Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: QGs2D7kiUfVNKRT7U6Ut8Mcc5s6QnDnLBCy5Lyz+tkc=
Subject key identifier: CF:DA:E2:72:52:FB:35:F9:75:0D:F1:FD:A8:E3:30:CF:88:B7:F5:ED
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 019ED575599C39A6FDD33B2885FA2F43658B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 18FC
Signing time: Wed 17 Jun 2026 12:01:38 +0000
Manifest this update: Wed 17 Jun 2026 12:01:38 +0000
Manifest next update: Thu 18 Jun 2026 12:01:38 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: MH27qqjjAHhjvpS97hQNuc3pHAbZCNp9ppwV6w5OHCU=)
2: ekViUfVjeX96GOzSolN__8-4A4k.roa (hash: YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=)
3: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (hash: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:75:59:9c:39:a6:fd:d3:3b:28:85:fa:2f:43:65:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Jun 17 12:01:38 2026 GMT
Not After : Jun 18 12:01:38 2026 GMT
Subject: CN=cfdae27252fb35f9750df1fda8e330cf88b7f5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:bd:ad:6b:6c:61:02:38:68:1f:98:9a:f8:
36:21:4b:78:e4:b0:78:13:69:98:77:71:22:75:aa:
a0:93:34:58:12:cc:8a:df:25:87:9c:32:48:3a:eb:
ba:03:33:78:e7:50:e6:15:53:a1:a8:19:6a:0f:25:
c2:96:b0:06:0c:0d:e0:34:7a:64:0a:65:a5:28:9a:
b0:63:3e:19:a0:8b:5b:22:b6:97:9f:0f:a3:94:51:
26:b2:7e:9b:41:6c:f1:1b:a4:f6:77:d1:a9:57:23:
b6:32:62:ec:8d:34:94:8e:e1:e9:4c:ca:e9:43:45:
d0:5f:4c:a1:99:a2:1a:38:f7:52:bd:49:0d:f9:0b:
21:de:da:b6:75:a5:9a:16:56:ab:46:30:8b:53:77:
d0:85:40:50:b5:e4:cb:19:e7:67:cf:5c:48:73:3d:
a8:09:36:03:55:62:c7:fe:09:7d:1a:7c:36:54:eb:
71:b2:fd:04:f1:7a:41:36:ec:f0:88:2a:da:d6:be:
3d:14:4e:db:32:ed:d2:52:8b:99:c0:18:18:6f:bf:
87:77:eb:23:7c:7a:25:16:72:6e:be:d4:3d:ef:03:
41:76:78:07:a9:ff:63:d8:f3:9b:00:3a:21:a7:dc:
ff:80:19:85:29:f4:d4:83:88:80:a9:24:0c:66:9c:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:E2:72:52:FB:35:F9:75:0D:F1:FD:A8:E3:30:CF:88:B7:F5:ED
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6f:56:e1:91:92:ef:dd:08:2e:ae:b1:ce:ef:14:9d:1e:66:
89:07:14:fa:6f:90:5d:17:ae:8c:84:b2:69:ea:92:95:bb:69:
ee:ad:25:68:ae:c4:f5:4e:1d:6b:74:bb:84:ea:24:2c:84:8a:
3f:c7:85:fc:3c:88:b6:46:3a:0e:fd:56:15:ce:72:f8:9b:66:
27:4e:29:81:8e:57:94:c9:84:7e:9b:cc:60:59:bd:9f:72:a7:
62:9e:69:6a:b1:c4:cb:00:c5:ba:53:9f:3f:a8:d3:c3:bc:a6:
4a:f7:e7:c2:08:74:3c:45:1a:67:99:4c:4b:81:d0:de:39:50:
98:0d:a5:7f:ca:d1:26:a1:37:37:57:db:2f:d8:05:02:f2:08:
2d:31:3c:d1:1f:ff:94:b4:e7:66:74:9c:da:ba:24:42:bf:fb:
05:d7:f7:30:4a:93:6a:c7:04:13:99:ca:7b:5c:ba:db:4f:17:
54:35:b3:18:0c:46:00:a8:0b:ee:db:cd:d5:45:cc:08:8d:4a:
53:a7:02:11:e5:ba:cd:59:9f:c3:b7:b1:1e:a7:73:09:62:ec:
53:0b:c4:c6:cd:4f:ac:39:57:d8:f2:c6:39:d4:c9:6f:d6:f5:
3f:54:e0:ba:07:12:51:7b:d9:bf:27:16:20:78:bf:48:9f:e2:
4e:60:4c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VdVmcOab90zsohfovQ2WLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm
ZjdkNDQwHhcNMjYwNjE3MTIwMTM4WhcNMjYwNjE4MTIwMTM4WjAzMTEwLwYDVQQD
EyhjZmRhZTI3MjUyZmIzNWY5NzUwZGYxZmRhOGUzMzBjZjg4YjdmNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1be9rWtsYQI4aB+Ymvg2IUt45LB4
E2mYd3EidaqgkzRYEsyK3yWHnDJIOuu6AzN451DmFVOhqBlqDyXClrAGDA3gNHpk
CmWlKJqwYz4ZoItbIraXnw+jlFEmsn6bQWzxG6T2d9GpVyO2MmLsjTSUjuHpTMrp
Q0XQX0yhmaIaOPdSvUkN+Qsh3tq2daWaFlarRjCLU3fQhUBQteTLGednz1xIcz2o
CTYDVWLH/gl9Gnw2VOtxsv0E8XpBNuzwiCra1r49FE7bMu3SUouZwBgYb7+Hd+sj
fHolFnJuvtQ97wNBdngHqf9j2PObADohp9z/gBmFKfTUg4iAqSQMZpyf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/a4nJS+zX5dQ3x/ajjMM+It/XtMB8GA1UdIwQY
MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt
ZjBlZDhmZTgyYjk3LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3
LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG9W4ZGS
790ILq6xzu8UnR5miQcU+m+QXReujISyaeqSlbtp7q0laK7E9U4da3S7hOokLISK
P8eF/DyItkY6Dv1WFc5y+JtmJ04pgY5XlMmEfpvMYFm9n3KnYp5parHEywDFulOf
P6jTw7ymSvfnwgh0PEUaZ5lMS4HQ3jlQmA2lf8rRJqE3N1fbL9gFAvIILTE80R//
lLTnZnSc2rokQr/7Bdf3MEqTascEE5nKe1y6208XVDWzGAxGAKgL7tvN1UXMCI1K
U6cCEeW6zVmfw7exHqdzCWLsUwvExs1PrDlX2PLGOdTJb9b1P1TgugcSUXvZvycW
IHi/SJ/iTmBMFA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 16:39:14 2026 by rpki-client