Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: /dwGXbrUbQuhQkq1354dUBOrWnWVHrZFJ080B0w2TXI=
Subject key identifier: 8D:4E:E3:45:0F:1E:41:B6:B9:55:3A:8B:1C:10:A9:5F:62:77:74:56
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019EC2CA1C6164CB2C62776EF61593308AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0FF2
Signing time: Sat 13 Jun 2026 21:01:25 +0000
Manifest this update: Sat 13 Jun 2026 21:01:25 +0000
Manifest next update: Sun 14 Jun 2026 21:01:25 +0000
Files and hashes: 1: BO14bA7PeRb0D7KQP3CWollCutc.roa (hash: KWBfGK/f5gpdRKkzCSVIg8eJkkTlP4Rw/G54X2xmAk8=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: 2pNRM0s5WGzPrPjGAvApZ+koibA91nnEqLKZG3xcgaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:1c:61:64:cb:2c:62:77:6e:f6:15:93:30:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Jun 13 21:01:25 2026 GMT
Not After : Jun 14 21:01:25 2026 GMT
Subject: CN=8d4ee3450f1e41b6b9553a8b1c10a95f62777456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:e9:b1:6d:6b:9f:42:9a:86:71:8d:98:7b:
d3:f2:c0:3c:08:ae:c4:de:9c:b6:bf:4b:e2:74:71:
d1:21:cc:5d:f7:60:57:c7:e6:b6:e2:5e:64:ce:57:
c6:ad:b7:51:81:a8:b3:9a:a4:ff:b9:53:e9:e2:8e:
4f:9d:6b:b2:8f:a6:59:4c:e1:af:87:b1:24:f7:73:
24:c8:c4:c5:38:bc:de:8c:7a:bf:d9:54:84:20:6d:
bc:e4:38:2a:10:51:4f:ce:4c:e1:8f:cd:df:40:22:
bc:ac:ea:3b:fe:fd:c3:44:1e:7e:8c:c6:4d:7c:63:
a9:ac:c8:bd:7c:71:38:73:80:83:da:3a:c1:c6:a0:
be:e7:24:14:5b:c4:15:a7:9d:2c:56:b6:b2:e5:da:
5a:49:30:30:3f:c7:4e:f7:e2:79:f0:ce:40:a1:c9:
73:7f:c9:fb:11:72:ab:9a:79:e2:ba:bd:11:cd:38:
d3:f4:8e:0a:86:fd:d7:33:20:d4:27:2b:1d:35:f7:
c9:bb:8a:c0:ec:90:e3:a5:0b:bc:f0:9d:b5:f8:e8:
f1:7d:14:6a:6c:f5:22:1f:95:dc:d8:d6:6b:14:d3:
ae:50:e6:96:8e:31:9c:40:4e:d6:ad:94:ab:7e:7b:
b5:fd:60:f7:a2:4b:b8:fe:31:ec:21:fb:78:ef:b7:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:E3:45:0F:1E:41:B6:B9:55:3A:8B:1C:10:A9:5F:62:77:74:56
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:3a:62:98:ef:4b:98:f9:c5:1b:d6:f8:6b:6e:09:30:19:
f3:d8:9f:c8:8b:d5:fb:fe:10:52:d9:ff:c8:96:33:55:85:4b:
90:18:80:ab:d9:3c:37:7f:2a:20:7b:d0:45:a2:b6:2b:04:61:
ca:bb:30:25:f8:5c:1f:cb:91:cc:c6:4b:f1:df:16:91:38:8a:
25:a9:26:c6:37:1b:e0:e6:97:78:56:c5:4d:9d:85:01:80:61:
14:2d:0f:15:75:71:cc:94:42:0c:a2:13:38:69:6a:d9:17:5f:
1e:43:f8:13:e8:a8:82:1f:ad:e5:db:c6:43:66:ac:1b:df:8c:
7a:39:55:92:2d:d4:c1:3b:f8:47:0e:38:47:15:b4:a2:9f:33:
53:0f:3a:ae:21:ef:59:4c:c3:59:ad:86:cf:a1:8c:80:b9:50:
ab:45:0d:02:f1:d0:b5:33:f2:77:da:53:f5:ec:d6:3f:55:76:
c2:97:67:39:28:e7:59:51:b5:1e:f4:79:a0:5d:da:62:00:46:
3f:e4:79:9b:73:aa:cc:c4:ea:64:e9:a7:10:c1:66:f0:c0:93:
20:7a:6f:37:71:2f:82:e6:c1:51:2a:40:e2:66:67:2a:4a:52:
7c:36:1e:6a:10:1f:8e:a0:e2:52:37:96:e8:e5:e0:90:ef:af:
3e:f8:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:57 2026 by rpki-client