Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: md35ilfUHfUgeeGGr1nD4K6ymy4fBlTy94tTOLlDwFM=
Subject key identifier: 14:23:3F:AF:0D:32:8D:BC:EB:32:FC:F6:87:A2:4F:F3:E0:09:26:B0
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019EC1123EB756AB49AF641B5B8FB2E68AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 13:00:58 +0000
Manifest this update: Sat 13 Jun 2026 13:00:58 +0000
Manifest next update: Sun 14 Jun 2026 13:00:58 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: 7zlAC/WrVu6GQmHRNZAVvL0e/60j/FvuRKns6kCZ2C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:3e:b7:56:ab:49:af:64:1b:5b:8f:b2:e6:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jun 13 13:00:58 2026 GMT
Not After : Jun 14 13:00:58 2026 GMT
Subject: CN=14233faf0d328dbceb32fcf687a24ff3e00926b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:68:78:17:96:08:41:d1:76:bc:21:bd:95:
14:b5:bd:15:cb:60:56:1b:0c:2d:14:16:28:aa:6a:
37:1d:80:8e:68:24:a1:2b:c9:27:bd:b5:22:e3:18:
11:b8:9b:e0:5d:19:eb:d7:65:18:e5:d6:7d:78:3e:
08:1c:8e:5e:36:23:64:fa:90:27:5e:d5:3d:80:7c:
14:d7:f0:c1:c4:1c:39:b4:3b:57:9a:ea:61:5f:6d:
4f:45:30:b2:45:36:e3:69:24:f0:f5:cf:3b:88:cb:
42:35:c3:26:60:85:f1:1c:93:b8:ba:f3:b4:d0:e0:
d2:61:af:41:0b:89:89:b8:a3:b2:86:25:6c:1d:f6:
7e:4a:fd:63:07:f6:37:12:4a:73:7d:f5:53:15:1d:
d1:18:08:8f:f9:52:bf:be:89:66:70:91:b8:7a:53:
b7:b9:2d:3a:35:4b:1c:9f:27:6a:c5:31:97:6b:da:
18:b0:f2:8c:a5:f9:51:aa:a9:b0:ac:6f:f6:9e:c3:
7b:a5:76:94:97:63:52:1a:be:aa:1e:ea:1b:ba:de:
92:75:16:97:f5:ad:f4:2c:05:3f:d4:a5:3f:07:be:
f4:5d:08:2c:90:7d:72:61:d8:8e:d3:12:13:f7:a5:
82:fe:cd:fc:b8:31:1a:80:3e:5c:c5:14:ee:75:21:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:23:3F:AF:0D:32:8D:BC:EB:32:FC:F6:87:A2:4F:F3:E0:09:26:B0
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:d9:8f:ce:bc:b6:f1:fa:04:b8:f3:4f:6d:f4:33:3b:5e:
01:eb:ef:0c:2f:42:25:ea:47:d3:ff:a7:d4:d2:ed:8b:81:76:
e9:f3:a6:c4:4a:26:20:c4:b6:a8:09:cb:9d:d9:d2:a2:83:4d:
d5:da:29:15:33:5e:b0:3f:0e:72:94:6a:a3:a3:24:ee:82:d0:
0d:1e:c1:23:34:0c:e9:de:cd:7c:9e:7c:34:3c:f7:01:a1:15:
1c:c4:e0:c2:90:52:4c:5c:0c:5f:07:e1:ee:06:8e:4c:b8:0d:
b5:77:be:df:73:94:78:5a:e2:be:89:a7:68:95:70:e2:48:94:
79:5f:95:22:a3:13:ba:2e:40:8d:a8:10:dc:64:29:c6:8a:0d:
40:05:2a:52:3a:30:48:e0:f9:f8:e0:54:30:77:ff:8f:c0:c8:
e5:1c:17:5a:e4:40:1a:a4:37:ec:46:4a:98:29:9f:b9:16:c2:
4e:47:8f:33:ef:1a:c6:48:07:e9:2a:33:d7:45:b8:93:37:be:
15:17:84:ff:e5:f8:1f:61:7b:3a:28:83:7b:91:ce:4c:43:8f:
9a:e5:40:69:d1:82:29:2a:85:53:04:95:68:90:64:e1:55:de:
c4:ce:2a:e7:bf:77:13:e5:af:ad:62:30:6d:25:14:3d:9a:c1:
40:21:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:51 2026 by rpki-client