Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: tu7lxqKk/CiHH4qV4F8/CRnbp21bkk+/Y25ux9LBhew=
Subject key identifier: 96:8A:C2:0A:3A:8E:D2:32:33:E6:79:0B:B7:93:23:20:4F:04:24:18
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019E2926E0D8E1BEA0579D408B6BC64A412A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 15F3
Signing time: Fri 15 May 2026 01:01:14 +0000
Manifest this update: Fri 15 May 2026 01:01:14 +0000
Manifest next update: Sat 16 May 2026 01:01:14 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: cu7IstotqVanKwrDUCx6RVJMLDNwpk8rmgcX3Iuhrw8=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:e0:d8:e1:be:a0:57:9d:40:8b:6b:c6:4a:41:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: May 15 01:01:14 2026 GMT
Not After : May 16 01:01:14 2026 GMT
Subject: CN=968ac20a3a8ed23233e6790bb79323204f042418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:37:2a:00:80:6e:1c:7e:9a:84:a5:58:2e:
5c:e1:65:8e:0a:e5:bf:8b:87:41:fd:65:f4:12:17:
bc:73:49:94:92:e3:2d:48:a5:0d:35:db:67:a0:db:
1e:b4:ab:a6:75:73:ad:2f:e3:bc:c9:26:03:c3:31:
d1:82:80:f2:28:6a:8f:f8:60:a6:93:22:62:05:07:
07:9f:60:c7:cd:de:91:30:c9:bb:05:58:28:a9:b1:
de:87:31:bf:df:3f:f5:a4:1e:00:f4:af:05:4b:96:
1d:bd:03:b0:19:24:cf:38:50:23:60:b7:ea:b5:38:
5b:18:c8:04:90:f6:6b:86:22:d7:2a:d6:2b:8e:1d:
17:dd:af:f3:a0:46:c9:af:7f:69:f4:b1:76:1a:c2:
7f:fc:c8:5b:f9:87:12:0b:ba:bb:b3:df:bb:34:3d:
a7:b4:82:b3:04:74:e3:fc:78:3c:72:b0:3b:5d:03:
e9:43:4c:03:6b:4c:05:24:00:b3:5f:1a:91:c2:e9:
c8:42:c9:e6:f8:58:5e:52:1e:3f:ae:95:86:49:ff:
fe:54:bd:73:74:2b:b1:e6:8e:be:f4:23:b6:e8:bb:
30:c2:2b:51:62:9d:79:f0:ad:03:47:ad:9d:18:9a:
ac:ae:8b:b0:66:fa:5b:c5:14:c9:fe:29:44:13:11:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:C2:0A:3A:8E:D2:32:33:E6:79:0B:B7:93:23:20:4F:04:24:18
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9f:2a:d6:d1:41:f1:26:37:f0:d1:04:1c:ca:b5:85:1c:1b:
b7:ff:b5:91:8b:f3:98:76:98:f0:22:87:12:26:5c:95:a3:5a:
6f:2d:5a:cd:28:31:84:39:02:ca:c2:9e:b1:1f:15:ab:67:56:
7f:55:3d:02:ba:28:9a:35:db:b4:20:c1:81:3e:27:64:27:f7:
5a:29:c4:cd:63:20:c0:e8:4b:0a:f5:9d:e8:96:a9:79:50:14:
ba:ea:e9:b6:f3:82:07:a6:e1:41:90:84:f7:80:94:b5:dc:13:
71:5e:84:dc:3a:26:9c:06:7c:cd:9b:d5:92:c5:a5:ec:43:b5:
7f:06:a3:84:e2:b9:77:67:b8:6a:06:4f:3d:90:76:f5:fa:3f:
3f:ac:fa:8a:8d:c3:d2:0b:10:a4:d3:6f:94:ab:c1:26:a5:24:
d2:18:23:81:4e:04:9a:18:f6:22:01:15:e2:a1:71:eb:e3:d2:
be:6d:3d:4d:3c:1f:64:e4:59:f3:62:c7:67:9c:40:e4:5f:a5:
d8:b0:f7:07:72:34:41:d4:eb:56:8a:19:d3:8b:3b:e1:92:49:
72:4f:c2:7f:7c:77:3a:12:6f:ba:f9:a5:de:0d:91:18:83:90:
63:07:c4:2d:ca:17:70:b9:ff:f5:e1:31:94:6f:ef:77:bb:10:
bd:b6:e3:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJuDY4b6gV51Ai2vGSkEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDNlM2Y3MDI0NTg5Yjk2MmFkZTgxY2Y0NDU2MzA2ZjRk
MzVlNjgwHhcNMjYwNTE1MDEwMTE0WhcNMjYwNTE2MDEwMTE0WjAzMTEwLwYDVQQD
Eyg5NjhhYzIwYTNhOGVkMjMyMzNlNjc5MGJiNzkzMjMyMDRmMDQyNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpA3KgCAbhx+moSlWC5c4WWOCuW/
i4dB/WX0Ehe8c0mUkuMtSKUNNdtnoNsetKumdXOtL+O8ySYDwzHRgoDyKGqP+GCm
kyJiBQcHn2DHzd6RMMm7BVgoqbHehzG/3z/1pB4A9K8FS5YdvQOwGSTPOFAjYLfq
tThbGMgEkPZrhiLXKtYrjh0X3a/zoEbJr39p9LF2GsJ//Mhb+YcSC7q7s9+7ND2n
tIKzBHTj/Hg8crA7XQPpQ0wDa0wFJACzXxqRwunIQsnm+FheUh4/rpWGSf/+VL1z
dCux5o6+9CO26LswwitRYp158K0DR62dGJqsrouwZvpbxRTJ/ilEExGC5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaKwgo6jtIyM+Z5C7eTIyBPBCQYMB8GA1UdIwQY
MBaAFEBD4/cCRYm5Yq3oHPRFYwb0015oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUt
OGVmODg4N2UyZDFjLzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUtOGVmODg4N2UyZDFj
LzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp8q1tFB
8SY38NEEHMq1hRwbt/+1kYvzmHaY8CKHEiZclaNaby1azSgxhDkCysKesR8Vq2dW
f1U9AroomjXbtCDBgT4nZCf3WinEzWMgwOhLCvWd6JapeVAUuurptvOCB6bhQZCE
94CUtdwTcV6E3DomnAZ8zZvVksWl7EO1fwajhOK5d2e4agZPPZB29fo/P6z6io3D
0gsQpNNvlKvBJqUk0hgjgU4Emhj2IgEV4qFx6+PSvm09TTwfZORZ82LHZ5xA5F+l
2LD3B3I0QdTrVooZ04s74ZJJck/Cf3x3OhJvuvml3g2RGIOQYwfELcoXcLn/9eEx
lG/vd7sQvbbjdA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:59:32 2026 by rpki-client