Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
File: qap8qvmnyjedaW0a3VfA7dBVP_k.mft (raw, json)
Hash identifier: fXrp+0VBsMt81ycraqvQWq4WVAIW/3pXIP0QGfeNV6E=
Subject key identifier: E0:C2:42:63:61:0B:9D:59:73:E0:43:95:1D:49:AC:AB:78:97:C3:C3
Authority key identifier: A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
Certificate issuer: /CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Certificate serial: 019ED461E490F3B8469F00B6829D2DB3579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
Manifest number: CA
Signing time: Wed 17 Jun 2026 07:00:45 +0000
Manifest this update: Wed 17 Jun 2026 07:00:45 +0000
Manifest next update: Thu 18 Jun 2026 07:00:45 +0000
Files and hashes: 1: GCbuRd6csJQHzpB8lvnWZve0UIs.roa (hash: auu2xsjWmwNZtuETF+y7lmmBrOPk6zT22UOZl16juME=)
2: qap8qvmnyjedaW0a3VfA7dBVP_k.crl (hash: g2fOid/D8RWvYHuTbyMpz9g4bsw3LXPwhyTd0raS5lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:61:e4:90:f3:b8:46:9f:00:b6:82:9d:2d:b3:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Validity
Not Before: Jun 17 07:00:45 2026 GMT
Not After : Jun 18 07:00:45 2026 GMT
Subject: CN=e0c24263610b9d5973e043951d49acab7897c3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6b:11:f0:1e:60:40:d6:2d:64:da:80:93:b6:
01:97:62:0e:52:e2:a7:dd:fa:08:8e:df:e7:bf:78:
af:fb:76:b8:7a:9d:0a:8b:52:d0:c5:a4:6e:d9:2b:
79:d7:e8:b8:b0:d3:b7:b0:06:e0:79:28:27:27:2b:
1c:ad:12:da:bb:1d:e4:83:e2:16:fd:ca:97:f5:91:
d5:cc:a3:7d:d4:99:e7:2a:c3:60:bb:3a:a2:47:48:
d1:44:46:08:b7:eb:e2:36:7a:8d:56:b1:39:a4:b1:
bc:71:57:11:02:56:52:57:16:9e:f9:87:79:6f:30:
1a:71:6e:72:4b:45:9f:d9:ba:b8:40:59:34:4d:44:
bb:90:70:9a:a0:bd:e9:33:3c:bd:63:83:fe:65:b3:
56:39:ca:eb:84:05:8a:7a:6c:36:04:3f:6b:a0:e1:
00:97:82:8f:23:43:a6:f3:37:3a:73:2e:56:5f:13:
73:b4:fd:bf:92:ad:70:c9:fd:31:ed:e0:d1:df:57:
f2:cf:0b:6d:08:f8:92:38:08:1a:5e:9e:ac:bb:ed:
8e:44:50:c1:73:ee:28:b4:66:ab:e7:88:70:f2:f6:
af:f7:54:7f:69:d4:a7:d4:ad:7a:67:7d:bf:61:5e:
ce:42:a6:34:e1:39:d1:a3:57:59:d2:7f:01:41:9c:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:42:63:61:0B:9D:59:73:E0:43:95:1D:49:AC:AB:78:97:C3:C3
X509v3 Authority Key Identifier:
keyid:A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:57:ae:b2:72:33:06:a8:d7:45:6f:25:0c:7a:b4:ad:d9:3c:
bc:1b:b6:b6:cf:6e:a0:05:a8:b2:b4:6f:25:da:7a:7f:35:a9:
52:0b:ac:dc:d8:c5:e5:39:f8:1d:6e:08:c0:ea:82:d4:b9:04:
8d:50:ce:ea:b5:d6:de:bf:0c:36:6f:19:8d:33:45:4d:ab:67:
53:54:43:ad:7c:46:ee:40:0a:d0:53:85:9e:97:49:c9:3a:3e:
62:2a:0d:70:a2:5a:cf:4d:e0:c2:91:07:03:6b:4a:17:67:89:
3f:7d:b5:58:18:1a:a5:38:66:dd:13:6d:03:8f:20:80:fa:59:
af:76:2d:a2:31:b6:ff:99:87:81:9b:53:43:51:c6:c7:ae:11:
a5:fe:a6:55:0e:b0:b9:be:86:26:ef:ae:e8:ba:ee:07:4b:e6:
14:df:16:bf:75:03:16:85:58:c6:50:8a:71:ad:04:5c:0e:3a:
ef:32:71:a0:72:6e:a5:ba:d8:03:b1:d6:8e:5f:27:b4:cd:2f:
a9:a9:f3:bb:d9:3a:6b:04:01:6b:6e:59:c3:f6:e4:bd:1b:25:
3b:7e:95:15:48:60:aa:5f:5a:c7:39:87:6e:d1:c0:37:e8:39:
23:0f:b9:a9:8f:2d:d3:f9:8b:f4:94:22:e1:15:a1:7d:a5:92:
bc:28:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:50:31 2026 by rpki-client