Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: DxHRlasvxe8JMlWNgHScw0iBfxEYfOzoaWNdXNW565U=
Subject key identifier: 04:FB:F3:DA:48:F8:E5:11:05:F2:F4:EA:68:5A:D5:FB:CD:8C:C9:E8
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019E32984F71CD3715CE6713437CE3653F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0FA6
Signing time: Sat 16 May 2026 21:01:42 +0000
Manifest this update: Sat 16 May 2026 21:01:42 +0000
Manifest next update: Sun 17 May 2026 21:01:42 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: LL7AubiKpWWjpWZseqvBRtrdnoxF2FTbZgPWKKOMWGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:4f:71:cd:37:15:ce:67:13:43:7c:e3:65:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: May 16 21:01:42 2026 GMT
Not After : May 17 21:01:42 2026 GMT
Subject: CN=04fbf3da48f8e51105f2f4ea685ad5fbcd8cc9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:57:23:d3:f4:c2:35:57:e1:77:10:5f:fa:
ea:a3:dd:36:c8:b7:c9:a2:ff:ff:24:45:55:a0:72:
fb:bc:c4:56:00:cc:e4:b4:53:28:64:56:c2:27:56:
9b:5e:83:36:74:42:58:dc:4e:3c:f1:8e:38:03:23:
50:ea:26:48:a6:95:37:4b:4d:19:c9:23:a1:9a:30:
04:f8:9c:25:09:cb:84:6a:95:d4:72:06:98:b1:67:
38:40:c8:e1:96:ae:f3:84:e3:ac:e0:90:47:7b:fc:
bb:ff:aa:b5:53:68:9c:68:50:e0:ac:ab:0d:a1:81:
e3:6a:5f:95:60:aa:4e:2f:55:f2:c5:25:34:75:7d:
1b:2c:29:61:06:c4:e3:13:b0:86:99:0f:ae:92:e6:
97:20:67:07:75:9f:29:59:38:0c:b5:24:31:5d:f0:
78:5a:75:44:02:6e:bd:6e:26:0f:81:74:21:3d:17:
5e:35:00:f5:e4:14:b4:62:2f:98:54:aa:68:ad:53:
8f:26:34:3b:26:1e:84:27:d8:52:c0:66:02:7f:70:
9a:d1:93:7d:9b:3c:43:cc:84:29:2f:2b:de:47:37:
26:4e:5f:25:f9:3c:b2:71:6f:df:a6:81:d7:83:32:
6e:58:e2:25:09:4e:8a:2f:d9:70:3c:72:c4:f2:aa:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:F3:DA:48:F8:E5:11:05:F2:F4:EA:68:5A:D5:FB:CD:8C:C9:E8
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:bc:81:3f:be:50:a6:df:27:76:08:b8:6f:f0:d2:42:ac:
70:f8:e1:95:a8:27:9b:ab:84:08:3f:04:c2:5f:82:eb:30:2e:
6a:00:3e:4f:dc:a5:89:6d:a9:d5:2f:97:78:ae:56:5c:53:92:
e3:1b:07:75:fc:37:ef:bc:20:a4:bb:df:29:eb:6d:62:dd:cc:
96:8f:4b:68:54:25:3c:f0:82:6b:58:dd:00:87:a2:90:99:b9:
fe:ff:7b:f0:e1:08:02:a9:1e:f9:60:dc:05:fb:f0:81:77:5c:
d4:d0:55:58:2a:a5:0d:96:59:8f:b1:99:5c:ca:10:02:62:d1:
ef:6f:b8:1c:22:f7:60:41:f4:0e:ea:8c:de:ea:09:6b:f6:f2:
a9:07:82:70:2a:d2:db:48:61:b6:61:c5:77:6b:6a:2f:1a:9f:
a3:2f:10:8f:38:97:a7:a4:14:4d:09:2d:61:77:a4:be:37:a3:
92:22:10:8b:d9:3d:7b:4d:4d:b6:af:fd:60:7c:0e:1d:49:c8:
23:29:e3:7e:d1:62:8d:99:b8:56:f7:df:2e:54:e1:d3:81:35:
48:af:98:4b:3c:b4:69:a2:ab:06:ca:ab:5b:7e:7b:e1:29:92:
5b:11:53:9c:0d:c0:7f:f4:9a:b8:87:33:9e:f3:8c:74:b5:90:
d1:2d:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:08:02 2026 by rpki-client