Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: veGTaNIY84Uej8zc4RmY7YXEsUij3PN1UvFqb1kZ9oc=
Subject key identifier: FC:3A:4A:00:78:71:35:52:6F:0D:56:50:36:13:F1:C8:05:29:53:3D
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019EBFC8D8CF232AD2983EB5268EDFEEAF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 07:01:11 +0000
Manifest this update: Sat 13 Jun 2026 07:01:11 +0000
Manifest next update: Sun 14 Jun 2026 07:01:11 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: RM8N6MmiV3lRUqrE/J1AqiiEgj1SDeRCspWWfdChNwk=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:d8:cf:23:2a:d2:98:3e:b5:26:8e:df:ee:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Jun 13 07:01:11 2026 GMT
Not After : Jun 14 07:01:11 2026 GMT
Subject: CN=fc3a4a00787135526f0d56503613f1c80529533d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:90:ed:4d:02:45:aa:3c:76:69:f1:f6:d1:
7e:30:fc:79:a4:9d:54:cc:d5:d5:d9:d7:e4:93:35:
59:29:e5:39:45:7e:0f:71:a5:7a:4c:a2:a5:6d:53:
a4:cf:8d:bc:08:96:1c:f7:94:55:3f:87:79:c3:f8:
24:37:05:8f:88:3b:6e:20:44:fa:83:25:a9:b8:b1:
36:bf:30:86:ec:91:96:36:27:5c:f8:12:e0:e7:7c:
e3:10:59:eb:16:45:42:65:a6:29:bb:f7:0f:43:d7:
87:b0:2d:b7:ca:ae:1f:49:4b:a9:50:9f:c9:d3:fb:
81:ee:bc:de:0c:15:2e:1c:37:0b:e0:06:f2:04:45:
0f:84:da:69:fe:c7:03:a1:10:20:a2:56:6e:ae:aa:
f1:36:60:46:2f:18:5f:21:c3:c0:5e:28:30:fb:42:
c2:bc:cd:e3:99:9e:70:30:85:43:8c:74:28:75:99:
df:b2:47:40:bf:34:82:7c:e6:66:8e:be:c8:1b:78:
3a:cd:f2:05:05:a8:65:1f:50:48:77:ff:1d:a6:3c:
b4:27:d3:7a:67:4a:0e:d9:f3:f8:8a:c2:b6:d6:8a:
e2:f9:9b:f3:6c:6b:f8:41:81:c6:5f:aa:be:d1:ae:
65:40:a1:24:49:9b:f6:f6:73:d3:4f:59:43:2e:73:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:4A:00:78:71:35:52:6F:0D:56:50:36:13:F1:C8:05:29:53:3D
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:18:96:5b:c3:bc:ee:9e:f6:b2:64:d1:17:f7:d9:4d:96:
e6:c8:e0:c2:d3:b4:fd:61:8e:0a:fb:aa:f0:f6:d8:6a:df:99:
10:84:fe:79:e3:f0:a2:76:cd:03:dd:c4:01:ce:1b:3d:fb:a5:
d8:5d:00:a6:8d:15:89:93:61:69:01:e8:ad:ad:c9:c5:09:7b:
87:e7:37:a2:09:c3:df:fa:a7:3d:af:84:ed:4c:6e:21:c4:42:
41:36:84:66:d1:6f:af:21:8c:74:c1:ff:6f:84:a8:bb:7e:d5:
8a:fb:18:08:6b:87:0a:75:d0:4e:ee:fd:69:69:f2:8b:fe:1e:
18:9b:30:07:74:8d:6a:a2:a4:82:9c:77:ab:bf:0c:2e:d0:9c:
25:1c:20:60:60:05:1c:49:6b:6a:14:34:bf:79:e5:cc:e5:6c:
64:d8:ea:79:df:9d:07:9e:09:51:5f:67:12:9b:ab:2f:5a:c2:
fc:ac:4a:3e:c7:15:35:78:a1:29:41:b1:32:06:0f:73:23:08:
28:43:6a:56:c9:0a:8a:e0:f2:6d:38:4c:46:63:21:a0:0b:8c:
64:97:32:55:04:17:42:75:6b:d4:2a:80:f4:67:41:52:d6:0f:
2c:89:b3:3d:20:93:fa:8c:b4:74:a8:26:f5:45:b5:3c:32:9a:
96:89:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:27 2026 by rpki-client