Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: MSokyRQfNa7LrqNrdijV0AVt0BXoQAjn074thhXOEZo=
Subject key identifier: 79:D4:1D:02:8F:B9:E8:C9:99:8C:C9:F7:C5:BC:CE:79:0B:42:D8:EC
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 019DAF7CD3ACC2630132B48533E2001EA53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0D0C
Signing time: Tue 21 Apr 2026 10:01:26 +0000
Manifest this update: Tue 21 Apr 2026 10:01:26 +0000
Manifest next update: Wed 22 Apr 2026 10:01:26 +0000
Files and hashes: 1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: trq1gu+4HyLJ4bsR7nZ5nbdUSIbqB7iN+0yzWgMlmFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7c:d3:ac:c2:63:01:32:b4:85:33:e2:00:1e:a5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Apr 21 10:01:26 2026 GMT
Not After : Apr 22 10:01:26 2026 GMT
Subject: CN=79d41d028fb9e8c9998cc9f7c5bcce790b42d8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:7f:d1:c4:14:99:b0:b3:1a:4a:bb:f5:d5:
4e:1e:91:ca:70:27:79:5f:f3:b3:a4:f0:4b:57:08:
67:b0:33:e9:b2:fa:14:88:21:b8:64:59:4c:fd:e4:
bf:66:63:77:ec:90:62:ab:50:2f:5b:98:19:6a:0b:
3f:ac:f1:31:bf:ee:22:5b:04:3e:5e:a5:c0:ab:24:
30:c8:ab:03:8b:53:8b:80:1f:40:f4:70:45:0b:02:
69:25:87:31:95:6b:b7:58:60:1d:2b:2e:4d:9d:7b:
5f:be:20:dd:44:30:b1:17:81:4e:ad:5d:f2:c3:2a:
df:d4:0f:46:60:74:50:ee:be:85:9a:7c:25:87:26:
70:4f:31:ca:32:25:95:1d:be:ad:c1:6c:29:aa:d7:
00:1f:e4:16:12:48:c4:61:00:27:76:3c:e6:bd:a3:
c0:99:d9:e0:46:7d:fe:15:95:98:cf:44:14:67:d6:
a8:1e:78:17:ef:a5:13:31:cd:31:65:3a:11:02:d2:
d9:3a:65:38:7d:80:ba:d8:62:69:d0:2c:7e:cf:c5:
92:9f:92:3b:fa:a9:ac:1c:54:2c:ec:78:4b:ad:30:
24:b0:60:14:cb:88:28:84:60:08:52:02:3a:19:2d:
dd:24:03:93:fc:60:9f:9b:60:19:27:7b:59:b8:f0:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:1D:02:8F:B9:E8:C9:99:8C:C9:F7:C5:BC:CE:79:0B:42:D8:EC
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1e:ae:0f:0b:19:cf:df:55:6f:84:99:79:b7:bb:70:1c:5c:
1d:5a:20:7a:ec:b6:7c:94:2d:95:bd:d6:90:e3:f8:f8:53:0d:
17:51:3c:fa:ce:ea:68:8f:8b:0c:c9:31:e4:33:f1:b1:f9:3f:
50:97:46:ad:49:bb:46:99:39:30:f5:7c:0e:12:fe:26:fe:2d:
0e:c7:5a:20:29:f5:1f:84:40:88:06:35:f4:7b:76:de:76:d2:
9e:d5:dc:f4:96:41:c6:70:99:4a:38:e3:95:53:a5:68:79:28:
87:4a:1e:f8:5a:d5:8a:c8:dc:7e:bf:c9:93:f8:50:a5:12:16:
9d:cd:0d:73:96:c9:1c:ba:c5:6e:8a:8c:04:01:91:b2:23:82:
f0:11:51:8d:4e:82:ef:06:2b:18:0e:9b:5e:1d:fd:31:78:43:
b9:2f:a4:ff:2d:99:b4:a2:6c:f6:b0:7a:2f:81:4a:93:6b:e3:
3a:56:28:3f:9f:8d:f8:cc:a2:74:08:3c:d4:fd:34:29:40:87:
51:92:6c:48:02:37:2c:25:49:77:38:ce:d0:3d:fb:d7:56:b7:
66:6a:82:e7:ab:59:f8:bf:db:5e:ca:ce:52:40:90:c9:ce:d2:
69:32:d7:e1:90:0e:5e:b7:d2:f5:6d:50:a5:6a:5a:b3:2a:1e:
f5:f5:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:09:00 2026 by rpki-client