Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: Q/6Q5I/mLdS4nRUQKIRT5WRsXwoUTuT0LDgLYU48LNE=
Subject key identifier: 1A:DC:28:C2:66:4E:65:27:64:EC:CD:6A:08:C6:20:31:7C:A6:51:AD
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019EC3A5245429AFCBEB29034CCA92113F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 18F1
Signing time: Sun 14 Jun 2026 01:00:40 +0000
Manifest this update: Sun 14 Jun 2026 01:00:40 +0000
Manifest next update: Mon 15 Jun 2026 01:00:40 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: vO3r07SwQHceFTVkIDDwulaVLN2hEl3ZeZtEoYA2gyw=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:24:54:29:af:cb:eb:29:03:4c:ca:92:11:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jun 14 01:00:40 2026 GMT
Not After : Jun 15 01:00:40 2026 GMT
Subject: CN=1adc28c2664e652764eccd6a08c620317ca651ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:34:8d:b5:e2:a4:44:d9:bb:46:6b:12:d9:
df:ea:c4:b0:1c:43:35:cc:1a:d3:b7:72:13:4b:06:
f9:8a:e7:78:0b:80:58:2f:b6:bb:17:3b:5e:d5:48:
2f:5e:e6:61:89:28:91:0c:96:cf:a0:cd:d8:d1:76:
30:77:ea:06:53:bf:0e:f2:54:78:4f:ee:53:0a:a8:
01:a4:57:ef:5b:57:e7:2e:88:5d:85:d2:9d:c5:c7:
5f:62:e5:b2:a0:e8:83:be:71:5b:a4:49:5f:0c:49:
0f:b4:fb:81:a6:dd:29:0f:85:c2:dc:da:f0:aa:fc:
b8:88:62:b6:ce:b4:1f:e2:d3:f3:cc:5d:85:77:eb:
75:90:e3:81:6c:c5:49:42:da:fb:9f:0f:f0:a8:2c:
1d:de:ef:e0:02:e2:a9:54:1f:5a:c4:1c:b4:0e:64:
db:b9:ec:0b:28:36:14:4e:62:c4:72:d6:1b:af:8e:
a9:53:14:b7:6f:04:dc:59:64:dc:ec:59:9e:93:70:
7a:ea:aa:52:4c:9c:21:ea:01:66:10:58:01:ff:4f:
9f:f8:57:41:d7:ff:fa:c6:75:f5:cd:c7:32:fa:81:
15:89:65:21:20:71:ed:4c:24:e4:3c:cc:e5:39:94:
7d:8e:88:5e:4a:7e:3e:93:49:67:d0:06:43:5d:8a:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:28:C2:66:4E:65:27:64:EC:CD:6A:08:C6:20:31:7C:A6:51:AD
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:01:19:6e:f5:3d:48:a6:f5:cb:fc:44:aa:79:c4:83:97:1d:
33:da:37:96:5b:d8:d3:44:f4:72:ea:91:65:b5:c6:22:43:5f:
76:56:ca:27:f3:d0:fb:18:d1:f1:26:7a:d0:53:c0:30:81:33:
4b:64:5f:36:d7:15:eb:8e:23:7c:fc:02:b8:f6:52:1d:71:15:
6a:09:3c:87:f4:71:1f:a1:62:09:11:f7:68:0a:83:0f:ef:11:
bb:e5:cc:ed:01:41:bd:a3:ef:1c:f9:c3:ec:3e:78:dc:55:41:
96:16:f9:5a:b8:48:9c:c7:0d:c2:f7:99:a0:15:1e:e6:e8:a9:
ff:e7:1b:76:eb:ae:9a:fd:34:67:7c:76:3e:b1:54:be:3e:a9:
14:34:3e:ac:ee:29:f9:ab:ab:e7:01:cd:16:e0:7c:48:cd:ed:
be:6e:b9:68:37:ae:1e:3a:18:ba:91:38:fc:25:1b:66:08:4c:
fa:07:1c:79:d2:45:42:3f:60:63:e1:1e:b0:8f:62:59:f2:cb:
61:6a:2e:06:f4:49:d4:7e:65:5c:84:de:80:03:a9:20:5e:35:
7c:47:c9:89:7f:a7:9e:d5:f5:f1:98:7b:81:61:24:1a:69:4b:
9d:bb:24:91:bc:a0:a6:56:84:9a:0d:e3:65:7a:18:7b:57:9f:
df:94:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:55 2026 by rpki-client