Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: hlQvM5qVMhWnpKKjzDaezcMcai2E3MiplcvX6WGhShI=
Subject key identifier: C2:E1:6F:CE:C0:1B:00:10:06:7D:DD:1E:E6:12:A6:39:B8:AD:2B:44
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019EC1122F7B15ADE1CF1225E646D1585944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0651
Signing time: Sat 13 Jun 2026 13:00:54 +0000
Manifest this update: Sat 13 Jun 2026 13:00:54 +0000
Manifest next update: Sun 14 Jun 2026 13:00:54 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: Hechua++pvtcNQuq9/eILEZ7XUEsdMf7ToUIoXT0e48=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:2f:7b:15:ad:e1:cf:12:25:e6:46:d1:58:59:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jun 13 13:00:54 2026 GMT
Not After : Jun 14 13:00:54 2026 GMT
Subject: CN=c2e16fcec01b0010067ddd1ee612a639b8ad2b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:de:f6:72:d4:6b:47:93:eb:93:29:5c:a4:
d1:58:96:7b:63:f0:94:e2:7f:96:51:9c:08:f5:95:
33:4b:36:30:14:7f:0d:c2:0c:e3:8e:34:e0:c9:d8:
1e:6d:db:37:25:27:40:21:a2:7a:d5:bd:10:ed:e6:
51:cd:79:e1:d4:95:5f:7d:4b:f3:a9:3c:9f:ab:a7:
2a:99:27:36:c1:1f:d6:2c:d1:22:4b:af:a4:28:99:
15:35:cb:b9:2d:7c:e4:bb:af:91:41:01:4a:bd:55:
09:0e:a4:bf:60:41:70:b5:a7:97:fc:59:b5:8c:e8:
cb:7e:24:73:ec:c1:95:8f:ab:54:29:90:e6:eb:6b:
9b:64:51:46:8a:c7:09:f6:3f:69:df:bd:fb:6a:d8:
05:00:fa:a4:ab:c6:9a:de:af:ae:9c:97:c7:dc:d2:
40:b1:34:ac:2d:a4:c5:80:b1:e6:50:cf:8e:0a:e9:
f8:e8:ba:e3:30:68:f5:26:ae:28:61:57:58:c8:60:
bf:0f:11:dd:7c:81:a2:68:61:41:44:e3:7b:ee:1b:
8c:a6:9a:3e:5c:37:b4:81:33:45:ed:12:0b:32:24:
90:b6:b1:b1:a0:82:26:3b:7e:b4:47:b1:ab:eb:ab:
2c:45:2f:38:8b:c7:36:72:d0:79:bc:25:5a:f4:36:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:6F:CE:C0:1B:00:10:06:7D:DD:1E:E6:12:A6:39:B8:AD:2B:44
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6e:79:9f:20:e2:03:dd:50:7f:b8:9f:c8:e9:9b:4b:5c:cb:
cf:55:29:04:b6:6a:9b:9c:bd:d3:c7:6b:ff:54:92:ca:64:66:
51:93:b3:a4:fa:0f:f5:be:5d:b2:3e:c6:60:0f:99:f2:97:7c:
2d:74:bc:35:55:f4:f2:53:c0:56:ca:89:89:0c:ec:fc:0f:7e:
05:2e:18:65:68:ad:e0:1b:89:15:4d:65:c6:7c:10:7f:9e:93:
f1:38:5c:c6:20:1a:50:b6:68:78:a1:1c:9f:15:e9:fc:d6:7c:
26:05:76:8c:6a:8c:9d:0a:c2:c3:e1:38:ff:1e:6f:f6:17:44:
24:3b:5f:09:2f:b1:f8:39:5b:e6:2f:f9:23:65:36:48:b2:73:
bb:61:be:4a:10:48:2c:c2:10:49:f7:7a:f4:2c:d3:61:6a:ee:
13:45:7f:1c:86:a7:db:18:7b:eb:4c:d7:1f:72:7f:2a:67:08:
dc:17:f3:ca:82:3f:38:ce:1f:c4:4d:e4:84:19:2d:bd:a5:86:
73:9f:29:c1:b2:7e:a2:9a:cf:21:13:ae:63:fd:0f:7d:b7:a1:
9f:cc:7c:9e:c6:e5:89:8b:bd:dc:d2:38:79:e9:aa:fb:16:72:
82:f3:ba:48:9a:32:40:88:51:ab:3d:21:a3:9b:39:00:71:97:
f4:7f:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:25 2026 by rpki-client