Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: cfHrD2BpIW1Pg/G6JWVRDYvYbJUTkUBb+zypYufrLeM=
Subject key identifier: 57:49:F8:69:A9:D9:2F:87:EE:7C:8C:53:42:BE:58:59:2F:9B:50:13
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019E1E6C0AC22459CEFA77C9607A40E8EB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 027D
Signing time: Tue 12 May 2026 23:00:57 +0000
Manifest this update: Tue 12 May 2026 23:00:57 +0000
Manifest next update: Wed 13 May 2026 23:00:57 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: qxxCSY2G3dUCwZmcPK3Sq6xc9WW3SbCt0S5vi/T9OzI=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0a:c2:24:59:ce:fa:77:c9:60:7a:40:e8:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: May 12 23:00:57 2026 GMT
Not After : May 13 23:00:57 2026 GMT
Subject: CN=5749f869a9d92f87ee7c8c5342be58592f9b5013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:01:b7:77:13:f6:e5:69:8a:01:29:d8:7f:
7f:6a:35:7e:6b:1f:92:ba:d7:05:5c:20:b4:5f:b4:
85:b5:b8:a9:b3:21:05:23:fe:a1:fe:b9:64:0a:33:
18:83:ae:5f:37:4a:1d:04:c2:7a:cd:32:64:15:3c:
f6:7c:19:bc:fe:0a:e3:3c:08:9d:7f:c4:6a:7e:48:
f6:fe:11:33:03:73:ab:c1:21:7d:a1:af:c2:c9:6c:
31:55:37:a1:85:fc:9f:0d:b6:be:55:27:01:05:1e:
2d:a2:81:60:be:35:6a:f3:09:e5:59:9b:74:a6:5c:
fe:c0:10:f2:bb:6f:f9:30:cc:09:3c:46:5c:0a:47:
cb:6d:e0:04:e7:d0:bb:2f:9d:6c:da:39:d2:94:81:
04:db:be:40:31:69:49:b5:a0:1b:ba:ea:fe:57:68:
26:00:41:f5:fe:a6:55:9f:69:2e:c1:4e:74:60:b0:
50:52:0f:73:3c:81:59:d7:c5:7e:35:85:4b:0d:78:
ad:d1:cb:c8:24:15:61:fa:9b:27:30:78:b6:4c:0b:
39:42:be:ef:71:b0:53:b1:bf:4f:e5:6f:6c:8a:0c:
3d:fb:cd:72:f3:a2:7d:ca:a6:fd:3a:07:84:68:50:
81:1c:3f:e7:f6:a4:74:c9:79:e5:90:ef:f1:79:35:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:F8:69:A9:D9:2F:87:EE:7C:8C:53:42:BE:58:59:2F:9B:50:13
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:47:bc:91:b2:55:e8:28:7a:03:bb:fa:96:66:23:6f:ef:
75:8d:17:4f:fe:cc:29:bb:15:56:64:38:f2:74:ef:3c:25:1e:
37:bd:6e:86:34:65:97:65:47:4d:27:4d:95:a8:83:10:52:89:
8e:1e:67:42:f4:72:e3:e1:60:26:06:6c:62:76:c6:50:6c:b7:
96:39:08:b3:ab:95:60:a3:d8:15:c8:49:49:21:8f:d6:0c:b4:
65:7d:8b:b6:d3:30:fb:87:61:61:df:d6:05:45:52:88:cc:ba:
12:3c:62:87:a7:48:00:c6:bd:e6:5d:2f:b8:d3:0a:95:28:3c:
33:59:b4:23:e5:f4:ca:e3:67:3f:54:a0:46:9e:37:57:9e:ee:
64:61:72:03:e4:2d:f6:d0:0d:28:b0:b8:2a:c7:c5:ec:c7:df:
53:76:de:6b:7d:20:c9:4c:96:e1:68:66:9d:00:cf:96:ba:fd:
00:a6:e5:2e:bf:79:f8:a9:ea:ef:75:ce:67:cd:1a:61:8a:2f:
1a:ab:85:83:01:17:83:97:c3:de:d7:65:78:2e:24:75:df:63:
25:34:b0:f0:a4:de:0a:69:8d:b4:b8:0d:1b:c8:d7:84:49:58:
b0:84:3b:57:a5:7a:f5:a7:a7:eb:ea:8f:2d:61:23:20:a6:c0:
41:1b:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:39 2026 by rpki-client