Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: wDSc7Gi3cJj7SaAindYX88YIuAJ2CoZbJs5iKVdVDaA=
Subject key identifier: B0:7D:CF:2D:A0:BE:1C:61:38:64:0C:AC:BE:A8:C7:EB:FA:C6:84:6D
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019DCC7459F47AC74A0180FCE1C20F04112C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 11F9
Signing time: Mon 27 Apr 2026 01:01:10 +0000
Manifest this update: Mon 27 Apr 2026 01:01:10 +0000
Manifest next update: Tue 28 Apr 2026 01:01:10 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: OYLiakjWnUhi/gy2PoiKBDEYRx28tZwQm1isNYyiHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:59:f4:7a:c7:4a:01:80:fc:e1:c2:0f:04:11:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Apr 27 01:01:10 2026 GMT
Not After : Apr 28 01:01:10 2026 GMT
Subject: CN=b07dcf2da0be1c6138640cacbea8c7ebfac6846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:3b:20:90:2d:17:8d:0d:e5:d4:27:26:d4:
74:3c:2b:80:55:7f:ea:f7:f9:b4:db:ea:ac:b3:b9:
f9:dd:b0:ff:4d:e1:e2:30:98:9e:08:b5:2e:e4:74:
45:29:60:38:92:8b:99:63:30:de:32:dc:b4:eb:3f:
d9:8b:27:98:74:83:84:6a:6c:12:ab:b1:69:81:be:
4d:97:04:a9:6c:5b:b4:30:f3:52:e2:76:87:b5:d4:
02:5d:f5:eb:3c:dc:b5:70:9a:b7:b3:c8:88:99:40:
fb:7e:94:b5:a3:89:33:13:06:0c:fe:eb:be:4f:b9:
27:1c:5b:28:a0:78:f2:88:a4:72:5b:e5:15:e8:df:
9e:e8:24:df:56:15:d2:c0:f7:a9:6b:cc:b8:d8:6d:
51:96:c3:37:99:ad:01:15:ad:e3:ae:d7:79:de:28:
72:0e:af:6e:34:ec:21:f5:ad:62:a7:2a:e2:72:bb:
66:d0:4d:64:e7:3b:42:9f:90:61:fb:79:8b:87:c5:
9d:23:52:61:ca:1b:4a:67:d3:63:b9:16:54:42:93:
99:50:46:ca:8d:e1:81:5a:a7:87:a9:94:25:e4:3a:
9f:07:02:47:22:2b:33:d7:53:eb:e5:e1:13:f5:13:
a2:12:32:89:3a:b2:26:f3:22:b0:26:a6:3f:99:83:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:CF:2D:A0:BE:1C:61:38:64:0C:AC:BE:A8:C7:EB:FA:C6:84:6D
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ff:1e:4f:d8:a5:87:64:9a:e0:0b:0e:cf:c2:6a:8e:1b:99:
fa:5c:fa:9d:18:26:b5:95:43:f8:5b:9c:95:ce:74:92:e4:6d:
6f:12:2d:99:6c:56:a1:87:9e:69:53:85:1d:49:d6:17:71:c8:
98:b6:09:c5:23:8b:63:11:ec:75:02:e9:51:11:b9:10:f0:fc:
bd:c0:d8:bc:6e:3b:a4:8e:f7:e7:f2:a1:81:d2:e2:30:22:e7:
9c:b0:49:97:99:df:68:e1:97:19:04:86:7d:59:68:1e:12:db:
e5:40:9a:9d:38:35:8d:51:29:e5:51:d2:54:74:fd:56:c1:61:
c5:65:96:7d:6b:7c:1d:b1:93:60:9c:88:89:63:8b:de:d8:09:
f3:0d:87:23:8a:9a:09:b7:cf:4b:14:04:9d:8c:ba:25:96:45:
4f:71:a4:bc:d1:ca:3a:be:62:c5:c3:ff:05:d5:e4:b5:85:26:
b2:3f:d2:9b:47:5f:9f:8d:b4:2a:26:02:40:ad:78:8f:cb:0b:
eb:da:32:19:60:34:a1:43:f8:01:82:69:d1:c7:65:ec:6c:64:
ed:7a:29:0f:6e:80:6f:7d:b4:22:80:3b:1d:2c:a7:e3:c4:fb:
3f:25:16:ea:a8:a7:10:30:8c:e9:7d:06:55:34:0c:f0:c7:24:
52:eb:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:10 2026 by rpki-client