Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: l/PNnbCk6g8f7mmltSNsdSD1I7ti1TyS6FYrfc6EFlE=
Subject key identifier: 33:7D:E9:C7:D0:01:C1:2A:66:35:2A:D8:D2:C7:BD:35:16:F6:4A:F4
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019E3229F7DA688F2CF8B3FE512C928EE4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 19:01:11 +0000
Manifest this update: Sat 16 May 2026 19:01:11 +0000
Manifest next update: Sun 17 May 2026 19:01:11 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: 4VeMUmCCVMxoYsq54QiHhu/Uboaeaa0QL5Kkg5LWmx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:f7:da:68:8f:2c:f8:b3:fe:51:2c:92:8e:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: May 16 19:01:11 2026 GMT
Not After : May 17 19:01:11 2026 GMT
Subject: CN=337de9c7d001c12a66352ad8d2c7bd3516f64af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:20:c1:8d:4b:c5:b4:84:f4:9d:34:7f:95:
e8:f7:f1:49:5d:70:d6:e0:68:17:ae:0a:4b:c0:c1:
2b:7e:33:1b:5e:ca:00:ad:d4:6c:7c:4c:b3:d4:31:
97:6b:c2:ed:21:26:88:38:f7:06:8e:61:77:ab:a4:
1d:84:66:8b:f6:30:69:83:a4:58:99:70:60:35:0a:
28:7b:5a:0b:ec:54:bf:7e:ed:96:07:5f:9d:e0:28:
82:a7:a7:e9:77:ca:13:d3:0e:9a:21:8a:91:49:0e:
b5:c1:ad:dd:67:99:e0:19:58:87:18:c5:5b:fc:16:
75:31:bd:e3:ea:20:f4:a5:29:e0:71:9d:b9:65:e2:
6b:53:93:88:70:6d:2d:c9:05:f5:53:96:63:bf:bb:
77:72:99:58:e6:97:39:78:8f:19:ad:12:07:fe:16:
60:e0:91:ae:5d:d1:47:3a:be:a0:43:85:a6:59:93:
37:4c:72:b4:e2:83:c6:36:4e:47:c4:d6:aa:f7:b7:
66:66:93:54:b7:d0:a8:70:62:4b:9d:f8:13:e6:d8:
3d:06:8d:b9:61:4b:96:50:69:c3:c3:fa:ee:20:df:
48:e0:09:9c:58:9d:10:b8:e0:bf:70:d9:72:93:4f:
d0:72:a3:25:b7:7b:c3:cf:f2:a4:b4:87:81:03:e3:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:E9:C7:D0:01:C1:2A:66:35:2A:D8:D2:C7:BD:35:16:F6:4A:F4
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4a:d4:8d:a9:c6:10:64:1c:23:80:8f:7c:8a:f0:b4:58:ca:
01:1d:24:f7:e4:f4:f5:51:2b:60:13:e7:68:4e:3d:5d:e4:60:
b1:8f:30:87:72:15:8f:eb:b2:cd:1b:11:7f:15:3f:e3:fb:7e:
a0:5a:29:db:ba:65:b3:d6:57:80:8e:ee:38:46:d0:4d:12:a9:
6d:cf:65:73:d3:1b:6b:b4:75:52:cf:15:ef:b1:7c:28:47:2a:
b4:ca:14:2a:ea:53:3f:f6:b1:fd:95:d6:6c:ea:81:b0:4d:51:
a3:49:57:3b:10:33:a9:cc:6f:3a:df:ce:c6:5f:27:46:50:e6:
9a:0f:dc:8f:01:76:c9:68:0d:fb:81:a3:2a:f9:96:38:a0:95:
82:04:1a:8a:7d:77:37:79:79:bc:b5:e9:8e:94:08:68:5d:f3:
05:e4:3d:3e:1c:80:82:27:47:c0:ee:2c:7e:7d:d5:51:9d:a2:
1c:fc:a4:2c:1a:e2:78:28:b3:1f:2a:69:fc:6d:69:e0:5e:fd:
71:6c:62:bc:ee:c6:e8:b7:bf:01:f0:02:f0:8e:b4:44:72:e3:
fa:2f:35:b4:30:d3:f4:bc:38:69:0d:74:18:ff:1a:92:05:28:
c7:44:ce:0f:0c:3c:df:d2:d8:27:e0:fc:12:3a:e0:5d:7c:b4:
e5:db:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:35 2026 by rpki-client