Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
File: Qlp1imElK6BgMpAi_N1_U1hiD5M.mft (raw, json)
Hash identifier: z/ifa3X0QoVZ16N/U4ONTS7yYAe8QICbihEnzT8gTB8=
Subject key identifier: AF:53:5A:08:96:7A:23:C4:6D:04:BE:6C:8B:31:20:DB:46:7E:05:6A
Authority key identifier: 42:5A:75:8A:61:25:2B:A0:60:32:90:22:FC:DD:7F:53:58:62:0F:93
Certificate issuer: /CN=425a758a61252ba060329022fcdd7f5358620f93
Certificate serial: 019EB6210BEF37D939C2CB7DAB0EAD1C2417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
Manifest number: 05
Signing time: Thu 11 Jun 2026 10:01:19 +0000
Manifest this update: Thu 11 Jun 2026 10:01:19 +0000
Manifest next update: Fri 12 Jun 2026 10:01:19 +0000
Files and hashes: 1: HgjghS0TcS3sXKEDkSBK8StqoPg.roa (hash: 9Et6fejSW975AgeOObLCQ5alU9YtwwctRwBtQTF5i5g=)
2: Qlp1imElK6BgMpAi_N1_U1hiD5M.crl (hash: LnFRKQMQZnPfIzk+YwAM6wdQ+rd8pq5jP1QdtEFZXc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:21:0b:ef:37:d9:39:c2:cb:7d:ab:0e:ad:1c:24:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425a758a61252ba060329022fcdd7f5358620f93
Validity
Not Before: Jun 11 10:01:19 2026 GMT
Not After : Jun 12 10:01:19 2026 GMT
Subject: CN=af535a08967a23c46d04be6c8b3120db467e056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:2d:2e:d4:3a:a9:a5:c8:69:5f:80:21:ea:
37:77:aa:46:90:64:6b:5f:ae:a8:26:cd:e3:86:43:
8b:1a:28:67:5a:47:87:a3:84:87:a6:20:c7:c9:ca:
e8:ac:fd:2b:1c:f4:9f:27:02:98:50:25:dc:3f:35:
e0:6c:6c:83:ff:11:52:4c:b2:59:f3:3d:f3:45:8a:
57:01:2c:04:cb:de:32:39:73:51:5b:78:b4:e2:7c:
40:a9:e2:bb:80:46:c2:41:1c:12:f1:e6:96:ce:4a:
b9:70:4d:88:8b:3c:8a:00:3c:6a:40:c7:10:97:df:
16:1a:94:80:56:15:5d:6a:c5:e3:15:29:db:71:ec:
85:4a:f3:01:d8:8d:92:85:d8:9d:f8:54:09:46:63:
cb:e2:ba:99:e3:95:00:e9:36:33:30:3f:67:12:fc:
e7:ae:a9:b5:a6:c7:a1:34:33:5e:f7:40:6b:7b:cc:
84:6f:71:e5:32:19:3d:a9:a2:ef:89:36:98:73:04:
b0:00:96:b1:dd:3c:7d:03:b5:0b:7d:92:b3:24:1c:
a2:a0:1c:9c:72:5f:7f:9b:ce:7e:aa:63:79:a9:d2:
84:da:79:23:ac:68:e5:13:05:1c:ff:29:c6:49:00:
41:20:99:ac:ae:ad:fc:2a:1d:3e:c7:7f:c4:99:05:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:5A:08:96:7A:23:C4:6D:04:BE:6C:8B:31:20:DB:46:7E:05:6A
X509v3 Authority Key Identifier:
keyid:42:5A:75:8A:61:25:2B:A0:60:32:90:22:FC:DD:7F:53:58:62:0F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlp1imElK6BgMpAi_N1_U1hiD5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/Qlp1imElK6BgMpAi_N1_U1hiD5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f8:8f:52:02:dd:f3:7c:fb:9e:42:1b:05:fd:25:d4:1f:ec:
4f:ef:f8:bf:2f:a7:93:86:de:79:80:5f:3f:9b:e6:4e:bf:89:
a4:39:73:a7:91:77:a0:21:6f:6a:57:9d:77:6b:5f:47:31:c4:
bb:80:6e:2c:dc:e6:9c:ee:d5:8f:f8:2c:4c:5d:98:5e:c3:75:
3b:36:60:58:a3:0a:d5:06:4f:9e:ce:0f:52:23:4d:e0:eb:29:
67:0d:67:98:a2:7f:57:4a:42:e7:62:26:d2:7c:be:9f:f4:d4:
3c:ed:c1:22:65:b3:74:4b:a3:3f:a2:b7:de:39:5d:bc:c5:b5:
a6:cc:88:b9:77:0f:c0:25:38:96:0d:76:e2:b9:49:0f:2e:69:
f7:4b:51:16:39:2e:38:d7:4c:a5:ef:23:54:17:2a:b8:16:a2:
4e:c3:51:76:54:8f:7b:22:bf:e0:3a:94:51:c5:be:f6:aa:e8:
4f:90:57:bf:ba:54:f7:4d:f6:b9:42:99:f2:65:46:23:34:1d:
1f:0b:ea:e2:fb:d3:a2:50:f8:ab:ef:29:39:84:03:ce:e8:a7:
de:ab:f4:48:70:19:26:dd:13:d9:c6:48:72:bf:e4:7c:fc:04:
75:3d:c0:a8:bc:48:d0:26:b2:f1:56:1e:72:a5:a0:e9:24:7a:
7b:8e:65:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62IQvvN9k5wst9qw6tHCQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWE3NThhNjEyNTJiYTA2MDMyOTAyMmZjZGQ3ZjUzNTg2
MjBmOTMwHhcNMjYwNjExMTAwMTE5WhcNMjYwNjEyMTAwMTE5WjAzMTEwLwYDVQQD
EyhhZjUzNWEwODk2N2EyM2M0NmQwNGJlNmM4YjMxMjBkYjQ2N2UwNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreMtLtQ6qaXIaV+AIeo3d6pGkGRr
X66oJs3jhkOLGihnWkeHo4SHpiDHycrorP0rHPSfJwKYUCXcPzXgbGyD/xFSTLJZ
8z3zRYpXASwEy94yOXNRW3i04nxAqeK7gEbCQRwS8eaWzkq5cE2IizyKADxqQMcQ
l98WGpSAVhVdasXjFSnbceyFSvMB2I2Shdid+FQJRmPL4rqZ45UA6TYzMD9nEvzn
rqm1psehNDNe90Bre8yEb3HlMhk9qaLviTaYcwSwAJax3Tx9A7ULfZKzJByioByc
cl9/m85+qmN5qdKE2nkjrGjlEwUc/ynGSQBBIJmsrq38Kh0+x3/EmQU02QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9TWgiWeiPEbQS+bIsxINtGfgVqMB8GA1UdIwQY
MBaAFEJadYphJSugYDKQIvzdf1NYYg+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxwMWltRWxLNkJnTXBBaV9OMV9VMWhpRDVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMmIzYmMtNzI4Ny00MTkwLThlY2Ut
YTcxNzU5YWE2MzhkLzEvUWxwMWltRWxLNkJnTXBBaV9OMV9VMWhpRDVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yMmIzYmMtNzI4Ny00MTkwLThlY2UtYTcxNzU5YWE2Mzhk
LzEvUWxwMWltRWxLNkJnTXBBaV9OMV9VMWhpRDVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOviPUgLd
83z7nkIbBf0l1B/sT+/4vy+nk4beeYBfP5vmTr+JpDlzp5F3oCFvaledd2tfRzHE
u4BuLNzmnO7Vj/gsTF2YXsN1OzZgWKMK1QZPns4PUiNN4OspZw1nmKJ/V0pC52Im
0ny+n/TUPO3BImWzdEujP6K33jldvMW1psyIuXcPwCU4lg124rlJDy5p90tRFjku
ONdMpe8jVBcquBaiTsNRdlSPeyK/4DqUUcW+9qroT5BXv7pU9032uUKZ8mVGIzQd
Hwvq4vvTolD4q+8pOYQDzuin3qv0SHAZJt0T2cZIcr/kfPwEdT3AqLxI0Cay8VYe
cqWg6SR6e45l8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:34:30 2026 by rpki-client