Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: Npi3SB1xs7kdLm4shA9vCTn5M5zOwMtgzseot+v9u+Q=
Subject key identifier: 81:27:A7:EA:00:1F:1D:86:E3:51:20:A0:C9:B6:25:7D:83:6C:22:97
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019EC17F8AFD4932F6608D4F552F7D4F36D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 15:00:21 +0000
Manifest this update: Sat 13 Jun 2026 15:00:21 +0000
Manifest next update: Sun 14 Jun 2026 15:00:21 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: 8zBLlMlPSPCA2Q/RXmb1i0QX3vafmOG9M4vCGWyauQg=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:8a:fd:49:32:f6:60:8d:4f:55:2f:7d:4f:36:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jun 13 15:00:21 2026 GMT
Not After : Jun 14 15:00:21 2026 GMT
Subject: CN=8127a7ea001f1d86e35120a0c9b6257d836c2297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:73:c9:40:33:d4:16:94:b2:29:f1:d8:76:
f8:00:73:fc:90:e8:82:78:a9:c7:db:4e:2d:66:3c:
ed:4b:7c:00:6a:a1:c2:04:1e:64:75:57:c9:ee:4e:
8d:6e:55:a7:13:e3:f5:fb:f5:91:8a:25:e8:7f:bb:
85:a1:22:28:f1:43:d0:9e:38:67:29:bf:cb:19:76:
6a:36:c1:ec:06:b2:5e:d8:67:b4:62:5e:a1:21:06:
ed:91:69:8c:be:5c:2e:6c:27:1c:83:cc:c3:8e:7d:
67:14:97:4c:3f:b0:63:01:2f:c9:c4:bc:bf:cc:f4:
00:8b:af:9d:fd:bd:ef:6a:00:56:d9:38:e0:f9:68:
88:2a:68:6f:14:73:d7:60:82:51:93:d6:60:57:6c:
50:67:ce:2c:65:13:0e:36:2f:41:d3:37:59:15:d0:
3a:5f:c7:10:1a:17:21:57:c7:4a:ed:22:4d:ae:58:
bd:92:fb:b6:ea:dc:8a:2e:3d:a7:15:8d:ed:02:a3:
c6:14:6a:00:9d:fe:23:d2:0a:c4:d8:01:3d:f3:8a:
70:23:68:57:fc:48:9f:24:99:75:e3:e9:96:e9:19:
ea:ce:86:50:4b:71:7f:49:d7:05:3f:37:59:50:1a:
c9:8d:6c:66:d7:28:1f:0a:5d:67:2c:be:5d:a2:e5:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:A7:EA:00:1F:1D:86:E3:51:20:A0:C9:B6:25:7D:83:6C:22:97
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:1a:d3:8f:f5:c4:2d:b7:56:a3:88:38:b2:1f:b3:94:c8:
9b:af:9f:b0:aa:71:92:48:23:f2:ae:ff:38:2e:82:04:d5:b7:
8f:44:b5:c5:df:29:ae:57:20:87:8c:f1:8d:3c:dc:f5:4b:a4:
a4:17:e9:89:87:bd:08:f3:5c:68:4f:32:b7:28:94:20:5e:41:
70:0d:91:42:4a:fb:5c:f9:f5:a8:9d:55:e0:db:95:1d:cd:f8:
9f:43:19:5d:eb:8b:60:fa:b8:a1:56:41:42:97:cd:f9:57:a2:
3f:a2:96:c4:31:2f:ed:71:8a:82:77:63:d1:22:9f:88:ad:1e:
10:f0:5e:1c:e4:d9:a2:dd:25:b9:79:63:83:51:20:3e:e3:2d:
c8:bb:f8:5f:46:a5:e5:29:12:1c:3f:d9:db:fc:cb:15:4c:8f:
bf:17:79:a9:a7:45:e5:0a:d5:af:c5:30:6f:5e:af:d3:15:79:
85:27:aa:91:3c:12:96:70:b4:aa:0a:d1:e7:cf:f9:c3:46:a9:
d7:c5:04:ba:65:c2:78:6b:5a:66:4e:bd:8d:91:bc:2e:43:fc:
a7:bb:47:4d:27:81:53:d2:b1:17:01:fd:fc:5c:54:d5:8b:e7:
a6:b8:da:7f:e9:9e:4a:af:3a:9f:2b:6f:86:16:ed:d9:6b:fe:
3d:3d:c4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf4r9STL2YI1PVS99TzbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5
ZWMxNjkwHhcNMjYwNjEzMTUwMDIxWhcNMjYwNjE0MTUwMDIxWjAzMTEwLwYDVQQD
Eyg4MTI3YTdlYTAwMWYxZDg2ZTM1MTIwYTBjOWI2MjU3ZDgzNmMyMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xzyUAz1BaUsinx2Hb4AHP8kOiC
eKnH204tZjztS3wAaqHCBB5kdVfJ7k6NblWnE+P1+/WRiiXof7uFoSIo8UPQnjhn
Kb/LGXZqNsHsBrJe2Ge0Yl6hIQbtkWmMvlwubCccg8zDjn1nFJdMP7BjAS/JxLy/
zPQAi6+d/b3vagBW2Tjg+WiIKmhvFHPXYIJRk9ZgV2xQZ84sZRMONi9B0zdZFdA6
X8cQGhchV8dK7SJNrli9kvu26tyKLj2nFY3tAqPGFGoAnf4j0grE2AE984pwI2hX
/EifJJl14+mW6RnqzoZQS3F/SdcFPzdZUBrJjWxm1ygfCl1nLL5douX7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEnp+oAHx2G41EgoMm2JX2DbCKXMB8GA1UdIwQY
MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt
NWYxYjY5MDQ4ZmUyLzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy
LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeysa04/1
xC23VqOIOLIfs5TIm6+fsKpxkkgj8q7/OC6CBNW3j0S1xd8prlcgh4zxjTzc9Uuk
pBfpiYe9CPNcaE8ytyiUIF5BcA2RQkr7XPn1qJ1V4NuVHc34n0MZXeuLYPq4oVZB
QpfN+VeiP6KWxDEv7XGKgndj0SKfiK0eEPBeHOTZot0luXljg1EgPuMtyLv4X0al
5SkSHD/Z2/zLFUyPvxd5qadF5QrVr8Uwb16v0xV5hSeqkTwSlnC0qgrR58/5w0ap
18UEumXCeGtaZk69jZG8LkP8p7tHTSeBU9KxFwH9/FxU1Yvnprjaf+meSq86nytv
hhbt2Wv+PT3EBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:09 2026 by rpki-client