Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: NneC7lGb/1iUqj3n9nc/KlFBEPzd2h5Jxt39W/rUHIo=
Subject key identifier: 3F:5E:D5:5B:A1:24:E6:6E:8F:72:F5:EE:D2:B4:2B:19:7A:C0:1A:46
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 019E2ADE7736225D82260525F4D8B191CF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0AE0
Signing time: Fri 15 May 2026 09:01:23 +0000
Manifest this update: Fri 15 May 2026 09:01:23 +0000
Manifest next update: Sat 16 May 2026 09:01:23 +0000
Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: YbFQoWccRZaajzY9RULFR+2/p00l26xycCd8qoZJbhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:de:77:36:22:5d:82:26:05:25:f4:d8:b1:91:cf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: May 15 09:01:23 2026 GMT
Not After : May 16 09:01:23 2026 GMT
Subject: CN=3f5ed55ba124e66e8f72f5eed2b42b197ac01a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:d8:89:fb:fa:33:6f:1f:74:e1:01:cf:76:
b9:58:4d:2e:da:44:31:0a:a7:13:04:8b:f0:5f:f0:
cd:01:52:f6:a0:8a:f4:1a:5f:59:13:63:c3:82:60:
a3:40:1a:bf:6f:b2:a9:36:4f:25:02:4f:e1:a8:20:
44:10:e9:56:31:c5:27:cf:d1:18:51:a7:4e:7b:61:
89:da:45:51:8c:1b:fa:e8:f8:ed:68:21:42:6d:7a:
3e:53:8a:75:5a:16:28:41:fc:38:e5:61:71:a7:05:
35:da:b9:e6:bc:b4:91:1a:0d:3b:32:b6:e9:49:37:
03:4b:80:29:ce:88:a4:e5:94:4d:2a:cb:83:82:e7:
86:33:59:d1:ef:ab:d2:87:20:3e:81:5f:e2:16:94:
5a:62:d1:9e:7f:55:0e:87:10:17:38:e1:20:e8:e9:
8b:0b:02:d3:70:7c:11:6d:08:97:f7:31:cc:9d:c1:
26:d8:60:12:eb:5c:5f:85:fd:7e:e6:49:c0:40:a7:
ce:53:0b:8e:90:7b:e6:05:e3:27:a7:06:ba:be:69:
8d:56:52:89:29:a5:1f:7c:42:3b:c4:9a:bc:75:64:
bb:5a:aa:b7:32:38:25:50:21:0c:97:ad:49:af:43:
3c:28:39:c9:d0:a5:b5:cb:20:2a:ae:52:cb:89:ac:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5E:D5:5B:A1:24:E6:6E:8F:72:F5:EE:D2:B4:2B:19:7A:C0:1A:46
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:d8:1e:d6:82:2e:65:fc:c0:1d:23:aa:7a:14:d5:64:94:
58:85:a8:dc:83:e5:82:76:71:90:56:63:6a:0c:fd:5a:d2:3d:
09:31:00:ae:f7:69:e8:11:38:46:0d:54:33:fe:f7:ae:02:f2:
e3:00:77:0a:9f:0e:54:61:1c:41:49:e6:47:3e:94:38:1c:5f:
58:6b:cb:e3:a9:53:a8:80:42:83:b7:94:64:0e:20:87:6b:23:
ef:69:07:d1:2c:04:d7:2e:4a:4b:d3:42:31:59:cf:24:1d:e4:
db:7d:2c:15:58:e0:d2:af:92:de:ff:83:57:28:51:fe:5e:af:
43:6f:c9:8f:b7:63:75:34:c8:66:2b:ac:5b:85:88:a6:1c:c4:
ed:05:73:bb:93:5b:e7:5e:6d:81:79:12:e1:97:06:b2:ab:7d:
75:96:4b:3f:7a:ae:7c:00:c6:e9:f0:58:1c:45:b8:fe:a3:19:
28:fe:b6:c4:3d:64:cc:07:cc:a2:bb:c5:41:14:10:21:47:16:
ad:77:49:30:85:3b:ac:a6:c3:29:2b:e8:12:9e:8b:e3:15:13:
63:3c:f6:23:56:f5:18:d2:14:73:4b:11:76:06:82:5d:ea:2a:
a5:d2:92:cf:17:06:43:fe:99:db:c1:08:76:6a:13:65:25:58:
87:55:79:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4q3nc2Il2CJgUl9Nixkc8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw
ZDlkNDUwHhcNMjYwNTE1MDkwMTIzWhcNMjYwNTE2MDkwMTIzWjAzMTEwLwYDVQQD
EygzZjVlZDU1YmExMjRlNjZlOGY3MmY1ZWVkMmI0MmIxOTdhYzAxYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp27Yifv6M28fdOEBz3a5WE0u2kQx
CqcTBIvwX/DNAVL2oIr0Gl9ZE2PDgmCjQBq/b7KpNk8lAk/hqCBEEOlWMcUnz9EY
UadOe2GJ2kVRjBv66PjtaCFCbXo+U4p1WhYoQfw45WFxpwU12rnmvLSRGg07Mrbp
STcDS4Apzoik5ZRNKsuDgueGM1nR76vShyA+gV/iFpRaYtGef1UOhxAXOOEg6OmL
CwLTcHwRbQiX9zHMncEm2GAS61xfhf1+5knAQKfOUwuOkHvmBeMnpwa6vmmNVlKJ
KaUffEI7xJq8dWS7Wqq3MjglUCEMl61Jr0M8KDnJ0KW1yyAqrlLLiaysvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9e1VuhJOZuj3L17tK0Kxl6wBpGMB8GA1UdIwQY
MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt
NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi
LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPybYHtaC
LmX8wB0jqnoU1WSUWIWo3IPlgnZxkFZjagz9WtI9CTEArvdp6BE4Rg1UM/73rgLy
4wB3Cp8OVGEcQUnmRz6UOBxfWGvL46lTqIBCg7eUZA4gh2sj72kH0SwE1y5KS9NC
MVnPJB3k230sFVjg0q+S3v+DVyhR/l6vQ2/Jj7djdTTIZiusW4WIphzE7QVzu5Nb
515tgXkS4ZcGsqt9dZZLP3qufADG6fBYHEW4/qMZKP62xD1kzAfMorvFQRQQIUcW
rXdJMIU7rKbDKSvoEp6L4xUTYzz2I1b1GNIUc0sRdgaCXeoqpdKSzxcGQ/6Z28EI
dmoTZSVYh1V5gw==
-----END CERTIFICATE-----
Generated at Fri May 15 11:17:32 2026 by rpki-client