Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: pukS+ec2i8GFe7tnfYI9qDHJT2GxkMS1vDfM5CzkGBU=
Subject key identifier: E0:1C:A2:A8:9C:0A:CF:BB:8D:3E:49:3D:AE:B0:65:56:08:BE:4A:EB
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019DECDBB9CDCCF43B8959F39075214E4A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0CE8
Signing time: Sun 03 May 2026 08:01:55 +0000
Manifest this update: Sun 03 May 2026 08:01:55 +0000
Manifest next update: Mon 04 May 2026 08:01:55 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: hI/z2wn8ZOiZLu5RNaU2dk1u5tCa1Pe1Zu3xaBrNxBM=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:b9:cd:cc:f4:3b:89:59:f3:90:75:21:4e:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: May 3 08:01:55 2026 GMT
Not After : May 4 08:01:55 2026 GMT
Subject: CN=e01ca2a89c0acfbb8d3e493daeb0655608be4aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e8:65:bf:f1:39:22:4a:1b:8c:91:12:25:bd:
e2:3f:21:af:96:08:b7:26:02:64:24:66:68:84:d9:
c9:20:a4:7d:2f:c8:9f:5b:fa:99:2a:a3:8c:ef:b9:
1b:e8:ee:58:15:4e:d7:85:3a:55:f1:fb:db:25:91:
6c:8e:8b:3f:28:b6:d8:ca:e3:71:10:3e:34:b6:17:
9a:73:a6:c9:4b:2c:17:70:36:04:37:99:c6:fe:50:
34:8e:f1:91:ce:9a:39:09:06:76:e9:63:3b:35:5e:
59:1b:32:de:d4:72:31:59:03:9d:f1:c6:c2:99:bb:
cd:e9:e6:99:e7:11:2a:08:5a:35:85:a9:ed:3d:ce:
6f:e1:6f:71:5d:f3:4b:96:df:22:5d:82:e3:7b:78:
9d:5f:36:55:06:c6:12:9c:73:f1:3a:c0:bd:63:91:
51:e2:58:56:bb:ee:27:93:ae:2f:00:c9:6a:10:a6:
1e:05:75:d0:95:37:57:3a:0a:19:c8:31:3e:31:60:
d1:5e:b4:65:64:30:fd:32:99:70:57:66:ec:89:d7:
67:a9:32:4a:b7:0e:0f:6f:14:e3:ca:e6:73:dc:60:
2a:7b:69:e8:e5:d0:b8:da:52:f4:6c:4a:24:b9:30:
a0:00:36:24:1d:04:57:e0:33:21:59:36:59:4e:7c:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1C:A2:A8:9C:0A:CF:BB:8D:3E:49:3D:AE:B0:65:56:08:BE:4A:EB
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:23:c1:3d:36:1b:8b:e5:71:05:08:49:1a:ff:69:01:92:8c:
f5:19:3d:9d:8b:16:38:e7:48:01:5b:a4:1c:4a:7e:23:24:71:
30:42:c9:74:a9:40:e6:c3:4f:3f:16:6a:2c:18:b2:d0:5c:e5:
d0:58:eb:ba:89:3e:39:b7:a0:dc:7f:7c:05:fc:82:f8:f6:ae:
3e:80:e0:8a:68:46:4f:bc:5f:7a:91:eb:44:eb:f1:c2:35:99:
3e:44:90:72:55:c4:91:11:02:b0:27:96:4d:52:af:cd:78:32:
3f:b8:2e:5e:4e:f8:be:bf:4e:5e:8e:01:fe:16:69:4d:41:d8:
50:6d:07:ab:fc:0d:26:aa:dc:a8:08:ce:c8:5a:38:69:47:74:
c4:f1:54:c8:da:6e:2b:89:dd:0e:ce:ba:b4:40:ed:57:c4:ae:
d4:93:c3:44:b2:07:2c:f2:70:b2:01:b9:f4:65:f5:e0:02:4b:
d0:79:c1:f4:06:0f:9c:94:36:2e:87:25:4b:e2:ff:5a:48:39:
d2:fd:00:61:2c:e4:3d:60:6f:bd:54:97:03:85:74:05:27:d7:
a3:57:09:dc:3a:e1:7f:a4:4e:75:c2:60:54:c2:e7:31:11:49:
04:32:31:c7:00:e5:60:88:29:4d:37:bd:f7:bf:e1:23:ad:e7:
16:02:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:40:04 2026 by rpki-client