Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: SYZKwQWa1vdIyHYn0CcdJ+X7bJfxW/sQV6L2QH9jkVU=
Subject key identifier: B9:A1:FA:A3:AE:4B:B1:C1:30:48:DE:53:2B:58:C8:9A:D5:D8:3E:C9
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019E31BBFAC6FF582E5B85CBFC6931161E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 17:01:03 +0000
Manifest this update: Sat 16 May 2026 17:01:03 +0000
Manifest next update: Sun 17 May 2026 17:01:03 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: nQMrnt2xNj8mVuYhNNXI/Rd34FTMQOpEibrTJ2c6P40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:fa:c6:ff:58:2e:5b:85:cb:fc:69:31:16:1e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: May 16 17:01:03 2026 GMT
Not After : May 17 17:01:03 2026 GMT
Subject: CN=b9a1faa3ae4bb1c13048de532b58c89ad5d83ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:8d:48:ec:52:fe:cd:36:cd:d4:a9:9c:27:
4c:28:93:2d:53:30:59:ae:b9:fa:78:4d:e3:f2:1a:
ff:03:5e:ba:ca:69:60:d8:65:14:ee:c4:b4:b1:3f:
45:74:e2:33:8d:a4:f9:b8:8c:6c:f9:70:a9:d6:fe:
63:08:ae:a1:c8:c9:83:63:af:60:10:5e:cf:fa:0a:
6a:32:26:b5:af:b1:d2:2a:d3:22:f2:95:a5:e2:20:
31:5c:4d:dc:76:71:06:71:12:01:7f:08:0c:36:d7:
dd:fb:d4:52:93:e0:37:c3:6c:18:90:79:e1:67:91:
09:d3:5f:80:66:3b:ea:26:c8:3a:62:76:0b:59:d5:
7f:95:4a:cb:f0:a8:d5:48:12:a7:fd:2d:1c:d3:2a:
ed:e5:df:ca:09:60:b0:51:6d:12:4b:68:de:9b:ce:
87:9a:5e:44:96:a9:57:23:58:37:9b:3b:19:a8:4f:
5d:1a:2d:1e:df:16:87:6c:0e:4f:b7:b7:7a:9c:b7:
2b:f9:75:f7:ad:d0:76:3c:26:20:02:94:66:ba:56:
41:ed:e8:7f:87:f4:b4:e5:5e:b2:ab:74:05:47:e7:
34:da:2e:69:8c:18:53:43:41:68:3f:14:08:b0:c1:
6c:53:66:6b:cd:22:f2:cf:03:69:1d:bf:6f:0d:dd:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:FA:A3:AE:4B:B1:C1:30:48:DE:53:2B:58:C8:9A:D5:D8:3E:C9
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:da:b0:1a:fa:57:a6:d1:06:6c:e1:91:5f:f6:48:76:b1:a0:
39:c8:8d:b7:fd:ff:a2:cd:21:ab:fa:ab:03:d2:41:8c:00:40:
5d:7f:a4:cc:f2:5c:42:31:e8:62:8d:a6:a5:ea:3b:65:dd:4a:
b2:c4:2c:35:71:ad:c6:2b:e3:2c:d1:e0:91:e9:ec:54:d1:f9:
ff:2a:80:44:9a:b3:35:5f:5e:86:43:28:6b:f0:43:0b:2b:71:
18:af:0c:50:4f:0a:d8:fa:59:8e:0c:2b:9e:86:54:23:b1:91:
d0:f7:d7:b7:24:c0:47:b4:2f:39:2e:11:e1:d7:46:51:96:d3:
52:35:63:a0:52:c6:cf:3a:e1:d1:ff:e1:79:72:cf:b7:96:43:
37:ed:c8:e4:fc:2a:ea:a3:8f:1a:fe:cc:26:1e:2d:fe:d4:f4:
b4:56:84:cb:f1:4c:54:14:ac:90:6e:b8:2d:70:a8:dc:02:71:
28:d7:06:19:4c:00:de:b7:d6:cc:88:8b:d8:c6:4e:8e:6a:f9:
99:42:b0:de:c8:1a:6e:ef:36:95:16:05:d4:a2:49:7f:ba:7a:
4a:75:de:8b:90:b9:dd:88:bd:8d:85:ab:b1:fb:6b:90:ff:76:
d8:90:79:5c:ac:d6:e4:19:f9:9d:2c:8c:ea:44:61:2d:3b:30:
3c:77:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:44:50 2026 by rpki-client