Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: UET3fdNo09RrSAh8b7l5CkTMHkU6qvAQocM1t0ldZ74=
Subject key identifier: 62:47:C0:2F:53:6C:04:27:2C:6C:AB:39:25:88:4D:2C:9E:17:F1:F1
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019EC036288372B8CF6E983DFD040269D7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0E41
Signing time: Sat 13 Jun 2026 09:00:35 +0000
Manifest this update: Sat 13 Jun 2026 09:00:35 +0000
Manifest next update: Sun 14 Jun 2026 09:00:35 +0000
Files and hashes: 1: ICnXf_-P4YXpOb6ZjyXTZ_msN-k.roa (hash: 3D4zEGy/FsPIqxHMTFOVIKU0MUectvNEvVPQNjn9vUM=)
2: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: kG5BwCCSaGhkAWXHzL9NdffTuG4ZK//0x+eWI3Unrts=)
3: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:28:83:72:b8:cf:6e:98:3d:fd:04:02:69:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jun 13 09:00:35 2026 GMT
Not After : Jun 14 09:00:35 2026 GMT
Subject: CN=6247c02f536c04272c6cab3925884d2c9e17f1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:84:9f:41:7b:3e:2b:a8:7c:9c:b5:d8:f1:
2f:6d:81:a1:c7:2c:33:69:61:04:24:01:b6:c0:0c:
78:83:6f:53:03:f2:3d:67:35:73:d1:45:ea:f1:38:
50:4d:33:62:47:58:3d:ba:ab:c2:46:26:fe:02:7d:
1a:8d:5e:1e:e9:e0:fa:11:b1:c3:bb:31:d1:fb:5f:
f3:6f:0c:d4:03:09:2d:49:d2:7c:ea:15:50:87:02:
67:c3:71:53:f6:c9:87:97:f3:fb:9f:f2:ed:3a:45:
1e:3c:43:86:bf:8d:1d:9b:8f:2a:78:0c:4c:2a:28:
3a:48:d2:c8:69:ac:a1:0b:37:8f:f7:22:4a:3a:6e:
32:d6:79:ba:37:65:64:6a:71:0e:21:45:bd:87:52:
65:68:97:d0:30:24:cd:d1:0d:ca:09:0a:0a:24:8f:
15:df:5a:b6:2c:36:66:91:25:60:b2:c6:8e:b6:9c:
a3:8b:18:41:74:2d:82:a0:70:88:98:08:fc:9d:a9:
b4:65:e7:8e:f0:af:8f:1e:36:e3:2c:c1:f4:82:66:
37:11:f4:c9:6e:0b:76:c1:9e:ea:1a:35:88:3a:a2:
53:f4:c8:da:1e:35:44:21:8a:86:fd:99:10:01:8f:
26:2e:df:65:1d:42:c1:c3:77:c0:8c:7b:70:7f:c5:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:47:C0:2F:53:6C:04:27:2C:6C:AB:39:25:88:4D:2C:9E:17:F1:F1
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:05:95:32:0d:9f:6c:84:2c:b0:02:5a:54:63:ba:75:89:af:
b2:1a:a6:22:e8:fa:d5:f7:13:8f:46:a8:53:f9:75:f4:62:df:
3a:71:08:dc:7a:d8:cc:91:56:e6:18:04:a9:2a:6e:db:65:5a:
73:c5:c4:da:85:63:48:83:49:34:3a:fd:3d:68:e6:a4:07:f5:
81:55:3b:75:78:bf:7d:90:2a:4b:0f:be:8f:62:ea:38:6e:3b:
e8:6c:b7:fb:9e:d8:50:84:50:ac:e6:48:31:18:b3:bb:2f:3a:
2d:07:cc:3b:72:f4:4e:e8:4d:92:02:12:08:42:f8:64:21:fb:
4a:93:ca:cb:0c:57:8a:3c:b4:dd:f9:e8:8a:fe:0f:8a:b8:8a:
21:a7:7e:a7:e8:be:b6:ac:37:60:48:b6:0d:c0:ca:7b:3a:7e:
3a:8c:18:3e:b9:08:4b:00:32:c1:a9:91:5e:59:24:79:5c:e3:
f2:e6:cf:4b:fd:9a:4c:3f:b4:62:6a:d2:b1:2f:15:ed:00:6a:
82:5b:2e:a9:bf:49:72:d9:c0:0f:b3:df:a8:79:fb:f6:62:e3:
cb:23:80:28:a2:95:2e:47:77:eb:27:36:c0:3c:af:7e:46:67:
6c:a1:4b:08:54:25:d5:57:14:6f:8b:8c:9c:27:5c:6c:61:83:
5e:45:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:18 2026 by rpki-client