Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: iffVhXgEDyjVQhKn1CdqbiJUpam2jgYtUqYNXThkmrw=
Subject key identifier: DC:EC:00:3F:DE:22:5A:0D:A9:EB:F2:65:E7:B1:74:A9:AB:13:66:86
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 019EC1EDDE7E65A426AEFB068A0295B5AC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 0306
Signing time: Sat 13 Jun 2026 17:00:52 +0000
Manifest this update: Sat 13 Jun 2026 17:00:52 +0000
Manifest next update: Sun 14 Jun 2026 17:00:52 +0000
Files and hashes: 1: 0kO4HDhs-Z05CdJzgp5tseLyhSU.asa (hash: /YkuI+YVFPmtxpbrJU27qGqrMqF1Tro9Xx9l6QKKoAU=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: L9kNrwVp4qbWWp7qoOuVQFb1f0GpcrcHbVtc9ObBwgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:de:7e:65:a4:26:ae:fb:06:8a:02:95:b5:ac:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Jun 13 17:00:52 2026 GMT
Not After : Jun 14 17:00:52 2026 GMT
Subject: CN=dcec003fde225a0da9ebf265e7b174a9ab136686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:4d:ad:9f:29:b8:9c:b4:67:8c:f3:ca:74:
51:64:da:94:05:dd:9b:84:f9:34:19:5f:e7:35:4f:
74:5c:08:29:8c:9d:ee:46:3b:c4:c8:c9:d8:6f:74:
1f:9a:77:df:68:31:b1:73:c9:2c:42:bd:3f:1a:3d:
32:01:29:c7:0a:34:be:50:74:0d:c6:a9:36:95:50:
69:06:00:2e:e2:ba:47:66:52:ed:69:b1:bf:11:23:
86:9f:63:64:96:8a:41:10:31:f0:3c:32:49:1d:b4:
6c:df:31:15:c2:53:fd:90:0a:d8:c3:a4:81:9e:54:
0f:35:ca:87:5e:0f:52:ce:0b:0a:ef:a2:d0:9d:d6:
00:2e:07:82:90:82:a1:38:c9:60:a2:33:d9:a9:42:
ac:50:7f:02:2a:8b:62:f2:88:9f:b2:4b:7c:51:c2:
88:b7:c8:02:48:31:e3:de:8c:67:9a:41:50:0f:07:
ea:32:9a:08:49:6b:11:ca:1b:21:4f:9a:1a:e2:c4:
2e:70:38:53:91:f5:44:4b:8e:b3:22:94:7a:6a:31:
63:5c:78:03:63:29:34:5e:ad:cc:c6:ff:7f:dd:e6:
e4:f4:13:4e:9c:81:3b:21:f4:42:15:fa:d0:a9:02:
b3:d2:18:40:fe:ec:01:72:76:f1:8a:33:c6:f4:3b:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:00:3F:DE:22:5A:0D:A9:EB:F2:65:E7:B1:74:A9:AB:13:66:86
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dd:1f:98:95:0f:4d:1c:61:c6:cb:03:ea:99:19:a6:9f:19:
2a:98:c3:94:3c:cd:7d:fd:e7:88:2d:19:10:39:41:8a:86:a0:
6d:1c:77:90:4c:43:56:12:3a:31:22:14:b7:f5:00:bc:df:ae:
65:f0:6d:11:d3:9f:f9:eb:e0:bf:ac:c7:9c:03:77:f7:15:d2:
7e:6c:e9:ce:c5:2a:45:94:6c:90:60:80:9c:97:ff:e5:f7:79:
e2:d4:58:6e:90:0b:b9:8a:a6:ce:93:e9:9c:3c:2a:b5:8e:2b:
4f:e0:6f:ae:0d:e0:e1:68:5f:c9:c0:39:3e:04:85:22:60:20:
19:99:fa:9b:c2:69:68:e9:86:d9:66:79:ae:bd:2b:36:6e:02:
43:d7:0d:30:d3:5c:2b:fd:d8:7d:0f:fd:6d:05:52:30:ec:d5:
9a:46:db:2f:17:26:36:fe:a9:c4:83:9c:45:91:bd:21:0b:55:
64:5b:7f:f8:07:5a:6c:37:9f:74:0f:f6:fb:25:f5:3a:b7:92:
eb:ad:9f:a8:96:b0:84:67:df:27:65:d5:a8:15:da:ca:f8:45:
64:2c:e2:5a:47:41:be:26:55:c4:df:3c:df:93:8a:6a:28:c6:
b9:06:0a:4f:30:6c:de:46:a9:e9:37:7f:ee:f7:80:84:11:cb:
1d:10:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:52 2026 by rpki-client