Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: pLn2Om1KQRe/OpKtR0GrFq2deqpvLTg21Z/F87cHh1g=
Subject key identifier: 36:DC:25:B7:1E:9E:EE:D5:79:DF:8E:6D:5F:1C:16:BF:DE:AE:53:B2
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019EC224B9EFA95B7223F295CB17C82CA1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1934
Signing time: Sat 13 Jun 2026 18:00:47 +0000
Manifest this update: Sat 13 Jun 2026 18:00:47 +0000
Manifest next update: Sun 14 Jun 2026 18:00:47 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 8ims1L6ppu/zSBfdrpXJ3TG7lYj3w7vLZrY6QtNPvHw=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:b9:ef:a9:5b:72:23:f2:95:cb:17:c8:2c:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Jun 13 18:00:47 2026 GMT
Not After : Jun 14 18:00:47 2026 GMT
Subject: CN=36dc25b71e9eeed579df8e6d5f1c16bfdeae53b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:c7:ca:39:25:74:85:dc:d5:1d:0f:2e:b1:
ff:80:f8:04:0a:99:50:ac:97:c1:a7:b8:84:c9:14:
e4:89:e5:2f:eb:5b:b4:df:00:87:8d:77:68:3e:cc:
ab:98:fc:3e:6c:2d:d4:72:9f:09:a3:c1:99:93:50:
a9:e9:34:43:eb:7d:c5:a4:50:e3:e1:94:73:bc:9a:
42:1e:80:45:fb:2b:aa:f8:0f:05:72:54:eb:38:63:
8d:7d:5a:7e:cd:72:69:6f:41:49:6d:11:fb:88:c4:
07:22:19:bb:69:a4:00:cc:c9:6c:ce:8c:2b:06:0d:
3c:77:84:49:0a:b4:ec:9f:c8:3d:10:7a:5b:7f:e5:
31:6a:f5:c2:9a:b1:e3:f8:47:04:11:30:01:e9:f4:
dc:f4:f9:fb:9e:80:88:f9:fc:5d:27:e4:59:f3:a3:
d3:4a:11:43:98:7e:d8:fe:88:c3:f3:15:40:98:b4:
44:85:44:0d:ca:6d:e8:80:79:a3:98:fa:ec:47:09:
8f:f2:af:8a:8d:40:bd:15:65:76:de:70:21:96:30:
77:29:e8:1c:3e:06:60:a9:27:79:79:f4:8e:18:d7:
7d:e6:3c:2c:f8:3c:13:88:4a:63:94:70:f6:05:69:
47:6e:fc:e4:14:17:5a:3c:49:2a:87:55:eb:d1:e7:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:25:B7:1E:9E:EE:D5:79:DF:8E:6D:5F:1C:16:BF:DE:AE:53:B2
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:4c:93:d9:22:23:9f:07:e6:6b:3b:20:e6:64:f5:ef:6d:
c6:84:e7:a0:92:29:b6:4c:f0:86:b3:e1:87:fb:7e:ef:4e:1b:
1d:27:a8:11:08:9a:98:f3:e2:52:09:32:05:2b:e3:79:f4:e8:
a7:e0:37:3f:3c:a6:4b:80:b4:d8:89:01:23:b0:a4:6f:b9:5c:
36:59:4a:c0:53:eb:57:77:db:4b:7c:e9:eb:33:d5:96:f7:4a:
14:2d:44:65:00:40:fe:31:f3:55:b3:6d:71:b4:46:69:a0:91:
20:cd:da:27:fb:8c:00:d0:85:f6:55:7b:5e:5a:97:12:f7:c7:
6e:b6:f4:e9:c0:e5:fa:8b:de:04:e1:bd:49:22:7f:b7:32:39:
6d:c6:9d:f1:55:8e:ff:bf:20:7a:b2:35:a3:b1:54:d6:3b:b7:
46:70:1f:6f:07:b2:18:5a:3c:c2:eb:b8:05:76:cb:c9:6b:36:
d7:32:dc:22:bd:4f:fd:55:61:b3:fd:32:f9:9d:d1:6c:dc:8b:
25:78:75:73:1f:0c:1a:8c:31:f9:d2:dd:d1:7d:de:b0:40:61:
31:dd:aa:78:f2:a8:14:13:95:7b:29:eb:4e:f3:3f:e9:b3:f1:
79:7b:df:0d:66:76:d2:c3:e8:8f:86:27:e6:ef:bd:b2:c3:cd:
70:49:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:04 2026 by rpki-client