Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: pCzW+T3hQ60DrGNI+PiKRW5pT0hc0PcHQmPO6xir2U8=
Subject key identifier: B1:5D:29:5E:1E:74:70:30:E6:CD:1E:B5:6D:2E:76:06:34:43:96:D5
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019E31F3BAB9AA9BD7C744EFD7591A8230DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 12A4
Signing time: Sat 16 May 2026 18:01:56 +0000
Manifest this update: Sat 16 May 2026 18:01:56 +0000
Manifest next update: Sun 17 May 2026 18:01:56 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: 1x1AgFG8lm1+8jhSajqs6XNDM+jVg9LTick9lIJYcNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:ba:b9:aa:9b:d7:c7:44:ef:d7:59:1a:82:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: May 16 18:01:56 2026 GMT
Not After : May 17 18:01:56 2026 GMT
Subject: CN=b15d295e1e747030e6cd1eb56d2e7606344396d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:8f:1b:ee:52:42:7e:5f:33:9a:79:4e:17:
cb:0a:32:37:d5:bb:ea:1e:45:6c:c9:0e:45:a0:f5:
a4:b8:53:8f:82:d7:a6:3f:93:bb:12:f9:e5:5d:04:
e5:c3:7d:f2:6f:9c:3f:25:8c:fb:c4:63:75:fa:ee:
69:d2:9e:1c:39:39:08:6a:e8:a4:da:49:6c:b3:e9:
f2:79:a4:ad:39:87:d5:e0:d8:ef:a3:8c:72:c1:be:
96:af:16:6d:2a:54:58:38:f8:cf:66:20:85:9a:2c:
dd:87:ae:34:26:99:d7:f8:b8:ad:a5:0c:13:42:64:
3e:05:21:ec:81:49:b3:6f:b4:b3:a3:3d:71:1f:ef:
d6:98:db:3f:52:60:6c:e5:af:0d:31:cf:b8:f9:88:
24:c9:49:c2:7d:18:e4:2e:ea:25:63:f7:49:c3:d0:
bc:a3:77:09:08:76:db:2c:54:8d:1c:fe:b9:d8:23:
0f:43:1a:b4:09:77:68:e2:32:5c:92:24:d5:48:32:
65:2a:e9:d5:70:2b:16:7f:ea:64:b6:d9:eb:de:5e:
55:7a:4e:45:1d:93:bb:b1:2d:5c:58:cc:29:a8:db:
65:9c:ed:71:42:1b:5b:c6:ef:64:f0:e8:81:65:0e:
dc:da:5f:ab:01:6a:fd:24:07:6b:26:e9:68:a6:7b:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:29:5E:1E:74:70:30:E6:CD:1E:B5:6D:2E:76:06:34:43:96:D5
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7b:57:bd:fa:d5:be:e6:80:78:11:ca:cf:c4:4f:e3:dd:ca:
4b:de:cb:8c:57:e1:8c:c4:62:ca:41:56:d5:0d:81:b6:01:55:
e8:66:32:a9:28:5a:cb:59:83:f1:a4:fd:dc:2a:7d:a6:d0:e4:
3a:2d:e8:95:88:a2:18:f0:ba:f3:ca:dd:65:87:7c:c8:80:90:
54:dd:99:71:8d:88:4f:9a:ba:8c:49:91:dc:34:ea:4f:1a:bd:
45:f7:3d:db:a9:4e:c4:61:00:0a:e1:17:93:d1:91:d9:f6:ae:
ba:e2:ed:54:54:26:a8:44:42:d0:0b:87:a6:43:7f:0d:8a:bc:
a2:a0:c9:5e:42:05:be:f6:79:50:c1:4b:12:8a:95:0f:1f:f0:
ac:fa:31:8c:33:1e:35:dd:88:da:a1:30:60:e1:12:6a:0e:97:
dd:50:43:ff:4d:3e:14:16:56:03:a7:e1:5f:75:c4:be:92:fb:
ca:ba:00:86:07:f9:1a:3c:29:8e:82:d8:93:dc:8a:81:87:7a:
4c:8d:14:77:f2:39:eb:25:ed:41:c3:ae:1c:12:8a:1a:55:bc:
b2:72:de:3c:15:a3:a3:d5:02:ee:2b:82:63:39:d3:63:b9:9c:
71:94:c3:29:f3:2e:7b:78:79:f2:4f:95:41:08:d5:18:af:f3:
e3:8e:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:17 2026 by rpki-client