Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: dzI9XihMnaqxhMN/8u/UHOcPSeecDTLNZxy9np4utH0=
Subject key identifier: F9:B7:F8:15:04:0B:31:AD:59:AE:AE:BB:EE:CD:E1:2E:A9:A9:65:EE
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019EC29275811E0395A1950E023061724B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 20:00:38 +0000
Manifest this update: Sat 13 Jun 2026 20:00:38 +0000
Manifest next update: Sun 14 Jun 2026 20:00:38 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: SUTJJr9Zdq1zb/w09RO9HyjHPhiQoMCg1y1F27uI2eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:75:81:1e:03:95:a1:95:0e:02:30:61:72:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jun 13 20:00:38 2026 GMT
Not After : Jun 14 20:00:38 2026 GMT
Subject: CN=f9b7f815040b31ad59aeaebbeecde12ea9a965ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:a1:c6:ad:5e:98:14:9f:e4:8f:96:44:78:
48:89:7b:c8:d0:d3:bd:4c:c0:e1:fa:fc:ad:08:15:
00:e5:88:c6:90:91:2b:3e:b7:20:9d:a9:4f:e0:c6:
2c:cd:2e:01:0d:90:b1:0d:23:65:01:04:10:11:c6:
5b:3a:cf:08:8a:90:e8:29:c3:47:13:41:d3:91:61:
6f:94:61:15:29:4a:d4:20:aa:d1:3b:0f:f9:55:bc:
da:68:fb:9f:5a:cf:96:b8:18:92:0a:bc:2b:aa:01:
04:cf:81:25:6c:bd:81:fb:8f:7d:e9:9f:7d:8d:f6:
3c:0a:3e:26:0a:2c:b9:1b:ce:f7:50:1a:fb:e9:e8:
90:74:3e:db:af:e9:74:a4:5a:c1:0a:3f:89:73:dc:
fb:b8:95:f4:91:0c:e1:6c:f4:70:f4:68:f5:85:48:
d7:bd:7a:f7:7b:31:13:46:6e:fd:d4:a4:d4:f0:6a:
c9:cc:ae:02:c1:7c:1f:95:5d:34:58:8c:70:fc:1e:
e6:36:16:45:b7:5b:5f:66:f7:13:b4:a1:77:0f:46:
c4:83:40:d5:c1:5b:64:2e:7a:1e:af:bf:42:95:4e:
5e:4e:60:1e:e7:75:ef:a7:f6:a3:a0:a1:67:5a:0a:
22:35:16:02:d0:5a:ef:31:7e:52:ca:ba:b1:8f:bb:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:F8:15:04:0B:31:AD:59:AE:AE:BB:EE:CD:E1:2E:A9:A9:65:EE
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:7a:24:82:72:7b:42:64:51:b9:37:57:2b:4f:22:26:44:
a3:a4:67:da:64:56:2e:46:80:03:58:2a:63:72:1a:1b:46:f3:
81:ca:fd:be:41:26:d2:7c:eb:94:61:3e:05:3e:07:db:3c:d5:
71:0b:76:86:28:39:25:f1:7b:e6:39:93:24:21:64:08:f4:e5:
09:87:cb:13:de:77:b4:ca:de:2d:9d:4d:2c:91:63:20:3e:5d:
ee:7a:e7:47:95:22:4a:04:20:00:d7:b1:b6:b1:d7:5a:97:6d:
e5:7a:ce:76:1c:1e:d7:70:75:93:4c:bb:a0:77:8e:1f:29:54:
3f:d4:a3:19:64:7a:3f:00:e2:b6:17:b4:73:4d:bb:6d:97:21:
25:12:bb:21:48:42:b2:ef:fe:67:7f:74:c3:64:f5:21:a5:ab:
e3:02:03:61:a5:1e:d4:17:ff:e9:0a:33:66:f2:2d:ec:2e:fe:
b3:be:86:2c:74:1f:bb:b6:05:d6:f8:3f:f2:16:bb:14:d3:0d:
de:c0:9d:95:32:48:ca:1b:b3:bd:2e:3b:fc:19:f0:ed:a7:c8:
0e:75:5c:1c:92:d0:c4:19:dc:8a:61:4a:62:b6:9d:9b:be:a4:
cf:9c:a0:dc:15:90:d7:ef:02:e7:1a:10:f4:00:f1:83:5a:42:
d5:a8:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:54:47 2026 by rpki-client