Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: RFKeMukTLd6XEAeyuNMPtEqGZmMII32t3Cy0mqCgasY=
Subject key identifier: 69:3E:A5:8A:19:DD:D6:C0:20:B5:0A:EC:78:E7:0C:61:EB:50:D8:A8
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 019E52225974A1905E009719CEA6803204F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 05A9
Signing time: Sat 23 May 2026 00:00:43 +0000
Manifest this update: Sat 23 May 2026 00:00:43 +0000
Manifest next update: Sun 24 May 2026 00:00:43 +0000
Files and hashes: 1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: RFpuAuBRQKv8pMo/baWSyLiZR27d/HHqBB/IasTUyxA=)
3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:52:22:59:74:a1:90:5e:00:97:19:ce:a6:80:32:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: May 23 00:00:43 2026 GMT
Not After : May 24 00:00:43 2026 GMT
Subject: CN=693ea58a19ddd6c020b50aec78e70c61eb50d8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:da:20:3a:9d:7f:c5:26:65:50:2f:7e:d2:
8e:6b:bc:63:53:68:8c:ce:21:d7:63:53:f4:81:8f:
9b:9e:2d:e1:e7:88:51:e4:f3:ee:ec:a3:36:db:86:
f7:10:60:9a:f1:6d:a3:f7:84:f0:4d:81:2f:ab:4e:
f9:11:b1:bd:ce:a6:73:03:7c:11:6d:ca:04:1a:ab:
ea:c2:a2:f4:1d:9d:2c:88:68:9f:28:47:6c:2c:cd:
bd:15:9c:d9:c6:b1:49:83:1e:2d:c0:d6:af:b2:85:
06:62:e1:a9:39:97:e4:be:73:aa:bf:12:11:14:fe:
e9:db:58:f9:b4:ab:c5:ce:e7:0d:04:d3:cd:36:80:
81:4f:4f:66:10:c2:fc:5c:42:18:da:1d:5b:a0:b3:
9e:c2:6d:06:5d:9e:1a:87:89:b5:4b:39:4c:e1:52:
8c:2f:9d:49:18:c7:13:27:54:a5:69:dc:f6:a1:db:
8e:83:11:00:0a:8d:51:52:bb:85:df:7a:ec:28:ef:
a2:11:26:83:4d:e4:a1:72:f0:b1:de:6d:9f:55:ea:
44:80:87:cc:7f:56:cd:7a:cc:16:d4:0f:ed:56:4d:
0e:c7:23:23:eb:7a:1a:d4:5b:67:03:62:0a:0c:d6:
0c:2b:b4:9b:25:6c:ab:e9:b1:18:7e:48:0a:2e:c2:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:A5:8A:19:DD:D6:C0:20:B5:0A:EC:78:E7:0C:61:EB:50:D8:A8
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6a:1a:46:6b:c0:18:a1:5a:6e:1b:48:9f:6a:98:32:71:ea:
a1:01:2e:c4:a8:05:9b:f9:2e:2a:5f:7b:74:ff:68:ad:e4:0a:
0f:98:6e:f0:a5:5e:69:ed:3d:db:be:d2:97:97:88:08:f6:8d:
97:dc:e7:7c:7b:4d:4a:a9:4f:04:94:01:36:c9:54:2f:7f:7b:
c8:c4:d8:51:c7:71:6b:2a:5d:73:db:9e:ab:55:ed:8c:a4:47:
7c:c8:0b:d7:96:bd:38:71:cc:9b:8d:5b:91:21:70:bf:41:24:
28:ad:68:b9:d6:16:41:69:e6:f3:9e:60:b1:0f:35:9a:4e:79:
26:a2:2c:3b:10:18:d3:ba:62:fc:55:24:03:9f:da:6c:18:9d:
fb:67:ce:89:d7:67:47:b3:c1:e4:5d:a4:d8:2c:2d:37:01:94:
34:f7:7a:2b:1f:4f:b5:7a:5a:97:36:31:56:df:27:f6:6f:36:
ac:aa:ee:f1:05:d6:a3:62:0f:4d:ce:50:74:57:39:92:0d:fb:
b2:5d:d8:66:1f:78:ee:3c:12:df:97:6e:06:a5:52:7b:30:3c:
95:23:80:75:a0:ee:a4:ba:c9:d8:e2:91:6f:83:15:6c:3b:91:
1e:18:3e:a2:13:55:e3:d7:a2:35:b0:1d:eb:a0:a3:74:a9:92:
cf:ab:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:08 2026 by rpki-client