Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: 89nQChQAWorOjEcuauWF7KEar7lDQWOk+EZEMD450uA=
Subject key identifier: 50:3C:5B:AF:2C:E3:A0:7D:7E:8F:03:B2:A4:0C:A9:07:63:47:59:81
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019EC30005262A11F989006D79DD30315453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 03D4
Signing time: Sat 13 Jun 2026 22:00:18 +0000
Manifest this update: Sat 13 Jun 2026 22:00:18 +0000
Manifest next update: Sun 14 Jun 2026 22:00:18 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: RovsICCZI5QVH3fEFtLltg0ekmnhcK42rliUyFgTjso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:05:26:2a:11:f9:89:00:6d:79:dd:30:31:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jun 13 22:00:18 2026 GMT
Not After : Jun 14 22:00:18 2026 GMT
Subject: CN=503c5baf2ce3a07d7e8f03b2a40ca90763475981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:be:ce:c8:7b:d8:d6:fd:c8:5e:58:ba:65:
3c:e9:9a:15:69:9e:f7:1f:0e:8f:10:a3:3d:00:e7:
ae:34:e5:bb:3b:e4:c4:b4:fa:78:86:77:6a:fa:cb:
1e:ae:50:89:f2:78:50:1a:17:bc:80:20:c0:db:0a:
5e:1a:45:b9:52:48:83:08:78:e8:91:dd:a7:7c:c9:
9a:66:3e:70:53:47:63:d0:3d:8d:c0:aa:1b:1f:5e:
ab:26:53:40:ec:ea:1b:a4:cd:04:f5:ce:92:5e:2a:
43:71:89:5a:b5:89:dc:5e:d6:2a:6b:a6:1b:c3:97:
01:6c:63:55:73:00:62:43:01:97:cf:ef:96:a5:8a:
0c:29:0a:90:3e:a8:04:51:75:d4:ac:76:8f:68:8e:
aa:f2:ae:4e:3e:8a:30:49:a8:37:cf:64:dd:0c:d7:
fe:3a:88:8c:0d:ca:4a:f4:96:81:80:8c:e2:58:bd:
93:59:df:5c:a7:f7:0b:ec:ad:50:35:8c:4c:a1:30:
73:b5:96:05:51:1d:47:3c:d7:10:33:97:f8:ec:20:
a1:94:35:05:50:e8:d2:68:64:14:f8:5d:0f:10:53:
8e:87:a7:c6:ae:e3:b3:ec:88:fa:94:81:e0:55:25:
e1:07:45:b5:95:92:97:b3:6c:92:75:da:9b:75:d3:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:5B:AF:2C:E3:A0:7D:7E:8F:03:B2:A4:0C:A9:07:63:47:59:81
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:d2:7b:2b:7a:58:f9:18:29:22:d0:54:2c:34:3a:18:03:
8a:eb:74:ff:4c:de:d2:f6:82:9e:a6:0e:59:d3:ca:f4:f4:8b:
fb:5b:6e:3e:51:6a:e4:53:3f:f1:98:6a:0b:01:f0:78:22:59:
18:45:73:1f:6c:f0:6e:86:65:2c:82:51:e2:c6:e9:91:87:53:
84:73:e9:ba:b5:4f:0d:52:eb:90:25:46:96:f7:7f:26:19:32:
db:02:08:8b:1f:a9:49:f1:20:29:39:c2:4a:6d:eb:d7:31:cc:
f9:7a:3e:81:3b:ff:0f:40:c8:4a:88:b3:3e:54:e3:ab:85:9f:
ad:1f:35:d5:d2:4a:70:d5:a7:39:76:5c:62:7a:3b:a6:66:b4:
2a:e1:1c:c0:6c:bf:53:ca:64:91:6b:8a:3a:8c:50:45:ab:84:
14:16:47:fa:24:0e:d1:a6:5c:2d:ba:ec:9c:70:5a:2b:05:0b:
b3:c2:4f:d0:12:d3:c9:b9:98:94:74:4d:c6:50:45:27:38:42:
85:43:c5:db:52:37:7a:68:5c:cd:b9:34:0b:6f:ce:e1:8f:c1:
fc:4b:e8:f9:e7:3b:9d:22:3a:7a:04:e8:92:2d:0f:d6:2a:d1:
14:1d:2c:5b:24:10:2c:96:20:b7:fa:8a:a6:bb:de:f4:9d:28:
1c:bc:b4:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAAUmKhH5iQBted0wMVRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1
NWY2NGIwHhcNMjYwNjEzMjIwMDE4WhcNMjYwNjE0MjIwMDE4WjAzMTEwLwYDVQQD
Eyg1MDNjNWJhZjJjZTNhMDdkN2U4ZjAzYjJhNDBjYTkwNzYzNDc1OTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+2+zsh72Nb9yF5YumU86ZoVaZ73
Hw6PEKM9AOeuNOW7O+TEtPp4hndq+sserlCJ8nhQGhe8gCDA2wpeGkW5UkiDCHjo
kd2nfMmaZj5wU0dj0D2NwKobH16rJlNA7OobpM0E9c6SXipDcYlatYncXtYqa6Yb
w5cBbGNVcwBiQwGXz++WpYoMKQqQPqgEUXXUrHaPaI6q8q5OPoowSag3z2TdDNf+
OoiMDcpK9JaBgIziWL2TWd9cp/cL7K1QNYxMoTBztZYFUR1HPNcQM5f47CChlDUF
UOjSaGQU+F0PEFOOh6fGruOz7Ij6lIHgVSXhB0W1lZKXs2ySddqbddMXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA8W68s46B9fo8DsqQMqQdjR1mBMB8GA1UdIwQY
MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt
M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz
LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpTSeyt6
WPkYKSLQVCw0OhgDiut0/0ze0vaCnqYOWdPK9PSL+1tuPlFq5FM/8ZhqCwHweCJZ
GEVzH2zwboZlLIJR4sbpkYdThHPpurVPDVLrkCVGlvd/Jhky2wIIix+pSfEgKTnC
Sm3r1zHM+Xo+gTv/D0DISoizPlTjq4WfrR811dJKcNWnOXZcYno7pma0KuEcwGy/
U8pkkWuKOoxQRauEFBZH+iQO0aZcLbrsnHBaKwULs8JP0BLTybmYlHRNxlBFJzhC
hUPF21I3emhczbk0C2/O4Y/B/Evo+ec7nSI6egToki0P1irRFB0sWyQQLJYgt/qK
prve9J0oHLy0QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:56:55 2026 by rpki-client