Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
File: RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft (raw, json)
Hash identifier: yTXD8wplvzxxKEF3XQR+Wpgi0m6+tVMlRL1Jj7fSW+0=
Subject key identifier: F0:5E:4C:AF:98:CA:6E:F3:2E:F3:6A:17:7C:6A:BE:EA:DC:80:F6:A3
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 019EBFC8F54FF87C766518161E41434B0847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
Manifest number: A1
Signing time: Sat 13 Jun 2026 07:01:18 +0000
Manifest this update: Sat 13 Jun 2026 07:01:18 +0000
Manifest next update: Sun 14 Jun 2026 07:01:18 +0000
Files and hashes: 1: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (hash: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=)
2: Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (hash: 6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=)
3: RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl (hash: YOjOtDe4okwaL/7mf5qwxtPO4ejUdiYgAFEvUYhWSlI=)
4: Rmzfw1Pn6oVl0YpHmqW6MW62cKY.roa (hash: ez1Yu6hc8zQKp0+BPfF1FCgIwY7OKVfVqthIubkAHaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f5:4f:f8:7c:76:65:18:16:1e:41:43:4b:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: Jun 13 07:01:18 2026 GMT
Not After : Jun 14 07:01:18 2026 GMT
Subject: CN=f05e4caf98ca6ef32ef36a177c6abeeadc80f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:76:cc:92:ea:aa:5c:6a:b1:e1:5d:91:93:
2d:4b:d6:d0:c4:b7:ce:d9:1e:d6:ed:98:22:2a:cf:
0a:15:cd:3b:58:b3:21:29:83:f8:fb:c2:28:ad:f6:
56:5a:06:d9:26:8f:cf:9e:90:1d:fc:d7:df:be:85:
72:42:5f:86:76:86:b7:85:3a:82:53:cb:f0:4e:6f:
db:fb:9f:e1:00:55:ec:27:00:cd:04:bd:a5:ea:5c:
3c:68:36:96:b1:ed:77:35:4f:2a:4a:95:75:d6:59:
67:0b:97:39:33:2e:08:7d:3c:67:4d:1a:d2:21:61:
0b:29:aa:f8:3d:4e:88:a0:db:9f:3c:e8:52:e6:e3:
44:2a:0c:b7:be:54:a6:59:27:bd:d8:2c:e1:23:43:
44:37:85:9e:dd:b7:fe:10:ee:25:d0:34:da:28:55:
e0:f1:56:f4:e3:02:b5:06:09:40:03:33:e0:b1:e0:
1c:54:64:8e:ec:de:4e:42:dc:78:da:bd:a9:8a:7f:
ba:4a:3c:2b:45:1f:97:55:17:2d:f1:c4:57:1b:c9:
c3:fe:b2:04:d1:08:ff:a1:be:33:76:be:f8:63:04:
19:e5:20:b1:ff:03:13:f9:36:a0:33:02:e9:e8:6a:
f8:d5:2c:90:70:7d:29:4b:74:20:7d:d4:7d:c3:cf:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5E:4C:AF:98:CA:6E:F3:2E:F3:6A:17:7C:6A:BE:EA:DC:80:F6:A3
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:ea:e8:e0:5e:02:a5:d2:19:95:88:6d:31:fa:4c:df:22:
42:f0:62:90:d5:2d:5a:0a:d7:90:a1:09:58:b1:67:61:36:21:
d1:61:01:d2:7d:fc:53:65:b0:3c:c5:6e:73:28:3a:3d:2a:96:
d9:c9:47:31:c1:39:88:84:de:3a:d4:9f:78:45:b1:62:22:81:
4f:a0:8d:f9:74:bb:17:c2:21:32:76:95:c4:ec:1a:f6:9d:18:
2b:ca:7d:d7:a8:7a:50:66:02:52:8d:89:c7:11:a7:56:83:2d:
31:07:4c:d6:7c:ec:e9:10:3e:aa:f9:fc:c2:08:bd:70:0b:fb:
b0:59:76:50:11:20:cb:df:d5:7b:c4:4b:1a:5c:c8:38:69:cb:
83:78:01:bc:38:c2:8b:d3:65:ab:fd:43:63:ea:68:a1:42:97:
6e:7d:c1:81:9b:58:ca:06:19:7d:11:00:eb:ba:43:d0:84:71:
4e:10:7c:01:01:8f:a2:5d:80:bb:4e:8a:1f:df:74:67:45:37:
2a:31:10:21:f0:35:df:03:27:84:50:cf:39:48:6b:b8:ac:29:
87:e3:c3:68:b3:39:c1:bf:d6:f0:c7:f9:27:64:a4:b4:fa:e4:
b6:98:75:46:6f:18:3f:2d:74:52:7e:a7:65:10:2b:f7:28:d5:
0c:dc:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:07 2026 by rpki-client