Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: ikoBNqmKo3dRwH7CbeIEOTUB7nHCzJOO4leCvx63EFg=
Subject key identifier: 7E:42:16:86:06:15:DD:E3:74:E2:31:FA:84:F5:06:B3:86:57:0B:2B
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019E2A70815B6BD4DD06299EDE89F2D41A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1914
Signing time: Fri 15 May 2026 07:01:16 +0000
Manifest this update: Fri 15 May 2026 07:01:16 +0000
Manifest next update: Sat 16 May 2026 07:01:16 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: /4ul2dSk2kOUNqt4WkFOoFnRm/qYo5g3u0glpl1RnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:81:5b:6b:d4:dd:06:29:9e:de:89:f2:d4:1a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: May 15 07:01:16 2026 GMT
Not After : May 16 07:01:16 2026 GMT
Subject: CN=7e4216860615dde374e231fa84f506b386570b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:f9:d1:37:1a:0d:ac:53:8a:ec:f3:11:ee:
83:08:c2:0b:a8:60:22:f6:8d:05:da:63:4d:7a:07:
dc:d2:1d:20:e1:04:26:07:b6:4a:0f:6f:e8:24:79:
14:e6:28:55:37:ee:c1:7f:b7:3e:32:ae:61:1c:17:
e8:3c:22:82:91:0c:32:dc:ce:40:11:97:24:e5:6a:
28:9d:3c:db:98:e3:4f:98:41:e2:4d:be:6a:65:92:
fd:4e:ba:30:10:3c:f7:c2:96:7e:30:ff:b6:d2:35:
70:6b:2d:95:63:3f:09:75:6c:a8:c7:66:63:1c:7b:
92:19:85:d0:be:1e:89:c5:b8:f2:3a:4c:a1:4f:54:
a1:80:97:5f:fe:15:99:11:db:a1:05:b3:77:9d:6a:
bd:09:e8:b4:5f:8b:72:e5:9e:cf:d2:03:c9:32:59:
4a:29:a1:e7:07:2d:66:bd:ac:71:92:09:f9:e3:1d:
d9:69:98:89:dd:a1:fc:3a:87:88:76:b2:fe:2d:76:
1e:b0:8d:e4:31:84:7c:d2:d9:4f:f8:eb:a3:17:07:
d8:f1:19:9b:20:98:fc:ed:6d:76:57:4d:93:1c:a4:
3f:61:90:78:0a:ef:18:c3:b0:45:73:95:ad:95:29:
93:ae:89:f7:22:bb:b2:02:13:8a:d7:16:b6:04:9a:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:16:86:06:15:DD:E3:74:E2:31:FA:84:F5:06:B3:86:57:0B:2B
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:18:21:6f:7b:48:40:c8:58:47:fb:46:1c:29:0d:75:43:50:
e6:4d:4c:06:e3:16:e1:d4:f2:1e:ba:77:0a:fe:9c:c0:17:36:
31:f5:8b:5b:a6:10:dc:b5:8f:7b:ca:64:78:39:f6:e6:f4:6d:
0e:65:d2:7f:b8:40:af:20:22:a0:2b:ae:cd:cf:d2:19:f8:47:
3f:3f:22:1e:47:12:95:ec:d2:65:ed:0e:ce:a8:45:d0:25:98:
74:4d:dc:a6:a7:cb:b1:d5:82:f2:af:e9:f6:6f:3f:0a:82:ad:
6c:74:40:e8:e7:86:1b:db:c8:1a:26:b7:41:08:88:ff:92:a2:
18:29:b8:dc:5f:1f:67:55:0b:c4:b0:20:a6:af:c8:a2:b2:b2:
87:66:d2:07:89:03:9f:36:b8:71:ce:c9:ae:da:b7:c0:5a:4b:
5c:b6:68:4e:68:b2:39:f3:b7:ab:f6:d2:6f:f6:e5:49:6e:01:
21:7f:23:fe:5d:79:6a:a3:f0:10:3c:3e:a3:af:4f:db:e3:14:
7a:af:8d:59:36:30:22:c6:b1:27:9d:99:d2:f6:73:a0:ca:e9:
07:26:ff:b5:e6:12:7c:28:2d:aa:27:4f:93:56:c6:48:fd:0b:
43:3d:a8:5e:e4:ac:cf:f3:ce:c7:c9:63:b5:ca:ae:6b:cc:78:
4e:d3:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:02:05 2026 by rpki-client