Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: Ojb10SDyuY80SaPNShEpg6cwG/RGubvoLoDMHBgPgQw=
Subject key identifier: 54:77:FA:E3:30:34:A6:78:74:FF:79:55:49:8E:40:2C:B8:78:F8:D6
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019DE25777480D112064B6F112D9397FA13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 0337
Signing time: Fri 01 May 2026 07:01:16 +0000
Manifest this update: Fri 01 May 2026 07:01:16 +0000
Manifest next update: Sat 02 May 2026 07:01:16 +0000
Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=)
2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: VQxsMk8QrUw7RpmNlfIeg18V6KL6RBFQcSJkV1JYeDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:57:77:48:0d:11:20:64:b6:f1:12:d9:39:7f:a1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: May 1 07:01:16 2026 GMT
Not After : May 2 07:01:16 2026 GMT
Subject: CN=5477fae33034a67874ff7955498e402cb878f8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:ff:3c:35:a4:5c:60:ca:0a:97:89:e1:e1:
00:c9:49:71:85:c7:2e:8f:4e:1e:79:bd:d9:28:3c:
09:f4:95:b0:9a:ca:68:52:d8:17:50:7e:5a:4a:fe:
37:04:01:4b:ac:03:40:ed:25:e9:24:a2:30:ee:85:
8e:78:8f:13:83:19:7e:2f:fd:1d:fb:4c:75:22:57:
92:83:87:d4:d6:c6:b7:61:8d:e3:7d:72:1c:d6:0e:
8b:98:51:53:a3:85:52:6c:a6:e9:9b:c6:c8:fe:e7:
7f:35:30:49:2d:08:40:a9:23:8d:57:0a:da:2e:ee:
bf:fa:9f:ff:40:1a:ef:bd:e7:83:90:b5:ec:38:1f:
ac:78:09:f0:a4:14:fb:7e:5a:2a:d5:40:06:22:2e:
9c:39:20:09:0e:f8:27:f5:29:a5:6b:23:2c:80:8d:
84:8b:04:29:ef:05:e1:e2:b3:b6:f7:a1:85:3f:f8:
d9:7d:73:b4:31:6c:5a:14:2d:e0:65:fa:17:c2:c2:
a6:e9:a8:a9:38:fd:47:b8:d6:ce:bf:fb:1d:8e:c1:
22:c7:48:4e:00:dc:43:aa:d6:9d:df:01:94:d2:f9:
5c:cf:08:05:1b:37:ac:90:2f:85:a8:d7:95:d6:25:
99:b1:c6:5f:cf:9b:8f:a8:1f:87:ac:15:b4:83:6c:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:FA:E3:30:34:A6:78:74:FF:79:55:49:8E:40:2C:B8:78:F8:D6
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:82:50:23:b7:3c:f9:63:7a:83:44:e8:2f:88:bc:ba:9f:a8:
6b:bb:ce:b2:e4:a1:8a:31:24:e5:3b:05:f5:c0:fe:64:e0:60:
83:81:34:d5:f2:38:22:df:a0:9d:40:ed:b7:45:da:d6:7d:57:
91:c8:6b:3d:8b:10:4d:23:3b:af:4b:e8:86:92:f3:10:4f:ff:
e7:b9:ed:d2:dd:0f:de:a9:df:41:e9:8e:56:db:15:ee:d7:4e:
1a:99:7f:1b:f1:11:82:01:d4:d5:73:c0:10:f5:5a:38:bb:11:
40:31:2c:ef:75:5b:79:d4:ec:ef:bd:10:6d:71:8b:61:b2:35:
26:b7:25:9c:81:fa:ed:18:42:d9:29:ed:f4:71:ae:26:ea:e1:
8e:d8:04:57:4e:bb:14:32:1c:c1:d1:af:9b:ce:a2:d4:d9:e1:
c4:6e:6f:4d:d1:76:73:b3:19:2a:40:da:13:19:b1:d8:ce:2d:
67:00:4a:d9:4f:08:59:50:57:b2:ac:df:42:fd:9f:8e:57:1e:
c1:15:9e:d2:ff:27:4d:70:66:42:68:76:51:f6:8d:b8:24:77:
7b:9a:6c:d5:e0:e1:61:ba:ad:13:91:b4:4d:f5:0d:7b:94:35:
c7:7d:dd:15:e1:01:9f:8b:6e:6f:79:9e:c4:5d:7e:14:5b:d2:
70:94:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 10:20:39 2026 by rpki-client