC3aWJ6vHCx6Wk06nUfJLvrBaBD5tWKeEorq0k
/gL1V0FwvPXuTsJgEBjI+Zf8z6oDQEoao2Rp5cY+xoAM+uO/BR70vnRxIwcUdVFq
Y7MrRAqR0F1nKBUaeqeTcSiE1MkEY89shCu4qhbyFZh01EHxcukPaIibT+/4LcPu
oM+l/KloJOIVH3H5ve+L1MS/itlmsUChwqtd31FlEVpScaxg8Lg6IUvOIVBa7eyK
jnTnixzy3tx8/qfWqGKPlOVpu1sVz7KkOf6WzVVxI7dbSfqjZcDgf+k80SKLOmZB
Ifm09gVfhxyQsA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:42:59 2026 by rpki-client