Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: sEXV9VKw6wpo6TyZm9ENqhNEbSLlTgBTqpyioFURa08=
Subject key identifier: DA:39:25:80:33:5E:C5:74:CF:90:04:03:81:CD:9C:30:D4:C3:7B:D2
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 019E1D9105886946F3ABA0794AEA04964C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:01:43 +0000
Manifest this update: Tue 12 May 2026 19:01:43 +0000
Manifest next update: Wed 13 May 2026 19:01:43 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: q0Ln244KokRzMvzUkmwPxXEga/rGfIE5/N9nmcz6L/M=)
2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:05:88:69:46:f3:ab:a0:79:4a:ea:04:96:4c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: May 12 19:01:43 2026 GMT
Not After : May 13 19:01:43 2026 GMT
Subject: CN=da392580335ec574cf90040381cd9c30d4c37bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:63:db:90:e9:7d:73:cb:f5:0a:c2:df:70:
5a:47:2b:6e:f1:dd:25:10:cb:32:da:19:f5:4a:18:
78:b4:2b:45:bf:cd:44:2c:e7:0d:cf:df:a0:0b:10:
42:74:71:49:d4:97:f4:29:28:f3:f7:7f:f0:68:c4:
a5:bd:31:f6:05:60:1d:87:21:0d:23:b4:da:12:86:
ea:0b:ed:23:61:c7:f7:8a:31:8f:65:05:36:e8:a7:
b5:59:00:1d:04:c3:41:64:f5:ea:22:48:48:7c:cb:
da:34:1b:09:73:02:df:e3:52:3d:c0:f6:6f:23:db:
08:17:8e:33:8f:b6:27:47:1c:1e:d7:34:11:ab:88:
cd:e9:2d:df:1e:38:4f:74:bd:73:fb:c9:91:5e:8d:
ad:f9:33:e9:8c:13:8b:0b:1d:d5:4e:b3:be:52:dd:
76:bd:6f:32:9a:ea:a9:2e:78:83:8f:c8:8a:a8:17:
8f:77:13:ce:8d:cf:dd:67:71:0e:2a:ea:99:81:e2:
8a:81:1e:05:af:39:ab:4a:49:e5:49:3a:09:a1:f8:
0f:79:cd:e6:b9:cb:34:3c:f6:86:48:a7:a6:67:75:
98:e2:7d:c7:41:e6:f0:66:3b:99:bf:fe:eb:de:35:
85:4e:13:8e:c8:2e:89:30:4a:d2:66:09:22:99:4d:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:25:80:33:5E:C5:74:CF:90:04:03:81:CD:9C:30:D4:C3:7B:D2
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:35:bf:27:e2:da:e0:ee:46:f2:fa:9c:d2:41:44:8f:e9:d4:
5f:65:44:cb:00:97:1d:b5:4e:1e:58:bc:90:93:e2:24:fb:3c:
5c:9f:3c:8f:f5:07:c2:b2:3e:9c:06:c5:3e:9e:68:f9:04:93:
34:cc:a7:a5:4b:48:7b:9a:ef:01:f2:a2:bc:16:b6:45:65:8a:
88:17:a7:f6:14:71:b7:5e:e4:34:06:74:8a:14:13:bd:7d:4e:
05:a2:3a:e0:40:79:57:72:05:03:b1:a4:e0:f5:02:d4:8d:f5:
46:ac:df:ce:dc:ea:1c:c2:91:83:26:78:23:f3:94:7b:50:b9:
39:a5:17:f4:26:88:1c:c5:49:38:6e:e9:13:b9:c3:a6:ea:43:
68:9d:37:7f:85:50:cf:54:86:15:af:66:5b:af:da:66:02:ad:
10:b1:ca:85:3b:85:56:b9:9b:7d:ec:90:40:b3:93:d7:bc:4e:
02:dd:77:3f:3a:50:77:e7:13:d4:cd:08:6a:31:ae:ce:42:0d:
f4:e2:ed:2d:af:c2:40:c0:52:30:ce:da:38:53:d0:36:0f:e9:
f0:99:7e:cf:64:ab:67:dd:8e:4e:de:f4:05:04:63:2c:08:b4:
cb:3e:a9:c9:3a:c1:7b:22:f9:39:d6:a9:ed:26:b8:12:a7:29:
87:64:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:50 2026 by rpki-client