Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: b8DBCoppmIMYJGJQckQaGTNYr2O9NTZZaTJAJXdX1/M=
Subject key identifier: 8E:C9:3E:A9:67:A3:FD:27:26:A4:87:5B:06:FF:E0:B6:B8:DC:0B:13
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 019E3072BB7F6AA0684DBD01143B4D4DD17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 0621
Signing time: Sat 16 May 2026 11:01:25 +0000
Manifest this update: Sat 16 May 2026 11:01:25 +0000
Manifest next update: Sun 17 May 2026 11:01:25 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: H5igbTov24AfMX/bKWYC/h3SmYQoRxWWWksoPdsXPRY=)
2: iWvUwAU_qvWcuMvoIuoO-qPVv9c.roa (hash: FGFkjOVAlseZE4i4Gp+aJPkMH2fpBKQOFk0SOsvRbNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:bb:7f:6a:a0:68:4d:bd:01:14:3b:4d:4d:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: May 16 11:01:25 2026 GMT
Not After : May 17 11:01:25 2026 GMT
Subject: CN=8ec93ea967a3fd2726a4875b06ffe0b6b8dc0b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:ac:08:26:26:de:28:88:fc:20:8e:85:fd:
2b:39:e1:4a:00:32:83:c9:b4:45:aa:a1:a9:3c:cc:
ed:97:28:84:f0:5d:73:87:24:3b:b5:1e:cb:5d:02:
a2:fc:09:1b:ca:b5:00:66:8a:2f:26:f9:cd:b3:44:
32:26:1d:30:4e:a2:3f:52:ae:0c:02:ad:20:1a:ea:
fc:73:25:46:61:61:a8:14:1c:17:77:fe:c4:f0:e7:
25:ee:8e:0d:43:c4:41:8d:23:0a:ac:ce:a1:b6:56:
7e:12:af:6d:77:ad:e9:18:e5:81:4f:c5:ef:a2:ce:
1b:ad:92:87:a5:08:76:b4:36:af:04:d3:b8:07:4a:
ca:01:68:fb:28:38:ca:70:93:c3:14:af:22:7d:86:
13:76:2f:c7:01:c9:1f:9b:10:0f:db:c6:59:34:a0:
49:2c:98:11:7c:e3:ca:e9:e6:69:39:d7:6e:16:c1:
40:93:ab:00:b1:e7:be:bf:52:24:ab:a3:3a:6b:9a:
e8:a6:29:30:e4:3f:a4:7a:49:1d:57:8c:77:33:7f:
c2:dd:a6:d7:39:7a:bc:ce:f0:2e:c8:bf:ed:2b:52:
e6:19:76:13:8d:42:a8:01:07:76:56:f9:51:d2:d0:
e4:10:c1:b6:d8:89:44:98:d1:47:74:e0:88:9f:ce:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:3E:A9:67:A3:FD:27:26:A4:87:5B:06:FF:E0:B6:B8:DC:0B:13
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4a:4b:aa:53:3e:b2:5e:0d:85:75:55:01:1f:65:d5:2d:82:
10:84:bb:41:be:1a:06:75:38:a0:8b:56:34:88:98:bb:1a:b0:
51:98:03:93:d5:82:27:7d:91:30:a2:7e:f8:94:1a:06:d1:78:
12:b9:c8:09:59:a1:74:1c:1c:b3:31:b7:81:86:94:e6:96:ac:
10:a5:29:d0:fa:f0:a6:ff:57:b6:42:5a:b9:94:79:ee:16:5f:
80:5a:bc:28:43:fa:40:14:f2:16:6e:fa:41:86:28:7b:bb:4f:
56:01:2b:e9:d6:98:84:86:a1:1c:25:6e:66:0e:99:47:84:7b:
c4:8b:5a:56:0a:85:1e:b3:27:07:29:9b:c2:0f:6c:b3:d3:4b:
bf:74:52:36:f1:5f:82:d1:3e:a7:ac:e4:02:d7:2e:52:bc:61:
06:78:2c:e6:32:91:f8:08:b8:50:f9:a3:da:ed:36:74:d0:9b:
c8:75:21:0d:4b:60:c1:99:51:6e:af:be:bc:4f:1c:f5:2f:d0:
de:96:70:d8:ce:66:89:56:35:df:a3:20:2d:e3:ae:dd:fa:a1:
9f:55:2d:58:fd:94:5b:4d:b1:88:ab:73:0a:6c:7e:09:d4:49:
5c:68:3e:a3:e6:7d:e5:0a:9b:2f:12:e3:b4:4b:da:45:1e:8d:
67:a3:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:22 2026 by rpki-client