Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: Rbp8Pz/qhybIU/8BKuj0Cn2cSMUv7QrhLqPVKDdwjFs=
Subject key identifier: B8:BE:02:52:AB:2D:3A:21:2F:66:31:A5:CD:B7:90:A1:E3:23:5A:93
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019E30A97AAC5247B1B412C23DFB34CE665F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0D01
Signing time: Sat 16 May 2026 12:01:13 +0000
Manifest this update: Sat 16 May 2026 12:01:13 +0000
Manifest next update: Sun 17 May 2026 12:01:13 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: iammPjdE+zMCPfsGM8zLPYqXbgpKv9Lk1spRQuRH9Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:7a:ac:52:47:b1:b4:12:c2:3d:fb:34:ce:66:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: May 16 12:01:13 2026 GMT
Not After : May 17 12:01:13 2026 GMT
Subject: CN=b8be0252ab2d3a212f6631a5cdb790a1e3235a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:96:1a:cb:06:16:34:ba:e7:b3:89:70:d2:
ed:45:15:2d:6b:2e:bb:b7:5b:0d:d2:98:c0:7d:c6:
5b:12:dc:fb:62:e8:3c:c3:6a:bd:37:61:04:e3:56:
89:80:50:87:9a:66:72:de:a3:43:e9:55:aa:ed:b1:
16:f7:a3:22:6f:72:b2:a9:1b:ea:3d:9d:92:c7:cc:
65:39:2f:1f:44:63:43:67:f3:cb:71:c3:d5:13:73:
c9:ef:a7:a4:7d:4f:41:6e:7f:15:4c:be:2f:d0:5b:
35:29:4c:45:47:12:51:98:4e:11:3e:fb:c8:bf:8e:
b2:ac:83:6d:d6:f0:d0:85:a0:1a:b4:4f:01:1c:59:
ca:1a:bd:62:34:32:14:d6:87:91:55:50:52:72:b2:
a7:4b:c6:eb:5f:4e:13:ce:05:26:e8:6a:f1:16:c7:
19:79:38:66:ab:7f:88:1e:fb:f3:4f:97:cf:51:2a:
94:8b:dd:1d:1d:f9:2e:9a:0f:6e:47:d2:76:cd:ee:
6d:f0:28:a8:6d:90:ec:7e:22:45:57:74:99:a3:58:
af:34:04:4b:62:e3:89:9e:44:1d:9a:80:52:35:4c:
bd:74:66:85:a9:b9:1b:6b:7f:cd:10:0d:b3:82:2e:
ff:55:c5:aa:b3:2a:58:b6:95:ec:17:98:1d:cf:40:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:02:52:AB:2D:3A:21:2F:66:31:A5:CD:B7:90:A1:E3:23:5A:93
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a1:eb:ff:86:16:ae:df:25:33:e8:53:e5:d6:bc:92:56:90:
3a:2e:8e:18:67:00:e8:fc:97:3c:8a:5d:27:60:4e:dc:d8:ff:
70:2c:d1:91:88:7e:cd:82:2b:81:84:19:2d:eb:8b:6b:c4:59:
44:b1:95:7d:0c:c9:ca:2b:bb:d4:7a:f6:cb:5c:1b:ed:14:8a:
15:ef:dc:54:98:50:37:39:66:02:27:43:0a:df:b6:62:c4:ea:
47:fc:b9:5a:c2:81:96:68:2d:2e:b6:83:2f:c7:ee:d0:71:1e:
94:6e:80:2b:c6:14:32:fe:4e:73:33:ce:c6:60:ec:f7:61:5c:
b2:6b:93:95:86:a6:55:92:37:0a:2f:6f:fd:50:89:9e:c1:ec:
30:2c:c1:52:26:cd:88:c9:0a:42:85:b1:c2:c8:c6:55:4e:22:
14:d7:2a:37:d1:1a:24:7b:8b:36:e2:93:e0:45:fe:fe:a1:40:
14:d6:ed:13:ba:8d:0e:a0:37:eb:9f:76:65:fa:e1:c6:a8:6b:
db:a4:da:ea:66:83:c3:4e:aa:08:77:85:c8:08:8d:2f:99:c4:
62:1c:51:5d:19:97:c4:9a:d1:dd:22:20:59:02:aa:3d:1e:89:
f8:2f:a2:5c:cc:f9:0e:63:52:05:2a:a0:c7:a3:86:75:bf:44:
a0:d0:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:59 2026 by rpki-client