Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: 9n4F5q9miCuIyMaS81s2o4aFqboYBK6iII3YldKQpPE=
Subject key identifier: 33:4A:38:63:0A:9F:2C:A5:41:91:5D:88:39:7A:F1:4C:5C:11:53:36
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019E6EAC97A326B3F186925A30AED00C8E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0E4D
Signing time: Thu 28 May 2026 13:01:05 +0000
Manifest this update: Thu 28 May 2026 13:01:05 +0000
Manifest next update: Fri 29 May 2026 13:01:05 +0000
Files and hashes: 1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=)
2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: 4RwhquasGWB/VKOUDPr+vkE2Xl7EygXM+RyakPIBszk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:ac:97:a3:26:b3:f1:86:92:5a:30:ae:d0:0c:8e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: May 28 13:01:05 2026 GMT
Not After : May 29 13:01:05 2026 GMT
Subject: CN=334a38630a9f2ca541915d88397af14c5c115336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:33:5d:70:18:17:3a:7d:f3:a7:d3:f0:1e:
4a:fa:82:89:5d:3d:8d:f3:39:55:78:f6:d9:60:93:
15:e7:d9:a6:bb:3b:dc:08:67:e9:08:4d:92:53:76:
fc:b4:79:0e:26:b7:dc:0a:1f:9d:6b:f5:7c:40:b1:
09:c3:4f:63:84:35:95:d5:d1:29:94:fb:ed:2c:68:
53:dd:59:4f:d3:dc:b4:bd:8d:12:24:9c:a2:b8:86:
ea:93:69:51:38:ab:81:8f:19:24:2c:df:40:0b:0d:
e5:f1:9f:2a:a4:df:d7:d8:29:59:36:1f:45:c4:53:
b1:98:a7:de:62:94:3b:f6:0f:7a:b8:33:37:56:79:
d9:99:c3:7a:87:ea:89:0c:a1:50:b2:7a:d4:50:da:
59:43:15:1c:80:8d:ff:da:1e:37:ae:3d:55:fe:6f:
46:26:e6:ee:18:24:9b:87:af:72:f3:53:0e:70:3a:
6a:75:db:13:1a:c3:b0:4f:aa:dc:f5:ed:62:c2:ab:
02:d5:d9:e5:18:a8:ef:be:2f:15:5c:72:1b:4b:29:
4b:a3:62:f7:4e:4f:c5:be:05:b4:53:e3:9a:aa:0a:
33:81:7b:e0:72:e7:c7:89:65:c4:b6:55:4a:6a:81:
13:0e:3b:26:72:71:0c:08:c2:c6:39:52:93:dd:cf:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:38:63:0A:9F:2C:A5:41:91:5D:88:39:7A:F1:4C:5C:11:53:36
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:13:eb:14:1f:4a:bc:bf:97:92:3b:1d:3a:6a:5f:11:2b:32:
9c:b3:bc:98:5e:c5:14:21:83:c5:6e:f5:db:ca:0c:bf:b6:8a:
fb:2c:62:7b:45:ae:59:9d:b6:bf:93:f0:1d:07:c1:61:45:6a:
89:b6:cd:ca:5b:e4:7f:19:e6:85:36:44:01:af:bb:35:35:9f:
fe:1e:cd:ca:7b:16:be:5b:53:a9:fd:e2:b0:49:fc:c0:c1:4c:
82:9c:05:26:e1:18:87:07:98:d1:74:87:3e:2f:06:da:dd:f9:
d9:63:6c:bc:5d:f1:2f:17:76:03:f0:c3:40:a0:e4:ec:81:62:
40:ba:c0:42:25:89:29:af:de:4a:9a:27:dc:de:40:0b:61:1c:
ee:eb:f2:7a:c6:d3:67:9d:66:4c:d1:72:69:f6:01:ec:f6:cb:
7a:38:95:70:55:e7:20:f3:65:fa:68:41:c3:0c:54:7c:81:ec:
12:b5:7b:8b:98:e1:7a:69:f3:7a:f9:85:23:d4:b1:32:87:47:
8c:c8:20:e5:dc:56:dc:c3:a4:ca:12:19:cf:55:d2:90:22:cc:
05:40:de:39:3f:ed:4f:8b:3f:2f:2e:8f:6f:dc:ff:56:16:40:
8c:d2:c8:c9:42:7f:3a:f1:24:68:f5:0e:29:c0:4d:77:cd:92:
0c:9a:bd:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5urJejJrPxhpJaMK7QDI51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm
N2U4MzIwHhcNMjYwNTI4MTMwMTA1WhcNMjYwNTI5MTMwMTA1WjAzMTEwLwYDVQQD
EygzMzRhMzg2MzBhOWYyY2E1NDE5MTVkODgzOTdhZjE0YzVjMTE1MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbkzXXAYFzp986fT8B5K+oKJXT2N
8zlVePbZYJMV59mmuzvcCGfpCE2SU3b8tHkOJrfcCh+da/V8QLEJw09jhDWV1dEp
lPvtLGhT3VlP09y0vY0SJJyiuIbqk2lROKuBjxkkLN9ACw3l8Z8qpN/X2ClZNh9F
xFOxmKfeYpQ79g96uDM3VnnZmcN6h+qJDKFQsnrUUNpZQxUcgI3/2h43rj1V/m9G
JubuGCSbh69y81MOcDpqddsTGsOwT6rc9e1iwqsC1dnlGKjvvi8VXHIbSylLo2L3
Tk/FvgW0U+OaqgozgXvgcufHiWXEtlVKaoETDjsmcnEMCMLGOVKT3c8CBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNKOGMKnyylQZFdiDl68UxcEVM2MB8GA1UdIwQY
MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt
MjJmYzU4OGJjNjZmLzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm
LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohPrFB9K
vL+XkjsdOmpfESsynLO8mF7FFCGDxW7128oMv7aK+yxie0WuWZ22v5PwHQfBYUVq
ibbNylvkfxnmhTZEAa+7NTWf/h7NynsWvltTqf3isEn8wMFMgpwFJuEYhweY0XSH
Pi8G2t352WNsvF3xLxd2A/DDQKDk7IFiQLrAQiWJKa/eSpon3N5AC2Ec7uvyesbT
Z51mTNFyafYB7PbLejiVcFXnIPNl+mhBwwxUfIHsErV7i5jhemnzevmFI9SxModH
jMgg5dxW3MOkyhIZz1XSkCLMBUDeOT/tT4s/Ly6Pb9z/VhZAjNLIyUJ/OvEkaPUO
KcBNd82SDJq90Q==
-----END CERTIFICATE-----
Generated at Thu May 28 19:20:37 2026 by rpki-client