Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier: qfD14xjwZ3VapzHxagvzYjwr8QuV2SMbAxRMpcYk/2Q=
Subject key identifier: 48:E5:5E:54:77:D0:D8:7D:6E:78:F0:C9:C3:01:C6:F1:55:B7:F8:49
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 019E1E35CB936C31B4784204ECCE237C0DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number: 0634
Signing time: Tue 12 May 2026 22:01:42 +0000
Manifest this update: Tue 12 May 2026 22:01:42 +0000
Manifest next update: Wed 13 May 2026 22:01:42 +0000
Files and hashes: 1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: GObc4gvodci+GTkWSgyXrI1TrJ7PUvqx+FUdiK8Z1jQ=)
2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:cb:93:6c:31:b4:78:42:04:ec:ce:23:7c:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: May 12 22:01:42 2026 GMT
Not After : May 13 22:01:42 2026 GMT
Subject: CN=48e55e5477d0d87d6e78f0c9c301c6f155b7f849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:67:fa:93:e2:51:e2:86:80:f0:31:3c:56:
49:0e:49:c3:72:01:ba:3a:31:fc:61:38:28:5d:e3:
7f:5c:dd:25:de:b7:b0:96:f9:a1:9b:d7:ca:9b:75:
e4:00:c8:f3:d7:53:ae:03:b3:48:a6:a6:4f:e2:7c:
9c:10:7e:18:57:4b:85:ea:dd:10:74:08:e3:8a:f0:
53:f6:70:78:8e:f8:63:1c:e5:eb:11:7e:f4:ef:54:
4c:fd:be:47:c6:2d:5c:4e:ce:1c:ff:d3:b6:a0:ea:
aa:6a:38:af:a4:2b:06:3f:92:21:5d:00:9e:63:1b:
14:5b:44:b2:30:70:11:00:2c:4e:1d:ba:d4:2f:d3:
49:3a:82:05:c7:e1:5d:6b:b3:0c:85:d0:41:3e:2b:
a0:4f:89:f5:0b:93:2f:4b:50:0f:9f:db:fc:ae:15:
c0:95:47:60:11:94:ef:bd:07:7d:fd:5f:c1:c2:f0:
2f:60:a6:38:fa:01:af:26:2b:69:bf:b4:58:46:5f:
9d:8b:14:06:b7:aa:b6:b4:c2:d5:db:53:ea:ca:17:
6e:4c:90:39:0c:67:0e:64:d8:77:7f:4e:02:15:dc:
f2:18:15:47:72:dd:85:96:1e:98:6e:d2:b4:cc:3e:
04:19:5a:53:b0:be:9a:8b:09:4c:42:1a:ba:19:1d:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:5E:54:77:D0:D8:7D:6E:78:F0:C9:C3:01:C6:F1:55:B7:F8:49
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:cb:13:9a:5c:82:69:a3:93:6b:fe:37:53:9a:96:96:e1:
ce:95:8c:6b:c2:b4:58:76:ba:75:02:1e:2a:30:b6:51:8d:a4:
f5:5d:60:7a:0f:fb:0f:0a:7e:f2:36:22:2b:84:bd:22:6c:81:
f7:61:56:1c:4d:34:c1:92:9a:22:42:80:c6:b2:8c:e8:0b:23:
be:c9:4e:31:e7:0c:90:c2:95:15:34:9b:a7:4f:1d:2a:42:49:
ea:c2:e0:8a:0c:4f:51:9d:c6:48:eb:1f:c4:f5:b9:9b:47:f9:
b5:19:18:cd:08:b7:a3:0c:1e:25:10:ab:eb:75:7b:65:dd:6b:
a6:81:e0:30:ea:33:9c:5b:41:5a:9e:2e:53:0b:5f:63:68:11:
cc:a1:9a:37:94:fe:34:1b:d9:42:b9:67:68:56:69:3d:20:02:
ba:80:3f:55:5a:49:7c:78:5a:d3:7f:56:ab:fe:dc:80:4c:07:
55:73:9f:bc:8b:9b:db:7a:65:92:04:66:d6:6f:3d:7b:ed:a8:
4e:4d:df:05:cf:6d:be:38:50:01:f5:10:68:21:19:97:dd:75:
3d:93:29:26:f8:07:82:01:69:1c:e9:07:6b:16:16:07:7c:26:
b3:e9:0c:86:7c:f6:ce:e6:e7:d2:9f:70:d4:81:f8:89:55:72:
9d:48:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:11 2026 by rpki-client