Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: fO1iUjjIrP7b3v2CW+o4PoyEHMPVrLX8wXmnrtKVJeA=
Subject key identifier: F2:A4:97:96:AE:FD:41:84:D4:99:21:0C:E0:EA:7A:08:79:99:E6:4A
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019EC30054E49E8714CE0495D9D18AF56123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0AF2
Signing time: Sat 13 Jun 2026 22:00:39 +0000
Manifest this update: Sat 13 Jun 2026 22:00:39 +0000
Manifest next update: Sun 14 Jun 2026 22:00:39 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: uvFyysiKC9mwkJHRsdr2ov1YutAA8IoURwJIYZt8Vt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:54:e4:9e:87:14:ce:04:95:d9:d1:8a:f5:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jun 13 22:00:39 2026 GMT
Not After : Jun 14 22:00:39 2026 GMT
Subject: CN=f2a49796aefd4184d499210ce0ea7a087999e64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:6a:dd:47:1a:e2:bd:ed:21:a3:22:76:21:
4a:db:94:17:fc:bf:e8:0d:d0:d4:fd:18:65:35:a0:
a2:58:f4:2f:cc:27:90:e7:4b:ba:07:e8:2e:c9:fa:
fb:5a:36:cd:52:41:5b:18:c6:1d:51:73:a8:11:0a:
ff:dc:47:c4:98:9d:71:a1:15:c6:1b:0d:bd:56:68:
30:5c:f8:3d:8c:f6:52:fb:6a:e8:e6:c7:44:da:33:
6f:85:70:a2:e2:60:e1:56:e7:12:8c:c4:37:5c:a3:
c2:13:46:28:3f:4f:3e:80:25:6d:cf:4d:64:a0:41:
5b:7c:8c:63:5b:3d:50:ab:0e:b4:b8:e5:48:8d:d2:
21:4b:15:eb:43:05:b6:f3:76:27:0b:cb:c8:19:5a:
61:7c:33:fa:54:e5:91:83:1b:b9:54:94:d5:f8:92:
ff:c5:c6:0e:fb:4f:e3:59:b4:e0:a0:56:59:f3:36:
2c:ff:3e:4c:83:f8:f9:1e:ba:d5:f0:78:17:21:37:
78:ca:12:14:29:a7:c1:bf:72:1a:a9:7a:ab:62:ae:
12:a1:c5:6e:b9:a9:9a:b4:03:84:1b:cf:35:59:a9:
c4:8a:d0:59:b4:28:af:de:14:e3:a8:14:93:14:d4:
3a:79:c6:39:38:39:1f:80:86:0f:eb:a5:21:c0:c1:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:97:96:AE:FD:41:84:D4:99:21:0C:E0:EA:7A:08:79:99:E6:4A
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ff:08:c2:b0:d3:90:09:ac:a5:89:5a:03:0a:0d:0d:26:8a:
d8:17:ae:cf:0e:c1:15:eb:2a:20:ef:44:90:a5:ee:64:e7:7a:
22:8e:34:f6:ce:6c:89:64:49:db:75:74:69:bd:8d:94:64:28:
b1:0f:5a:34:2e:a3:6c:8c:d7:1c:45:66:85:c7:62:c3:72:48:
1e:04:d2:52:43:44:a9:50:2e:56:62:1d:dc:bd:63:bb:dc:3d:
28:54:6b:2a:cd:38:46:97:0c:92:f9:43:4a:ae:71:a2:f1:b4:
a1:7e:0d:9f:a0:1b:73:ba:62:91:4d:b3:7f:87:7e:22:11:e5:
3d:7f:8d:c0:3d:bb:db:01:63:25:f8:d1:0c:0c:29:d4:d3:c2:
a0:c1:7b:25:78:c3:23:78:68:45:19:af:e6:56:85:ac:f3:16:
d4:e5:4e:34:a8:88:c7:08:b2:a5:80:19:ef:30:39:9b:fd:f9:
66:a4:f0:e7:a4:c4:83:0d:c7:d1:8a:5a:cc:75:b3:33:ae:8f:
a1:90:3a:9f:2f:52:c0:3c:29:d7:c7:63:82:63:21:8d:0b:30:
48:4d:e7:33:fe:af:56:94:00:44:f4:52:d2:e9:74:f1:98:91:
88:80:e3:27:36:98:f3:f0:ba:c5:d9:4d:f2:16:47:40:57:64:
33:2e:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:16 2026 by rpki-client