Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: +7cUkE5LWnMFCpr/iZDFeGF3aztdvAjFAvVP9HIxk8U=
Subject key identifier: 73:FA:DC:76:98:2B:B9:8E:55:7A:6C:71:92:10:44:A3:27:5B:DE:CD
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019EBF2330297ED1650ED8E5FF8C0FD75C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1965
Signing time: Sat 13 Jun 2026 04:00:14 +0000
Manifest this update: Sat 13 Jun 2026 04:00:14 +0000
Manifest next update: Sun 14 Jun 2026 04:00:14 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: dyABfejTx84DuUX/WTZvUJEvZ32fLcNjAlFHGhyuMFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:30:29:7e:d1:65:0e:d8:e5:ff:8c:0f:d7:5c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jun 13 04:00:14 2026 GMT
Not After : Jun 14 04:00:14 2026 GMT
Subject: CN=73fadc76982bb98e557a6c71921044a3275bdecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:db:6c:91:37:3e:0e:8d:e6:e8:84:f9:8a:
4c:47:57:b5:b5:33:b6:32:f6:70:e9:1d:10:10:a3:
17:3e:7a:5b:83:1b:5b:73:02:51:84:6c:7b:69:36:
c7:2f:c9:87:71:1a:8a:83:0e:c3:3a:67:61:86:2c:
5c:ba:7c:be:9f:07:19:6f:fc:68:2b:35:2a:b6:b7:
06:c1:0e:fc:10:13:ec:6f:28:91:6f:82:bf:ed:ab:
16:f0:ce:2f:4c:9c:d0:99:e1:a7:7a:c7:f4:6c:d6:
c1:1c:67:6c:a9:4f:a6:29:57:54:49:f3:14:2d:b6:
31:cc:04:00:86:7c:b4:be:fd:89:b0:8f:07:31:31:
a7:65:c3:3f:e0:f9:e3:1b:0d:20:4b:55:9f:00:19:
f7:eb:b1:d7:2e:c8:7f:6d:55:69:63:10:67:12:fc:
fa:c5:60:33:b5:cc:15:16:dd:4d:2f:4a:34:90:b0:
bf:1a:2f:5f:6b:96:c8:1c:d0:f7:5b:6b:c4:a4:2f:
b0:fd:2f:b7:3a:49:bf:57:58:bd:44:08:20:8f:3f:
9f:b5:c0:65:7f:af:09:79:06:cf:d0:24:9e:46:40:
9e:bd:3c:c3:36:fe:a2:19:d1:ca:9f:e5:84:54:22:
ab:38:5c:28:07:b2:17:34:e7:ac:51:3b:5f:81:b1:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:DC:76:98:2B:B9:8E:55:7A:6C:71:92:10:44:A3:27:5B:DE:CD
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6c:63:46:f1:d6:86:9b:ab:a9:56:b7:f0:f2:d5:9d:d9:2c:
ce:b7:fe:81:c7:0f:d4:93:73:11:24:94:29:cc:69:fb:02:28:
9a:c7:0a:92:29:4f:b7:6c:c2:3b:43:e8:20:f6:b9:97:15:c3:
7f:23:39:3b:90:51:34:72:66:fa:6d:40:23:46:c8:89:df:49:
b3:7e:49:47:dd:40:ae:31:62:61:a6:df:b9:a1:bd:2a:8b:10:
a3:cb:72:d6:ac:67:a0:57:81:c4:89:2e:04:76:30:93:d3:5e:
51:9d:79:93:fd:1e:14:85:d6:b6:52:61:a4:06:6e:61:3f:2c:
f1:55:16:16:b7:e8:10:77:be:9b:6e:fd:d3:df:3f:da:61:8a:
63:1c:87:33:60:d9:54:48:eb:ee:5f:34:30:db:f4:70:d2:7b:
63:4a:31:22:53:57:70:3b:c1:10:c7:2e:01:c6:80:0f:3b:42:
96:a5:1a:c3:6a:2a:71:56:cf:89:06:44:f4:53:4e:63:be:67:
75:1d:fe:77:03:fb:6c:33:d7:45:0d:a6:e7:2c:57:d3:4d:9b:
d9:e0:35:40:00:b4:2e:ae:34:46:af:07:e8:0a:a3:08:a3:50:
a1:3f:d4:84:23:dd:fa:74:9f:37:51:9d:59:ee:02:f7:a3:28:
1d:46:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:13:45 2026 by rpki-client