Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: UtPNG9dUy7zrEL597yCYJekTF3uCD0lmGKbT5qtYmmo=
Subject key identifier: ED:BD:64:15:77:73:EB:F9:0C:5A:EC:20:81:C4:7E:6B:11:73:94:E8
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 019E68AA1C78D61BF142952DDB5F37C3CABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 03CD
Signing time: Wed 27 May 2026 09:00:39 +0000
Manifest this update: Wed 27 May 2026 09:00:39 +0000
Manifest next update: Thu 28 May 2026 09:00:39 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: Hsyz67ilsziEu8+dHXtiJzN1Cgs/Cgpijnyd6DWCt8k=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:aa:1c:78:d6:1b:f1:42:95:2d:db:5f:37:c3:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: May 27 09:00:39 2026 GMT
Not After : May 28 09:00:39 2026 GMT
Subject: CN=edbd64157773ebf90c5aec2081c47e6b117394e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:52:3e:6a:4e:4a:79:d9:df:5b:17:68:fd:
34:2b:13:aa:c6:0c:98:6e:bb:85:e4:bb:76:75:92:
b7:7f:f4:8f:69:ca:ba:ba:f5:51:07:d3:b9:7b:c2:
2d:94:79:3d:01:cd:9d:37:7d:b1:da:80:99:26:3e:
1c:23:8d:70:e7:ae:1e:b9:f1:97:a6:52:24:64:9a:
e5:fc:bb:54:bf:68:f0:11:af:38:12:45:14:2a:76:
65:6e:5f:1c:66:f6:2f:a1:13:62:c2:a2:68:05:d3:
01:94:7d:ac:8f:7e:33:7f:65:95:3d:96:15:f5:67:
f1:29:38:72:0c:f9:9a:92:f6:a0:a9:47:7e:8b:ce:
6d:96:49:a9:75:c8:e5:0c:1e:4b:65:fa:72:50:8c:
d5:20:9d:c5:24:df:2c:e4:aa:0b:b6:4b:2d:01:38:
0a:68:ec:31:ff:51:fd:67:a4:cf:ff:5a:c1:96:a6:
81:a2:64:48:e6:0a:f9:4d:f9:fc:a9:b4:ce:28:b3:
5f:ab:88:3c:c4:d8:bd:e1:75:f8:a7:ed:5d:98:c6:
d5:7c:3e:6f:1d:0c:96:f8:3d:68:f5:52:42:30:62:
bd:51:6f:97:9e:52:a3:f7:f6:4c:fc:2e:73:c6:bf:
74:f4:e9:a5:f2:ba:5f:94:e2:83:90:da:a3:64:c1:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:64:15:77:73:EB:F9:0C:5A:EC:20:81:C4:7E:6B:11:73:94:E8
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:a9:9f:65:bf:c5:cc:c5:fe:ea:d5:e6:2a:08:13:72:37:
1c:38:66:27:a6:5e:43:40:56:bd:f5:d5:46:0a:4f:35:ca:92:
78:d2:4c:3f:c8:1b:6a:10:36:58:5e:6c:f8:96:31:7a:a1:43:
ef:22:9d:73:a9:e6:48:36:4f:80:bd:e1:41:0d:86:fd:6d:4b:
56:66:d7:3e:56:b9:c1:08:89:ad:ae:b4:55:bb:07:22:85:7b:
97:f3:ba:a1:9a:cf:ae:1e:60:f6:81:fc:4a:e1:b9:2d:41:d1:
07:9a:c2:ed:b0:a6:91:af:e9:ff:f9:e9:8b:3e:dd:8a:f5:a7:
4d:a2:f8:c1:37:a8:58:fd:94:63:ad:65:8a:44:8e:b1:20:9e:
b2:d3:4e:a8:fc:4b:c2:be:68:a5:89:12:a5:23:ec:a8:6e:c8:
ae:5e:fc:74:3d:d8:83:8d:0a:bd:92:f2:4c:18:a2:d3:56:60:
72:c8:82:6c:1b:8b:3c:62:b8:1b:50:c5:9c:9e:38:86:d9:40:
45:6c:98:eb:8b:2e:6f:5f:d1:f0:e9:d5:78:5e:bf:35:8a:ed:
07:19:c5:8b:86:58:21:da:84:71:e0:4a:71:07:88:6d:e6:b1:
9a:80:4b:22:1f:a9:e8:9a:6a:b5:9a:22:9d:22:8b:84:ef:9c:
02:b4:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:44:55 2026 by rpki-client