Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: 5RD2XecZxVUzWfwKOKejX6MWeS0yfGEX843r2fFnAN8=
Subject key identifier: 7A:EF:98:2B:66:DF:3F:BC:4A:AC:03:13:9A:ED:8E:A8:6A:26:06:13
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 019EC111CA86879E17ECE341B32730DDBD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: 01E5
Signing time: Sat 13 Jun 2026 13:00:29 +0000
Manifest this update: Sat 13 Jun 2026 13:00:29 +0000
Manifest next update: Sun 14 Jun 2026 13:00:29 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: pPh9xQJqt/IF3XWsbYM3CIAbKfWeU8msvNZsgaWBPVU=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:ca:86:87:9e:17:ec:e3:41:b3:27:30:dd:bd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Jun 13 13:00:29 2026 GMT
Not After : Jun 14 13:00:29 2026 GMT
Subject: CN=7aef982b66df3fbc4aac03139aed8ea86a260613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:5c:0b:f0:24:85:5f:ca:c1:18:1b:4a:7f:
8b:06:56:6f:11:1e:bb:dc:81:73:b7:a3:61:36:49:
3b:b7:48:75:73:b0:de:c7:ad:d0:8f:21:34:55:3c:
49:b8:b3:a0:56:f5:48:2a:fd:f7:2d:98:2f:e4:39:
bb:8a:a6:8b:b8:38:22:f2:62:8c:09:db:f3:45:9a:
b0:1b:af:ce:8e:d4:3a:95:ad:55:bf:2b:61:4e:64:
4f:e3:a9:29:b1:22:4e:df:5b:b9:66:27:b6:dc:74:
14:56:af:5a:ae:c1:07:36:b4:66:59:17:5d:3d:56:
8a:81:d4:1d:fe:00:20:63:3b:fb:9e:ca:e2:dd:96:
2f:67:f1:52:4e:70:a6:88:36:73:de:53:13:6f:25:
4b:1e:f1:c8:c2:cd:90:26:fd:f3:39:41:91:3c:6a:
71:ab:04:be:3d:9f:f2:ae:a4:96:53:c4:7d:63:60:
75:0f:e7:57:62:c5:5f:84:00:ba:91:03:c4:31:df:
68:96:da:6c:47:be:45:6b:b5:01:5e:b8:f6:8f:31:
f0:a0:60:d7:7f:9e:33:af:39:45:48:e3:ce:9e:ca:
41:fd:a1:89:20:9d:2d:ca:a8:d7:bd:28:52:17:a5:
46:0d:bc:58:b2:2c:b7:0f:22:20:7b:07:08:5b:17:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:98:2B:66:DF:3F:BC:4A:AC:03:13:9A:ED:8E:A8:6A:26:06:13
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:45:3b:59:b9:81:f7:33:92:0f:ad:3b:b0:5c:60:20:39:
50:a2:4d:3e:9c:db:02:bf:5b:aa:fb:a2:ba:03:e8:9d:6a:7e:
11:0a:65:f4:d0:00:2b:ed:49:24:db:e8:7b:72:a1:5d:a8:a3:
cc:86:3f:60:0a:df:03:14:75:fa:ee:6d:97:12:3d:01:bb:71:
16:99:7a:38:45:af:77:86:d1:09:59:8d:8d:f6:39:4f:36:6d:
f2:ff:9b:ed:32:c1:3c:5d:53:06:ae:2f:73:5a:5e:db:1c:7e:
30:02:09:f5:66:7c:ae:38:93:62:c5:b6:18:ca:07:6c:db:48:
d9:79:08:f5:d7:d1:b7:76:57:8d:5f:12:c0:1a:09:9d:10:16:
56:11:c6:9c:5e:52:ca:a8:db:f8:26:5b:33:19:92:be:f2:96:
ec:65:ca:67:70:57:90:06:aa:29:e6:75:d7:60:e0:e0:65:69:
f1:45:e2:7d:20:fa:63:dd:72:e8:b7:39:1b:95:9e:74:95:4c:
0a:f8:c7:a9:27:76:b6:f3:8b:59:0e:24:c4:49:9e:0d:73:93:
e8:9a:73:de:c0:73:d2:72:75:9c:f5:48:e9:ca:60:b8:2e:54:
ab:38:af:64:af:25:f8:da:79:19:f4:34:f0:94:25:e3:0d:1d:
db:79:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:21 2026 by rpki-client