Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: CcFMWlQ7Ze1eez9M198KblBc8twMuCnb2GNCgpHUelc=
Subject key identifier: 52:FA:B1:83:97:2D:B1:30:E8:31:5B:51:22:CF:0D:2F:EC:70:6B:A0
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019EC180167ECADFA684BABE36AAFB4039FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 15:00:57 +0000
Manifest this update: Sat 13 Jun 2026 15:00:57 +0000
Manifest next update: Sun 14 Jun 2026 15:00:57 +0000
Files and hashes: 1: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (hash: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: P3pIGmBtDmAbIpqEJMtCFLzDRvYFWhtcf4ptyGZ7XBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:16:7e:ca:df:a6:84:ba:be:36:aa:fb:40:39:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jun 13 15:00:57 2026 GMT
Not After : Jun 14 15:00:57 2026 GMT
Subject: CN=52fab183972db130e8315b5122cf0d2fec706ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:5b:95:c9:d3:4f:af:cb:05:4b:a1:32:c3:
1f:0e:80:5f:c3:8f:20:eb:dc:6c:3d:19:3f:2e:71:
06:62:77:6c:22:46:a1:ef:1e:37:d8:34:0e:7c:ca:
2d:9c:34:02:e8:f9:39:3d:b4:c2:50:9a:df:93:04:
60:df:ea:98:7d:9d:5a:77:9e:85:2f:a8:4d:1e:e8:
ba:4b:d7:17:4b:70:15:6d:9d:7f:0b:a8:5a:38:a7:
7f:97:22:9d:f2:59:b0:8a:e2:46:0e:c8:87:aa:45:
ce:5d:c5:a9:2f:f5:0e:68:f3:a2:14:b3:e7:4d:95:
ad:2b:b7:68:4a:5e:29:b1:18:c9:41:0a:c5:bb:89:
6e:c4:36:6a:67:37:da:1d:fa:d8:e5:f3:e0:b4:cf:
fa:14:7d:dc:d9:a2:c2:0e:55:48:58:e0:a3:69:ce:
c9:79:64:e9:91:1f:a8:51:6c:7b:25:29:62:70:36:
02:98:e7:a8:fd:cc:49:49:52:56:fd:32:96:ea:1c:
cf:73:c1:47:72:07:24:88:61:cc:83:3f:1d:7d:4e:
c0:d2:71:d2:d5:86:8d:9d:5b:0b:9a:a8:c5:b1:1e:
ab:89:1a:03:64:72:ee:2e:fc:92:65:18:b8:2f:0c:
92:b3:0e:57:b9:b7:bd:2b:20:2b:c6:fe:c3:ab:c5:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:B1:83:97:2D:B1:30:E8:31:5B:51:22:CF:0D:2F:EC:70:6B:A0
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:66:d7:5e:1f:db:c5:71:0f:e0:bc:59:8f:bc:b8:70:53:
f5:54:6c:df:a3:81:db:24:2b:8e:e7:2b:2b:10:e5:c3:5e:01:
5c:ef:ab:ae:2d:17:ad:25:83:fa:8b:7b:a7:5f:8b:55:dc:4f:
c6:83:03:42:f0:8e:b7:03:64:27:51:41:fc:25:38:07:5b:bf:
fb:3e:aa:34:d9:bd:b5:f0:3a:7e:5e:bc:5a:9f:08:50:45:45:
d8:f9:c1:d1:fe:62:05:98:a4:c3:d3:d4:53:21:d7:3e:da:61:
c2:ec:c1:4b:c8:f9:ef:d7:89:13:9b:96:10:0a:4f:73:43:b1:
6f:00:7f:43:0c:d7:db:8b:94:f2:33:13:a0:db:c8:ca:69:8d:
6e:67:e0:a9:ce:c7:38:4e:e0:c0:82:c4:63:c2:0e:73:5f:00:
b3:69:3f:c3:99:42:e8:c7:1b:92:52:8c:70:a8:2e:d4:26:8a:
23:67:a3:cc:08:43:32:51:80:3a:46:9a:97:c0:3f:b8:03:33:
20:20:ae:a5:d6:42:c1:ef:b8:db:2a:1c:8b:cd:c0:d5:2f:8d:
66:bd:8f:d7:d3:91:58:c7:db:30:14:90:28:18:75:c2:35:56:
3b:8d:d1:95:62:19:d7:b1:85:4c:f7:02:bc:52:ee:70:68:1d:
89:d2:f6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgBZ+yt+mhLq+Nqr7QDn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi
MjhkNzUwHhcNMjYwNjEzMTUwMDU3WhcNMjYwNjE0MTUwMDU3WjAzMTEwLwYDVQQD
Eyg1MmZhYjE4Mzk3MmRiMTMwZTgzMTViNTEyMmNmMGQyZmVjNzA2YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhZblcnTT6/LBUuhMsMfDoBfw48g
69xsPRk/LnEGYndsIkah7x432DQOfMotnDQC6Pk5PbTCUJrfkwRg3+qYfZ1ad56F
L6hNHui6S9cXS3AVbZ1/C6haOKd/lyKd8lmwiuJGDsiHqkXOXcWpL/UOaPOiFLPn
TZWtK7doSl4psRjJQQrFu4luxDZqZzfaHfrY5fPgtM/6FH3c2aLCDlVIWOCjac7J
eWTpkR+oUWx7JSlicDYCmOeo/cxJSVJW/TKW6hzPc8FHcgckiGHMgz8dfU7A0nHS
1YaNnVsLmqjFsR6riRoDZHLuLvySZRi4LwySsw5Xube9KyArxv7Dq8XQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL6sYOXLbEw6DFbUSLPDS/scGugMB8GA1UdIwQY
MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt
YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3
LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiChm114f
28VxD+C8WY+8uHBT9VRs36OB2yQrjucrKxDlw14BXO+rri0XrSWD+ot7p1+LVdxP
xoMDQvCOtwNkJ1FB/CU4B1u/+z6qNNm9tfA6fl68Wp8IUEVF2PnB0f5iBZikw9PU
UyHXPtphwuzBS8j579eJE5uWEApPc0OxbwB/QwzX24uU8jMToNvIymmNbmfgqc7H
OE7gwILEY8IOc18As2k/w5lC6McbklKMcKgu1CaKI2ejzAhDMlGAOkaal8A/uAMz
ICCupdZCwe+42yoci83A1S+NZr2P19ORWMfbMBSQKBh1wjVWO43RlWIZ17GFTPcC
vFLucGgdidL2/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:01 2026 by rpki-client