Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: /n7ZNmbE/7RCGlnfPrZ4luEBiOyv8Zx7rZLIwTB5Yog=
Subject key identifier: BD:2E:C5:B3:E0:74:8C:82:24:58:7D:61:53:A3:B7:C5:3B:14:FE:C5
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019EC4EED27F47D5B35E2726DF8780BE9D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1961
Signing time: Sun 14 Jun 2026 07:00:46 +0000
Manifest this update: Sun 14 Jun 2026 07:00:46 +0000
Manifest next update: Mon 15 Jun 2026 07:00:46 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: 6xTHhcJ47LE3EnnIH6PSu3Z5RnvxTc/mWONJMqyUwVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:ee:d2:7f:47:d5:b3:5e:27:26:df:87:80:be:9d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Jun 14 07:00:46 2026 GMT
Not After : Jun 15 07:00:46 2026 GMT
Subject: CN=bd2ec5b3e0748c8224587d6153a3b7c53b14fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:9b:af:c9:12:df:63:f1:07:2e:17:fc:6e:
87:45:75:f1:87:56:e3:b1:84:41:d7:1e:ac:97:3a:
96:7e:bc:31:f7:6a:27:2a:cb:94:ad:94:9b:09:2c:
7f:fe:a2:1f:4c:df:44:1d:11:7b:15:62:65:58:1a:
a3:bb:7b:43:c2:2f:09:79:2e:74:00:7b:3c:e2:1b:
4e:30:44:03:7b:00:1e:97:30:4e:2d:c7:63:57:b7:
2f:54:cf:c9:cd:17:fa:a9:df:09:ce:3b:df:4c:a0:
cc:ca:61:ba:11:1f:e1:b0:42:d7:18:e4:01:ac:2d:
de:40:db:06:96:0a:dc:29:d7:17:8a:a8:da:04:8f:
4d:14:97:a0:1d:51:cc:c7:9e:c6:4e:c2:3a:e8:a6:
57:91:67:f7:f2:9d:fb:d4:b2:92:85:9b:e5:92:ae:
cb:65:70:29:d4:e8:8d:2d:3d:bc:24:25:1d:9d:65:
cf:8e:cd:f4:76:d2:d8:2b:54:a9:bd:1c:bc:8b:e5:
96:59:75:08:b1:a5:03:9e:da:cc:ae:94:73:56:d7:
ca:d6:ab:44:23:e6:06:a8:f0:5b:d5:6a:97:f4:b6:
aa:83:b6:73:09:88:b6:8d:c9:a7:7a:58:4e:0b:89:
c1:4d:f6:63:a4:8b:80:57:d8:36:ee:72:f2:eb:f0:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2E:C5:B3:E0:74:8C:82:24:58:7D:61:53:A3:B7:C5:3B:14:FE:C5
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:22:fc:00:c7:04:51:e3:12:cc:20:0d:4f:c8:25:70:5c:
81:ce:8e:6a:1d:b7:a2:a3:06:f1:ef:6a:26:d8:93:d7:c8:6b:
e8:b3:2c:22:f2:6d:b6:c6:a9:1f:db:39:b9:4f:e9:7f:c9:2d:
54:8f:a7:d8:42:3f:b9:3c:aa:5e:8f:7b:53:71:bd:23:5e:94:
6c:80:e8:b4:75:53:ab:76:96:25:1a:65:37:e3:21:c6:17:cc:
50:a1:30:4d:6f:36:b1:2d:28:95:1b:f8:6d:b6:33:8f:4b:c0:
e3:7a:ab:6c:0d:92:03:d2:8f:a7:f1:bd:6c:d2:36:c5:98:3c:
58:8d:21:2d:19:17:26:c6:79:37:75:54:0b:7a:bb:98:54:e2:
75:58:34:ba:94:b6:43:37:df:a1:69:d7:cc:20:fb:41:99:66:
e1:51:d1:d5:e1:27:06:eb:5c:05:8a:ff:12:91:a3:43:13:55:
8a:1a:e9:ff:5b:7a:71:bf:1b:78:d1:8d:cd:20:23:db:42:57:
71:c9:6e:a7:c6:b9:25:62:74:44:96:a5:9f:87:c6:c8:2c:c8:
b7:78:fe:1a:38:b3:c1:b4:99:b1:30:2c:a7:f9:9c:40:c6:0a:
bf:c0:c8:b4:54:ae:5c:dd:de:b9:cb:f9:c8:b4:79:03:1d:81:
46:fc:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:52 2026 by rpki-client