Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: aaDYFc2LohXwV9X0HT94Z3mldRvFDhTZQV6ghexKcxY=
Subject key identifier: 4A:30:FE:C9:79:AF:68:89:86:A3:DE:B0:E5:56:71:DA:94:E9:1A:E7
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 019E2926B6A7FEC5E170DA3157A75D6DBF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: 9E
Signing time: Fri 15 May 2026 01:01:03 +0000
Manifest this update: Fri 15 May 2026 01:01:03 +0000
Manifest next update: Sat 16 May 2026 01:01:03 +0000
Files and hashes: 1: f-tD8eTfmg96rXItlzB5NU95HTc.asa (hash: dsO4U94ntj0LR9lV9Plk0cr+ZXf5ETUXO5D2F4wmKsI=)
2: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: GbrsaB9m2Xb56v0THh5dZrqkKW3u5Ga1eLsDiW/xSbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:b6:a7:fe:c5:e1:70:da:31:57:a7:5d:6d:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: May 15 01:01:03 2026 GMT
Not After : May 16 01:01:03 2026 GMT
Subject: CN=4a30fec979af688986a3deb0e55671da94e91ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:42:91:4a:41:00:ef:46:e4:56:b5:aa:0d:
6e:8e:be:e1:da:51:3a:ab:2e:17:05:09:4d:57:83:
14:ba:e2:28:76:1c:f2:51:88:c0:30:ce:6e:66:9a:
ec:98:38:47:f4:06:a6:db:9a:64:73:e5:01:b2:52:
2c:66:06:7e:13:fc:ed:b0:17:b7:2b:94:0b:fc:50:
b0:d1:40:a3:37:54:2f:b5:d2:8c:24:45:b7:82:bd:
ee:f3:7a:54:aa:5f:19:87:10:36:80:25:86:6d:e7:
b2:16:45:50:c2:ee:72:37:91:f8:1b:2d:a6:66:cc:
81:52:35:3f:6e:bb:d9:44:19:5f:f6:2e:33:56:a5:
78:21:a9:45:e1:50:50:96:61:55:78:c8:70:f7:66:
42:de:9d:ee:dc:05:c0:c2:27:49:77:e1:ac:4e:8e:
7e:c7:e1:46:ca:d1:dd:e5:34:ac:1c:13:74:95:77:
7e:09:0e:4d:7d:d1:f8:3e:28:20:70:2e:04:ec:77:
27:c5:59:c0:da:b0:a5:70:ab:86:52:f4:92:17:e2:
60:56:08:4e:22:77:ae:50:05:e8:9f:fd:0d:97:68:
43:83:4b:41:ab:5d:12:ee:29:fd:c8:30:71:85:36:
7a:36:9c:6b:80:40:f2:e4:1a:bc:03:85:6c:a6:61:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:FE:C9:79:AF:68:89:86:A3:DE:B0:E5:56:71:DA:94:E9:1A:E7
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:54:c1:39:57:9f:63:fb:76:7d:19:fc:52:3d:b0:f2:2f:6c:
72:03:d5:67:c7:57:7a:f8:1b:e7:10:9a:3b:39:18:f3:9e:4e:
3d:73:90:bb:8e:5b:a8:ba:27:34:5a:fc:b0:e6:82:ba:4b:e4:
7b:30:55:3a:91:83:c3:8c:a7:65:b0:33:3d:23:b4:34:14:d5:
39:2e:28:bb:39:17:f9:c5:1a:d8:62:0b:3a:e8:78:8a:be:88:
a9:91:53:88:15:79:f2:1a:8e:89:6d:fa:c4:aa:e1:eb:03:f0:
8e:e0:a4:c4:b2:0b:30:d7:e8:40:23:b1:57:bc:ae:5a:e1:76:
21:16:e8:ec:af:34:b7:0d:51:43:07:f2:5b:ce:4c:87:e3:46:
09:d1:c4:54:0f:cd:ae:36:04:10:77:57:ea:ba:57:28:b4:be:
91:39:1a:06:af:75:d3:0e:1f:08:a1:13:ef:c5:bd:48:7c:50:
56:c2:e6:e2:78:72:c6:fe:de:da:a9:4c:1a:31:93:32:7c:f4:
5f:a7:72:f3:e1:6f:97:a3:21:7a:e5:cc:0a:26:fd:42:df:2f:
98:43:07:13:39:40:21:81:8e:ca:18:9c:c6:de:be:e8:37:60:
83:63:22:9a:f7:8d:54:e7:c0:61:bc:f7:0c:9e:8a:c4:ee:2e:
f6:cb:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:01 2026 by rpki-client