Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: u/YLAw3syz/bRWkSRWfzxbZtM/xj70B7dSzRY25/yqw=
Subject key identifier: 31:67:6F:3B:D8:5A:2E:AD:EE:6A:D6:5A:D1:D1:A1:64:67:1A:BE:19
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019EC3A4CE5D5F9C24920403C15625529CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 148B
Signing time: Sun 14 Jun 2026 01:00:18 +0000
Manifest this update: Sun 14 Jun 2026 01:00:18 +0000
Manifest next update: Mon 15 Jun 2026 01:00:18 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: QNcspErF9tuvh6iD13nICNhW85xskeIU1H6R46PMrbw=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:ce:5d:5f:9c:24:92:04:03:c1:56:25:52:9c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jun 14 01:00:18 2026 GMT
Not After : Jun 15 01:00:18 2026 GMT
Subject: CN=31676f3bd85a2eadee6ad65ad1d1a164671abe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:ac:df:51:60:85:39:b1:89:e9:9d:e1:81:
5e:46:dd:0e:69:2d:ed:27:61:05:ed:78:9b:8c:f5:
05:44:58:41:5a:11:25:78:f9:60:56:d5:63:43:cc:
ba:f3:53:b6:f3:bc:7e:19:25:43:5d:4c:a8:9d:aa:
98:87:3f:cb:6d:ba:67:a4:0e:45:9b:dd:e7:4a:fe:
17:62:3c:0e:fe:9f:6c:05:4c:df:41:4b:9d:3c:b3:
8d:2e:57:ff:08:d3:6f:b0:8f:6a:50:e4:ef:5e:f3:
f0:eb:43:0d:40:96:b1:5f:68:ad:e1:05:e7:9c:93:
fd:0c:ad:60:7b:d8:98:46:07:84:f9:87:64:b0:59:
ef:d9:f9:84:db:af:e9:ee:96:1d:1f:99:c4:52:38:
e7:8b:d5:c2:a9:3e:58:9c:8d:64:54:62:f3:37:7e:
75:cb:1a:a2:48:d5:17:a9:d9:46:ff:37:f2:69:7c:
1f:7e:87:c6:7f:39:a6:f6:e0:f7:87:38:57:e5:df:
bb:25:01:8d:60:0b:8f:c9:3d:91:91:f2:a8:16:91:
9a:63:98:26:4d:29:e5:b7:31:e9:89:d2:7d:89:62:
6c:06:19:34:d2:54:e1:6f:ef:38:38:ee:8b:5b:6d:
17:01:04:3c:3d:f1:41:cc:8c:01:f5:41:e9:ec:dc:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:6F:3B:D8:5A:2E:AD:EE:6A:D6:5A:D1:D1:A1:64:67:1A:BE:19
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:a9:a2:59:2c:0a:c7:a1:c3:68:eb:dc:99:b8:a5:ce:bd:
de:ca:40:78:ae:35:9a:68:a8:93:df:8e:30:df:e4:83:00:d5:
c7:60:fc:fc:9e:42:7c:a9:f3:a0:bf:3b:84:7e:96:a0:0a:e3:
3b:40:01:50:e4:5b:e4:6f:42:27:6e:e2:c1:e1:ac:83:63:e6:
4f:57:01:49:f8:2f:72:95:7d:71:55:e1:a7:18:9f:86:ca:1c:
23:7b:1e:14:19:05:fa:ea:37:cd:f3:7c:8b:69:48:c5:9d:84:
23:f8:c3:10:98:9b:01:ec:27:18:f8:fb:54:55:1a:04:39:1e:
a8:97:a6:82:24:56:2c:f9:e2:31:76:8a:ba:38:ca:b4:62:e3:
4e:c7:44:f1:42:7a:dd:9b:bc:03:02:18:a3:3b:49:29:ed:2a:
7a:dc:81:a9:5b:8a:db:73:72:93:27:97:4a:e6:14:a5:f0:56:
e6:87:22:bc:33:83:63:2b:ac:7d:f2:63:41:4f:b0:8b:01:ac:
06:99:73:05:34:50:7c:c3:72:92:c8:a7:4b:82:39:52:2a:68:
6d:db:60:4f:cf:d9:20:32:e4:68:af:56:12:56:dd:f4:16:21:
4a:6b:f3:9c:61:3d:78:e0:6e:5c:4e:d9:14:25:84:e3:95:da:
f1:0d:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:05 2026 by rpki-client