Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
File: qpzqolwClcyPY42qbWT3Ii9rCS8.mft (raw, json)
Hash identifier: NS0GmkDTRORmz+V64vgCegnCokLC2bcnRlP0SozEqkE=
Subject key identifier: 99:16:63:0D:2C:0E:80:51:52:35:DA:85:A7:D6:A4:6E:AB:12:07:AC
Authority key identifier: AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
Certificate issuer: /CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Certificate serial: 019E31174E2B31D08FF15BC8917783173322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
Manifest number: DC
Signing time: Sat 16 May 2026 14:01:11 +0000
Manifest this update: Sat 16 May 2026 14:01:11 +0000
Manifest next update: Sun 17 May 2026 14:01:11 +0000
Files and hashes: 1: 5yQDORsjAc2qkrpGb2sFa87WdeQ.roa (hash: 6lWA3h6svKzAnLIBjtQj55IORN1aTf/i5R1xbiHi7hA=)
2: YR0KezbAbuwIwjhj2avNGcLc02U.roa (hash: rah4d1f8WB0+ik2fE3EWyLXPHfSge2y2R4kVqT1hjgw=)
3: qpzqolwClcyPY42qbWT3Ii9rCS8.crl (hash: ZfnF7WqlKtQdFckOqanvj6PdXFk6UwKF0z4oXKKEuHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:4e:2b:31:d0:8f:f1:5b:c8:91:77:83:17:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Validity
Not Before: May 16 14:01:11 2026 GMT
Not After : May 17 14:01:11 2026 GMT
Subject: CN=9916630d2c0e80515235da85a7d6a46eab1207ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:67:a3:a5:8e:2c:7d:b1:09:01:c2:dc:9d:
e5:68:69:4e:6b:72:46:86:ee:f9:42:49:c3:17:fe:
da:d9:10:52:da:ab:22:07:74:ff:a4:46:d0:8c:e9:
69:ab:d5:0b:a3:0b:8c:24:78:d4:fa:2b:f9:93:29:
2a:15:35:6b:03:4c:67:7f:cd:8c:d3:19:63:4c:00:
52:58:3f:2b:ac:a1:d5:5b:c3:5e:f3:97:15:7c:43:
28:0b:77:e7:24:06:1f:98:5f:34:48:57:5f:76:e4:
6c:99:31:bb:cf:6a:91:a4:a9:8c:96:db:df:c5:a6:
04:5a:71:be:38:16:83:0a:29:de:01:73:20:35:e0:
c9:dc:13:5a:36:17:fc:15:63:68:29:64:3a:3c:ab:
ed:9f:2c:ff:52:bc:35:eb:51:7f:88:dd:3f:18:c1:
6a:62:3e:eb:57:a1:02:93:09:fa:0d:81:55:34:7e:
f8:7f:c9:09:3e:bf:c0:40:6d:16:57:d1:f1:f8:1a:
32:70:05:91:d6:7b:d5:7c:a7:67:d4:69:2a:65:70:
40:02:ef:c1:0e:59:1e:29:cc:36:c7:77:91:e9:1b:
c4:08:27:45:55:51:9d:80:85:a6:3f:6b:79:4c:68:
ed:5d:16:c3:9a:33:a4:f8:a9:a5:eb:c9:95:12:a9:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:63:0D:2C:0E:80:51:52:35:DA:85:A7:D6:A4:6E:AB:12:07:AC
X509v3 Authority Key Identifier:
keyid:AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5b:02:5d:49:7e:be:1b:ef:c0:bc:40:95:93:23:9a:dc:3d:
66:b5:19:bb:16:73:5f:0c:c8:a6:32:08:f2:88:a4:08:c2:91:
56:54:08:11:c0:76:86:d6:8e:70:55:8a:c1:20:01:20:c8:d1:
dc:97:17:14:5a:55:b6:b8:9c:9a:9c:06:90:4a:47:07:8e:b6:
31:96:6a:96:f5:e6:89:bd:fa:27:7c:0e:1f:2d:b6:72:1e:5f:
89:9c:5a:57:eb:7f:67:dd:d0:80:4f:10:83:69:c9:4b:2c:bc:
f3:ae:38:ea:ff:02:52:09:22:37:75:af:5d:1f:85:cc:35:57:
34:97:5e:b1:7a:88:64:5b:b8:e8:e5:e2:1f:29:e1:2d:e7:91:
65:af:eb:14:6a:38:34:b2:c4:56:5c:58:f2:90:82:08:89:11:
f5:94:70:57:70:1b:87:ed:e2:c8:88:8d:ae:34:44:6f:7c:1f:
03:be:8e:af:03:a5:68:80:71:13:60:08:db:5c:a7:01:d4:e0:
ac:46:5c:66:37:70:58:cd:e1:58:39:59:89:44:1a:57:b9:e3:
46:97:7a:96:fa:43:33:c6:a9:67:2a:06:a5:78:dd:19:40:1c:
d7:27:ec:cc:c0:e4:97:9f:6f:ec:4a:68:4c:d8:ab:fd:c4:04:
1b:5e:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:41 2026 by rpki-client