Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: SgpTcT3cR+hCJM2oSB7tE64uJ2fVFdRqgLK9advNOjg=
Subject key identifier: 1E:5B:23:9B:80:49:F3:23:A2:00:7F:22:3C:AB:1D:D3:E1:B8:D7:F7
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019DFA96A581356348330045E8EE2D4AFA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0DDA
Signing time: Wed 06 May 2026 00:01:09 +0000
Manifest this update: Wed 06 May 2026 00:01:09 +0000
Manifest next update: Thu 07 May 2026 00:01:09 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: ie5IsXutWr1UP4VQAev3MqyNdCSO+xL48W14NwsFE6w=)
2: oSptT-0ci_ZGXafc3V2IqTfIf0s.roa (hash: 2ePOPwiRcBxV+mjrfIP+IE/Cxy8JzrOsuyP5kjxlWXA=)
3: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:96:a5:81:35:63:48:33:00:45:e8:ee:2d:4a:fa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: May 6 00:01:09 2026 GMT
Not After : May 7 00:01:09 2026 GMT
Subject: CN=1e5b239b8049f323a2007f223cab1dd3e1b8d7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:df:9a:9c:be:43:97:cb:94:05:c6:5b:94:
9f:b6:c0:83:bb:cb:3b:53:11:de:97:32:97:b2:6c:
66:71:de:27:19:84:6b:2b:66:d4:d7:00:42:18:bd:
20:e3:27:4e:83:ea:44:c3:d3:9c:4a:90:bb:7e:94:
a2:69:15:96:d5:88:ad:5f:f3:6f:19:8d:f2:09:50:
cb:d4:da:0a:85:c9:bd:81:d6:2e:28:83:a7:47:27:
76:f6:24:fb:74:19:c0:9b:bb:25:2e:2a:8e:82:da:
2e:1b:41:0a:41:89:89:d8:ca:ae:20:43:7d:08:be:
8e:fc:8e:e8:6f:0d:4b:a8:ec:8a:35:c3:6a:3b:c4:
ac:2e:15:5b:da:1b:d7:e8:57:b3:28:a6:ef:b8:23:
03:f6:da:d4:0e:f3:67:75:f1:6b:5c:27:47:97:a4:
6d:a9:1a:6b:bd:ce:3d:b2:4c:d0:ca:22:70:2e:8d:
fd:7a:35:bd:f8:c9:2a:63:3c:da:07:aa:f1:75:34:
37:d4:d1:d0:0d:86:88:2d:9a:fc:ad:9f:b7:d5:11:
d7:02:0d:5d:4f:27:b5:92:9a:97:17:c6:9d:21:7c:
0d:3f:5c:43:0f:e3:8e:2f:1c:fd:f0:11:e7:fb:4a:
ec:58:76:f2:51:52:6c:29:12:c8:d8:8e:45:97:0d:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:23:9B:80:49:F3:23:A2:00:7F:22:3C:AB:1D:D3:E1:B8:D7:F7
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:37:cd:5a:36:a7:b5:dd:e8:c4:43:7d:b4:37:5e:75:3a:a1:
d3:27:0f:86:59:a0:39:55:b3:95:f5:10:10:97:eb:f9:cc:cf:
71:8d:23:c8:15:77:77:c3:78:cc:04:28:c3:19:b8:f1:76:74:
58:ca:c1:cb:fa:73:52:ce:a5:a1:3d:ea:bc:5f:67:41:84:d5:
43:e3:10:0c:42:57:4f:af:f5:4a:71:95:f4:90:39:ca:fc:61:
7e:0e:3d:71:0a:77:c1:cc:09:ef:8d:d1:7d:a2:1c:65:f9:c3:
f3:fc:fd:1c:88:f9:48:b0:8e:29:50:65:32:3b:93:83:0e:4a:
8b:f5:aa:b5:66:f6:4b:8d:02:3e:40:78:58:b0:12:53:7b:dc:
b5:04:3a:14:54:b2:f8:76:12:4b:56:14:93:92:9e:2a:cd:ff:
34:b7:2e:4b:64:b0:6a:21:c8:de:43:eb:ca:18:29:cd:4e:ce:
61:db:60:d7:8d:10:84:3b:29:a0:21:8e:fe:e4:6b:ec:f9:c0:
c8:ca:6f:32:1a:55:90:fb:05:2e:ba:63:2f:17:77:6c:40:d4:
ad:70:86:41:50:a3:df:95:b2:17:39:9c:63:d9:30:25:c5:9b:
97:e3:6a:49:31:f2:59:cf:4d:65:ad:41:61:c4:8b:3b:0c:f3:
55:2c:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:03:21 2026 by rpki-client