Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: l2Y8Yw8nhKN1RCjfTAJtAmf9bEVOvQ/rdZI6PJwcwUA=
Subject key identifier: 98:F5:8A:97:F6:2D:25:36:CD:E9:A9:EF:03:47:CE:5B:09:20:4F:F3
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019EC0A44D0EC1BEC502DDDC04D477E0B3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1986
Signing time: Sat 13 Jun 2026 11:00:53 +0000
Manifest this update: Sat 13 Jun 2026 11:00:53 +0000
Manifest next update: Sun 14 Jun 2026 11:00:53 +0000
Files and hashes: 1: p7BVCU62BRURJnqp18vcgZBi9lA.roa (hash: DLOPi5ESV+e2DHMAV+0PXNX8prnnrufqQAKqkUfKYls=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: tKCWMXe/sOkpCxw2yZ3G7W9PRw3ZmbIwWtqEWfLPM4E=)
3: tS7Ekl755jz7sx7rmhOe1p5tzfI.roa (hash: JxL6ENaZZO0bTihUCNQQ0Sy7sFcJ4MbgWVnIFPKdL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:4d:0e:c1:be:c5:02:dd:dc:04:d4:77:e0:b3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jun 13 11:00:53 2026 GMT
Not After : Jun 14 11:00:53 2026 GMT
Subject: CN=98f58a97f62d2536cde9a9ef0347ce5b09204ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:3e:6f:65:27:f6:95:7b:ed:bd:a4:2a:42:
b5:86:ee:7e:f6:ac:2f:a4:84:30:12:bc:27:59:f2:
ee:71:7b:66:1f:39:ee:b2:b8:86:34:61:65:73:90:
94:e7:1f:b0:ae:0a:ba:74:49:6f:ce:d6:4b:b9:4e:
6d:c6:7b:bc:0f:7c:34:1f:33:c3:b7:43:9e:4f:02:
f5:25:5c:51:1f:b5:2e:c0:e8:4d:d9:59:18:c8:1c:
55:62:47:8f:b3:c4:74:20:81:61:17:c1:77:55:ed:
f7:85:97:16:f0:6b:bc:4c:bf:23:d1:b8:8f:18:43:
7e:e5:ed:c2:96:02:9a:6a:63:2e:e6:70:0b:81:7c:
78:c6:c4:40:4c:f1:1a:11:4e:56:e0:ce:b5:ae:18:
7f:87:2b:96:4b:16:e9:00:c4:f7:b9:e1:b3:b2:88:
a0:82:96:b4:a9:c2:94:15:94:08:19:65:d1:9b:b7:
5b:5e:60:34:c5:40:17:f4:98:b9:63:57:93:45:0d:
2b:bc:6e:54:91:ba:d1:a7:28:a2:7d:08:6f:17:a1:
b5:3c:b9:ea:46:89:4e:78:4f:25:a3:5f:bd:81:4f:
54:5d:b5:80:bc:46:60:80:74:32:9d:2f:73:cc:95:
ff:b3:60:ae:dc:91:b0:78:2d:1d:71:4a:12:63:ee:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:8A:97:F6:2D:25:36:CD:E9:A9:EF:03:47:CE:5B:09:20:4F:F3
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:48:4b:b3:f4:61:d4:72:8f:1f:ff:75:57:7e:82:08:db:2f:
50:d6:08:3f:76:c1:c8:75:57:fd:80:15:ce:23:5d:d0:3c:c1:
3e:55:2d:12:30:42:ef:b7:4d:22:1a:af:ce:da:e1:e0:a2:56:
f8:ae:4a:2e:7d:4f:92:9f:b5:de:95:a9:33:ac:81:bb:45:4f:
a5:cd:16:c5:7c:32:b6:ec:e9:16:80:74:31:73:a6:da:80:99:
f5:fd:1e:b3:51:1a:8a:04:71:29:d1:c6:0e:3f:d7:22:0f:4a:
73:09:5e:29:79:13:87:18:15:c0:67:9b:12:2a:2d:a5:63:a1:
e2:04:2e:62:fc:95:2a:3f:58:41:36:69:9a:0a:80:44:d9:5a:
9c:10:d8:cf:0c:bd:e8:96:45:30:14:76:64:ea:d3:78:58:2e:
d9:5f:bc:4d:bc:ff:58:8b:0b:29:5e:e9:fb:a5:f2:98:09:44:
95:70:5e:50:5f:55:3c:8a:d7:20:e8:15:c9:44:a1:46:a6:32:
f7:9d:f3:2c:34:e2:66:51:e2:ea:94:8b:d3:c4:5e:aa:3d:09:
79:cf:a3:bd:9b:04:9d:f8:6b:dc:09:d5:be:9f:7a:0e:97:da:
3d:0d:b4:87:8a:b9:58:d8:90:4b:e1:eb:8a:dc:18:3c:0c:c0:
a8:1e:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:45 2026 by rpki-client