Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: l5HFXtK0ZV+0bK6GpANYVkR2waqjeYOTTzslZP+T1oM=
Subject key identifier: D8:42:F8:56:D1:5E:E4:8B:4A:72:BE:E7:EA:85:08:05:44:C9:5C:8F
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019DEDB6941E59A3929C8FA222D29EB1EA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 16BD
Signing time: Sun 03 May 2026 12:00:58 +0000
Manifest this update: Sun 03 May 2026 12:00:58 +0000
Manifest next update: Mon 04 May 2026 12:00:58 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: G3B2YHxLLTYJBX8KLk7KU0JH9VIU6kV07zbTirsGhts=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:b6:94:1e:59:a3:92:9c:8f:a2:22:d2:9e:b1:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: May 3 12:00:58 2026 GMT
Not After : May 4 12:00:58 2026 GMT
Subject: CN=d842f856d15ee48b4a72bee7ea85080544c95c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:48:dc:36:07:94:dd:f4:ba:8c:d3:2b:20:
e0:02:2b:3a:7f:eb:6d:56:f8:9d:35:fa:b8:65:b3:
05:e8:fa:c8:25:5c:7e:13:f2:50:01:fc:63:57:bb:
90:c7:66:21:a2:9c:ce:74:42:ba:e2:8c:1c:ad:de:
09:90:0e:66:73:0a:02:fb:b4:ee:80:6a:d3:5f:94:
3a:58:54:c4:ad:2a:0c:b7:61:1b:61:6a:35:87:34:
8e:70:7d:8d:fc:4e:10:82:06:29:4a:da:e4:ad:66:
f3:23:d2:eb:3e:b5:14:53:d9:b5:37:da:9a:1a:a9:
e1:a4:f8:4b:34:4a:29:8d:7d:e3:8a:af:80:dc:b0:
24:a8:e2:3b:ec:f1:f3:66:32:3d:21:0d:ef:6b:fe:
cd:51:99:53:99:ff:89:c6:86:dc:57:29:fb:f9:e5:
66:62:ac:f4:ca:81:88:d8:66:a9:17:10:a0:9c:1e:
f5:6c:e7:02:ac:f9:cb:4e:25:12:b9:c3:cf:84:ba:
bc:b3:e0:cc:fb:56:29:56:6a:09:85:ef:a9:9b:93:
96:79:d8:90:b8:01:9a:84:c6:51:c1:1b:5f:fa:aa:
64:50:7d:46:ae:05:e9:fb:e8:50:57:cb:a2:81:0b:
b4:41:3e:2f:e8:84:48:61:49:b1:e2:36:7f:98:42:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:F8:56:D1:5E:E4:8B:4A:72:BE:E7:EA:85:08:05:44:C9:5C:8F
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:78:05:31:d0:17:40:c7:29:4d:d0:d8:20:03:60:57:14:ec:
10:52:05:45:7c:b5:85:62:d7:e2:45:7c:f7:da:1f:15:77:1c:
7f:6f:bf:32:51:26:6d:83:96:27:69:cc:d1:4d:e7:84:13:3a:
42:4c:4a:d0:d4:4e:bb:14:e4:c2:d0:5c:4e:f5:09:49:f5:61:
03:69:f6:f4:ff:73:b2:d3:76:cd:29:21:a1:37:31:36:1b:ba:
01:f4:5f:50:30:76:9e:49:06:ba:3c:4c:ad:c8:3e:37:09:cc:
e9:c6:c1:a0:62:75:ac:d2:c9:e2:03:ef:17:2c:0f:cd:5c:be:
ac:5f:39:2f:8c:42:56:7e:f2:5d:e8:23:57:2d:42:fa:99:09:
4d:de:43:2d:d9:b4:47:b8:8a:36:29:68:7c:a8:f8:c6:13:79:
c8:4a:55:8b:33:55:15:f5:f2:66:1e:43:c5:81:63:5d:d0:16:
1d:72:59:37:5a:14:79:32:d8:78:b3:c6:bc:fc:67:5a:2b:dd:
05:da:ce:d4:2a:8c:5a:e0:51:7a:71:2f:d1:18:4b:18:08:23:
b5:3a:32:95:0e:fd:25:4f:b3:dd:34:dd:e8:a9:1d:86:a2:9d:
55:67:da:66:81:78:ee:2f:76:fd:3b:84:ad:6c:43:49:28:07:
d7:77:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:34:45 2026 by rpki-client