Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: AKRbaV1E1dHkMVritOGP7Uy2mJi25DMDXfQ0uD99Sgg=
Subject key identifier: BC:F8:2E:F1:DA:91:50:5C:BE:2D:1C:C9:28:F6:95:DE:EF:64:3E:44
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019DF9F1A1234D4E9A8E78C272D1388CB5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 09B5
Signing time: Tue 05 May 2026 21:00:55 +0000
Manifest this update: Tue 05 May 2026 21:00:55 +0000
Manifest next update: Wed 06 May 2026 21:00:55 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: A98mHCkkCMzGYMTV0VfHnfelXngLtvxNfS99jGniOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:f1:a1:23:4d:4e:9a:8e:78:c2:72:d1:38:8c:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: May 5 21:00:55 2026 GMT
Not After : May 6 21:00:55 2026 GMT
Subject: CN=bcf82ef1da91505cbe2d1cc928f695deef643e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:00:4e:ec:37:29:e2:c2:5c:c6:86:c6:3e:
e1:69:12:e8:7e:fa:09:e8:6f:83:4f:7b:97:dd:b0:
2e:90:b1:c8:69:04:3a:76:7a:9d:54:d5:9e:4e:1a:
fa:d0:ac:8c:e4:d3:b9:f4:fc:41:73:a1:8d:54:30:
da:1a:eb:af:47:d4:0a:be:22:1d:d7:48:0a:a9:cd:
6a:11:00:b3:36:e5:70:3d:7a:3c:c6:3e:04:59:62:
86:9b:f2:e4:2d:02:a4:0d:87:46:8e:2b:ab:cb:32:
72:cb:9e:ac:7c:b1:85:db:a0:b9:ac:88:ed:94:37:
e0:d0:e1:4c:7b:32:02:b0:75:93:72:9e:47:2e:19:
a9:d5:f8:9b:d7:37:57:4e:8f:90:0f:e5:d1:d4:80:
dd:50:51:f8:19:ee:02:c6:2f:c6:64:0e:46:80:4b:
b6:43:5a:56:58:1c:4e:68:05:a9:b9:73:05:97:ec:
43:fb:25:84:cb:ac:56:8f:c6:91:75:cc:02:df:6c:
74:dd:07:8c:ae:53:db:47:62:a0:0c:34:32:25:09:
f3:df:0e:31:fe:1e:02:a4:d4:26:36:21:b9:1a:10:
67:0d:cb:31:e4:4c:96:27:64:30:be:d9:0e:1f:1b:
88:99:c4:24:23:90:32:57:de:63:d7:06:87:c6:a0:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:2E:F1:DA:91:50:5C:BE:2D:1C:C9:28:F6:95:DE:EF:64:3E:44
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:fd:01:c0:7e:c6:88:ae:f3:cb:38:ed:42:59:fc:e5:46:
a2:3e:7a:ca:8f:18:49:01:78:07:ea:85:78:00:6e:40:51:92:
bc:ae:9f:ca:23:b0:58:da:63:30:42:84:31:fa:01:4b:b7:a9:
55:5a:86:1f:f7:f3:c7:8b:41:97:d8:49:12:4c:a1:3d:49:30:
96:47:5d:05:fc:4d:e5:5e:4f:47:46:cd:fd:45:27:ee:20:c9:
b5:a1:83:d7:78:bb:12:f1:e5:16:87:6d:38:95:5d:06:06:15:
3c:fb:55:3e:c9:06:5b:04:d0:b9:8d:c2:07:f3:d6:82:a7:4a:
ff:46:26:f6:f8:42:5e:a0:29:c1:63:c7:d7:50:93:0b:b5:39:
22:ba:cd:2e:5f:10:3f:ac:29:a9:ae:e2:4e:d0:ee:b6:b5:df:
61:8b:a5:8b:4d:8c:78:9b:50:f9:04:5d:d5:0d:dd:48:d2:02:
25:9b:96:df:97:9c:1e:c7:5e:7b:f9:6d:29:01:38:77:63:e5:
be:f6:3c:bf:76:f5:09:0d:e2:97:15:fb:38:b3:27:02:1e:8a:
b8:0b:fe:c2:2f:d7:13:ae:d2:b7:1f:da:a1:ef:03:c4:d8:6f:
33:14:a1:d1:9f:c2:ab:c4:95:b0:b6:1f:07:79:5c:18:b0:80:
35:5a:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:25 2026 by rpki-client