Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: xrvKDmsTCrqKUR5dSheGyAWQTJiCkuGUWljTbkvaAv8=
Subject key identifier: A3:A5:3E:DD:1B:16:37:73:16:50:1E:AD:74:CE:E3:95:71:2B:EC:8B
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019EBF91BB1DACCB5FA02DB565B710F6FB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 1639
Signing time: Sat 13 Jun 2026 06:00:59 +0000
Manifest this update: Sat 13 Jun 2026 06:00:59 +0000
Manifest next update: Sun 14 Jun 2026 06:00:59 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: 3fXIzcJxu3NdIBvs/YeQZLNWG2UxoiuthQtg0cnU/zw=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:bb:1d:ac:cb:5f:a0:2d:b5:65:b7:10:f6:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jun 13 06:00:59 2026 GMT
Not After : Jun 14 06:00:59 2026 GMT
Subject: CN=a3a53edd1b16377316501ead74cee395712bec8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:37:ab:9e:76:7f:5a:cc:c2:72:08:a3:2b:
c7:91:ab:3a:9e:60:c3:1b:3d:19:ee:9f:18:cb:9c:
dd:9e:31:58:a4:17:bd:38:b5:6f:2a:b8:24:44:f7:
2c:74:9e:78:0b:27:1c:e7:56:d1:1c:8e:9b:b0:95:
65:e2:cb:7d:5e:ba:ea:4d:dc:68:28:c1:8a:eb:b3:
d6:9b:b0:56:48:6d:e1:c7:fb:a8:0a:4a:2e:20:40:
0d:42:ee:23:1a:fd:5f:f6:06:ff:0e:7a:26:48:ca:
c2:20:26:45:a9:c6:91:be:cf:ee:7c:eb:b2:38:48:
eb:e0:49:5e:75:52:13:8b:07:da:fc:1c:5e:d5:51:
bb:95:ce:9b:31:47:de:84:8d:fa:4b:a4:c0:8d:ee:
b5:06:c8:26:6f:1f:cc:1a:4b:59:7d:e2:94:c1:de:
45:8e:89:a0:e5:ee:bd:d5:fe:d4:b6:7e:c8:83:1e:
c9:5a:1c:ed:5f:87:15:b2:1d:9a:71:33:9b:8c:6c:
4f:49:d8:a9:9d:41:a1:4a:7b:78:70:61:2a:53:dc:
82:68:32:27:aa:7d:bc:dc:fe:25:e3:7a:44:6e:28:
03:32:60:83:68:96:fc:fc:26:4f:ce:f7:81:1b:84:
3f:ea:80:d7:18:07:52:9a:29:fb:69:b0:78:3c:c4:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:3E:DD:1B:16:37:73:16:50:1E:AD:74:CE:E3:95:71:2B:EC:8B
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:70:42:42:8c:db:86:71:a8:e6:fa:42:a5:c1:74:70:9d:b9:
3d:20:4d:55:4c:00:61:84:4a:3a:55:58:76:de:c0:28:80:59:
ea:3e:84:a2:db:87:5c:50:4a:0f:d8:f3:0d:e9:4e:1c:61:04:
c6:54:8d:02:18:9b:a6:7f:d9:c0:ff:dc:1e:68:32:a6:99:6f:
89:77:ae:11:9e:70:4e:8c:4a:80:87:bb:1b:29:69:26:4e:c5:
02:b4:62:73:cc:c2:56:a5:a5:1b:b7:b2:60:b4:e4:99:66:5d:
da:b4:5a:f3:39:4a:88:a2:e4:cf:dc:22:39:6f:38:a2:e5:37:
b4:cc:4f:9d:1b:3a:f3:2f:3a:e2:1d:ec:e8:e0:fb:3e:3c:17:
88:df:25:49:40:be:21:ee:13:35:2a:f5:d0:f3:55:41:e7:35:
9b:41:0d:5c:c4:91:71:af:ba:83:00:02:63:c0:3f:95:bd:b6:
95:85:43:dd:78:7c:e3:1a:f9:72:45:f0:4c:0d:06:e0:80:20:
f5:52:41:99:23:07:ac:cf:93:8b:61:1d:7d:3e:41:90:d9:88:
05:48:0c:24:07:64:8e:66:6d:cd:5f:28:ae:09:3c:a9:f3:4c:
e0:61:68:17:c9:1a:cb:85:d3:a1:c6:3a:14:d6:94:e8:22:16:
66:d3:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:03 2026 by rpki-client