Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: nhk5z3HQzrj9ZQ5X6v/gSPwssOAKa1/YLdl1OBSOp90=
Subject key identifier: B8:D0:D2:4F:F3:3F:21:DE:75:DB:C1:FD:82:75:E0:C0:BE:94:7F:60
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 019EC111AFC2548CCC5234409889B3FAD731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0CA4
Signing time: Sat 13 Jun 2026 13:00:22 +0000
Manifest this update: Sat 13 Jun 2026 13:00:22 +0000
Manifest next update: Sun 14 Jun 2026 13:00:22 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: +WcgjRJydeHUFxLX1hwRcPQp4vcKs5pLKUboddr9SqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:af:c2:54:8c:cc:52:34:40:98:89:b3:fa:d7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jun 13 13:00:22 2026 GMT
Not After : Jun 14 13:00:22 2026 GMT
Subject: CN=b8d0d24ff33f21de75dbc1fd8275e0c0be947f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:93:7a:c2:b8:15:c1:7b:23:74:82:96:cb:
df:02:ef:82:f6:00:43:e9:16:3e:fa:30:3d:9d:06:
85:3f:91:37:31:1a:8e:94:eb:72:c6:2b:5b:6b:25:
6e:9d:7f:57:39:98:a1:9e:f8:24:86:a1:9f:9d:c0:
24:0e:42:bd:ba:13:97:15:0f:5f:ef:9f:0c:bd:19:
8c:a9:1f:58:df:d1:12:11:62:4f:03:f3:61:f1:84:
ad:12:91:4e:0e:17:4f:f8:0c:dd:0a:8c:ad:63:d2:
9a:64:37:1c:58:4d:b7:23:5e:98:f9:6d:cf:1a:cd:
cd:09:5d:e0:57:8a:17:e5:89:00:fb:ed:d5:18:91:
f3:3d:4d:c4:a5:59:ab:5c:3c:48:03:b7:d8:6a:15:
eb:3b:5c:17:ca:46:b5:bf:7c:e5:1d:69:07:5f:dc:
94:1b:62:b1:f4:17:4d:e9:70:83:ba:3e:63:05:db:
51:65:a0:fa:4e:74:e5:de:c7:6f:8f:ab:d8:2e:b1:
19:7a:ab:d2:a9:58:ee:0d:4f:cb:de:bc:cb:30:06:
bf:8d:01:1d:39:2e:b8:45:02:29:85:17:2a:13:59:
36:d1:8c:07:fb:86:1b:eb:62:41:5e:aa:a1:b7:f1:
7a:df:8a:76:90:eb:75:61:ab:3a:31:99:29:ef:e5:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D0:D2:4F:F3:3F:21:DE:75:DB:C1:FD:82:75:E0:C0:BE:94:7F:60
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:74:8b:a6:0f:52:bd:b7:4a:6c:d3:74:b4:58:74:6d:c7:af:
c2:d0:37:97:ac:09:73:28:aa:bd:e3:46:54:43:c0:b4:54:2e:
cc:b0:f4:9c:15:10:17:81:3b:cf:3f:db:23:7d:32:d5:b7:e0:
97:5b:f9:c1:20:87:60:7d:d3:6f:81:4b:dc:6c:fb:73:47:a1:
18:c7:e9:ff:0b:76:13:a9:e7:29:be:96:5f:fb:6b:82:7f:3f:
94:bf:12:25:37:34:47:99:2d:82:d1:6d:2b:da:0e:01:52:61:
b3:51:83:e6:bc:bc:0c:a9:0d:a7:d1:7e:dd:95:54:05:46:33:
66:8b:a8:52:d9:2e:8a:32:a0:5d:39:87:0c:a2:8a:98:0a:cf:
9e:f2:03:88:24:e6:5f:8d:09:40:32:84:80:52:1d:e5:8c:b1:
25:cf:09:44:5a:78:00:f6:d7:85:5b:b4:52:ee:fe:bd:4b:df:
c3:23:a3:b7:69:b9:47:65:ac:d3:9e:c4:14:51:24:9f:aa:24:
50:8b:5c:d5:2c:e6:c1:62:9e:85:a7:e1:5a:04:c4:93:5d:17:
9b:6e:21:8c:9c:b1:cf:e0:e7:ee:32:5c:7a:c9:db:01:24:bb:
1f:ae:00:d6:ba:3f:46:b9:9c:1e:e7:43:f6:48:0a:9a:32:24:
31:74:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:49 2026 by rpki-client