Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: KKiM5mtgD4oACHnVX9Gpc56Jc9dVjVaorIw+U7CWeOI=
Subject key identifier: AF:F2:B7:B2:31:6F:1B:3D:C8:E5:FD:5D:98:C6:6E:80:88:68:D4:2B
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019EC18011D7652D8F1FF157A39FBD90861F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0D4C
Signing time: Sat 13 Jun 2026 15:00:56 +0000
Manifest this update: Sat 13 Jun 2026 15:00:56 +0000
Manifest next update: Sun 14 Jun 2026 15:00:56 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: pHuiJ6rEEMXrvvp2XfmKbjIOng97Vjldqs2btd0WV8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:11:d7:65:2d:8f:1f:f1:57:a3:9f:bd:90:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Jun 13 15:00:56 2026 GMT
Not After : Jun 14 15:00:56 2026 GMT
Subject: CN=aff2b7b2316f1b3dc8e5fd5d98c66e808868d42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:9f:d2:7f:d9:7e:10:45:92:91:56:4e:8f:
88:2a:b6:40:ec:a4:c1:81:50:3f:b1:5d:51:1b:7a:
ac:b4:3e:97:40:8b:9e:d1:19:7d:52:e2:1d:13:49:
d5:58:38:9f:63:78:1d:86:66:40:b1:f9:11:cf:5a:
38:8d:4e:e6:19:20:7c:a5:71:16:fe:8e:b1:ba:cc:
df:de:2f:cc:e5:97:a4:04:e8:a9:cc:23:0f:cb:91:
a2:a4:25:96:81:7b:65:8b:73:1d:91:0b:1e:99:4e:
50:f5:d3:9c:40:da:04:36:3f:64:a1:80:05:cb:7f:
97:2b:ea:48:b5:54:26:33:41:a5:16:0a:74:0d:81:
0b:e2:1f:a9:bd:1a:d7:3c:46:04:fc:c2:5b:8a:8d:
cd:26:79:4d:13:aa:7b:c9:0a:0c:0b:7d:26:f4:85:
c6:c6:8a:ad:ec:60:14:dd:eb:ec:46:b6:5d:46:31:
04:96:32:84:f0:c7:63:d4:b4:32:b0:93:a4:c0:f9:
ab:b7:ce:94:16:b5:02:15:6e:44:b5:34:a3:96:c1:
c6:c5:a5:af:cc:13:2d:df:19:7c:3f:e8:90:35:9b:
c1:28:63:50:d3:25:e7:21:d0:cd:73:f0:65:a5:93:
23:b6:cb:90:a0:27:c4:19:26:6a:8b:51:2c:b3:01:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:B7:B2:31:6F:1B:3D:C8:E5:FD:5D:98:C6:6E:80:88:68:D4:2B
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:a0:90:e9:b4:6f:6a:a9:ee:b6:e5:03:4a:9d:d4:ce:90:
07:8e:8b:5c:19:82:1a:de:8d:80:e7:d9:12:29:a2:2d:1b:d1:
5c:11:e5:81:a5:66:4c:32:7a:40:46:b8:92:72:51:90:0c:6d:
d7:72:51:22:02:fd:7b:db:6c:38:16:e3:f7:5d:81:9c:36:0e:
e5:5e:db:82:63:be:33:a8:3c:ed:07:a3:bc:19:f6:99:28:df:
a3:a3:a0:dc:bb:b4:bd:22:93:09:89:1a:38:ee:d0:7e:d0:86:
d6:b6:de:59:bc:24:bf:0a:22:16:69:c6:d3:a9:a2:fe:58:4c:
fc:63:d9:5f:4e:9b:a6:ad:d1:f5:0d:2c:e7:44:b3:56:19:ce:
7b:20:b3:45:c8:44:da:31:0b:be:39:37:96:91:a2:2f:62:69:
c4:09:59:6d:0e:09:13:fd:26:3f:83:f6:42:19:41:2e:3d:f1:
20:3d:d0:57:50:c9:f9:a7:63:71:e0:df:c4:f1:e4:ea:96:ea:
e4:8a:9f:58:52:0e:dd:98:8c:c3:bf:94:ed:0c:3a:90:b8:b5:
96:8c:d9:28:3f:70:04:85:0b:e7:1d:98:c7:9c:0f:e5:c6:d8:
8e:a7:aa:16:10:56:6e:bc:cf:21:79:0e:69:3a:3d:02:72:5d:
7f:68:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:22 2026 by rpki-client