
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: CqSCAhh3zP+vJSX16ulwozeOvVOiPjLFG2/mG4DC374=
Subject key identifier: A4:98:FC:EC:B5:FD:F9:AD:4A:1E:57:FF:DE:41:9D:97:AC:39:23:89
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019E2ADE0171C6B6528A8411215F14841C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 15EC
Signing time: Fri 15 May 2026 09:00:52 +0000
Manifest this update: Fri 15 May 2026 09:00:52 +0000
Manifest next update: Sat 16 May 2026 09:00:52 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: Du+FRX+I8+2EmptJCeMBg0nKuIcjEhIAuQ6Sf15A4jk=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:de:01:71:c6:b6:52:8a:84:11:21:5f:14:84:1c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: May 15 09:00:52 2026 GMT
Not After : May 16 09:00:52 2026 GMT
Subject: CN=a498fcecb5fdf9ad4a1e57ffde419d97ac392389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:ba:35:b5:ca:f4:67:65:3d:12:c7:bf:30:
93:33:68:2e:74:33:fc:d1:f5:48:1e:29:60:8f:c4:
55:fa:02:21:fe:03:8b:af:48:e0:ee:fc:4f:98:99:
b4:7d:af:7d:f7:02:7b:8e:90:dd:8f:ba:0c:a4:db:
ce:9b:e2:24:29:4f:bd:40:9f:cc:be:a6:14:b0:ee:
9e:5f:37:f6:66:e3:a7:e7:e2:05:b5:32:b6:17:ff:
d2:4d:70:84:35:f2:ff:da:4e:3f:a7:a1:3a:13:2d:
4b:5b:c6:a6:3d:9e:f4:53:37:18:ce:46:13:4c:99:
da:09:81:47:87:66:4b:99:43:ef:79:18:41:fc:fa:
c8:0e:ef:63:58:a6:f6:b7:38:bb:3a:6f:7b:6c:aa:
71:a8:09:db:63:7c:5c:33:82:27:e2:42:13:df:ec:
41:48:85:c3:04:6d:e2:05:bb:8f:1b:d5:bf:c5:b2:
5d:62:82:30:69:75:c6:e5:a0:b7:bd:8f:d2:12:ca:
b0:5f:b6:31:6c:f8:49:e9:50:95:7c:ad:9b:3b:25:
b6:bc:38:02:d0:9b:5e:8a:10:14:c7:9a:5d:de:10:
9d:62:3a:b9:71:c6:71:c9:13:d0:39:a2:83:96:5e:
95:17:cf:7b:83:3e:a4:89:74:a1:c1:44:26:7d:25:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:FC:EC:B5:FD:F9:AD:4A:1E:57:FF:DE:41:9D:97:AC:39:23:89
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:8e:84:33:2e:f3:2e:83:67:b6:45:d3:bb:55:7c:ef:00:
6f:f7:00:d4:ee:4b:85:87:e5:83:5b:67:a1:57:27:be:e6:bd:
9d:4c:64:0d:17:71:5b:25:b1:3b:5f:ce:e3:b4:8d:f9:63:ce:
67:db:46:54:2b:f8:de:4d:4d:66:b5:f1:27:14:5d:f8:25:0d:
31:5b:0e:3a:09:1c:bb:a0:33:c4:9c:5c:36:bb:95:ed:10:07:
21:5b:6a:c1:ed:be:a5:4f:b1:4e:fe:07:a8:c1:e9:4b:ce:7a:
fa:c1:eb:98:44:bf:1d:10:9b:23:80:bb:2e:7b:b5:63:d9:31:
43:f6:56:a2:7e:41:79:9c:d3:57:0e:6a:dd:08:6a:39:ec:39:
49:e5:72:41:83:94:b3:f2:bd:ab:5d:c5:99:66:e3:62:59:73:
92:80:9e:86:5b:5b:a6:f6:f2:e5:63:ce:34:0a:8e:28:ed:0d:
70:c0:3d:43:1a:24:3d:6c:0e:ce:30:de:b4:85:f1:32:39:0c:
0b:33:62:ed:39:b0:fe:18:50:38:a8:6e:90:6f:8e:eb:a7:ba:
f3:27:c5:d2:2e:ac:de:e8:f0:3f:4a:d0:52:90:4a:80:92:d9:
c1:c4:a2:52:bd:52:24:a2:f6:1a:c2:8c:f0:38:72:80:da:6d:
15:28:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:53:58 2026 by rpki-client