Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: ncoXCLIB1lBz1s0vpYncIN+eWBhO0TPmQCxX3C2xNg0=
Subject key identifier: 53:07:AE:B5:A7:01:9E:FF:D0:DF:DA:D6:D2:2E:0A:E8:31:31:75:C5
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019EC3DC27756002F0FAD0E834DC6FC06DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 14E7
Signing time: Sun 14 Jun 2026 02:00:45 +0000
Manifest this update: Sun 14 Jun 2026 02:00:45 +0000
Manifest next update: Mon 15 Jun 2026 02:00:45 +0000
Files and hashes: 1: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
2: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: BxhZnw6bZt5Lu4YMhU53oKNavyVN9keFlDp8B6Zs8wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:27:75:60:02:f0:fa:d0:e8:34:dc:6f:c0:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Jun 14 02:00:45 2026 GMT
Not After : Jun 15 02:00:45 2026 GMT
Subject: CN=5307aeb5a7019effd0dfdad6d22e0ae8313175c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:c9:d5:a5:73:dc:0e:62:72:3b:50:7f:e5:
64:bd:df:8e:81:e8:b8:68:cb:a4:8f:9e:ee:84:cc:
20:fb:f0:38:f7:a2:08:ce:d0:e9:7d:8a:81:2f:ab:
77:04:a3:2b:8c:3f:a8:f0:c9:03:aa:f1:d1:1f:72:
2a:8e:8c:0e:29:e7:7e:58:b2:98:af:a6:e4:90:7c:
16:59:41:b7:49:14:0b:77:7a:7b:54:2a:75:f5:b5:
23:a4:cd:33:21:1c:77:1f:98:67:d7:e3:e1:56:cd:
68:46:1e:36:a8:4a:57:63:68:f9:4e:9d:1f:8d:00:
87:fe:e7:1e:99:12:a1:cc:41:16:86:b7:9b:e5:e7:
79:29:8d:0e:b5:7e:1b:20:a2:ed:7a:90:e7:5f:34:
81:85:d0:56:62:fd:77:58:78:ab:84:7f:a7:ee:6c:
ba:4d:b6:05:68:db:9f:ce:07:e8:93:e1:bf:8f:89:
b2:dc:1b:21:98:40:b6:01:93:97:6e:ef:71:0a:8e:
4b:6d:05:fe:ff:01:08:e9:15:d5:5f:4b:db:aa:13:
c2:b3:f5:da:03:2d:5c:5c:e7:0f:21:0e:ad:e0:36:
bb:c1:3c:e8:61:94:ad:49:fd:9a:41:e7:f9:f8:de:
38:de:ab:b4:17:71:81:a3:8b:92:ce:61:f1:71:ce:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:AE:B5:A7:01:9E:FF:D0:DF:DA:D6:D2:2E:0A:E8:31:31:75:C5
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:f3:28:ae:68:0a:34:15:80:89:c2:a4:7a:59:59:e8:de:
8c:58:28:ce:55:e8:e4:fa:49:c6:33:57:39:a6:5e:04:39:5c:
22:75:37:5a:8b:ea:6b:56:5d:21:57:c3:8d:bb:7f:e3:bb:d9:
32:9f:01:20:20:b2:71:80:09:34:9a:4b:b3:5a:dc:b8:ed:11:
db:cb:d2:88:c5:15:9f:6e:33:dc:a3:d6:0e:a4:66:d6:1f:89:
32:f6:23:6c:31:59:bc:09:21:4c:47:bf:9f:4c:4c:5f:1b:9e:
cd:40:36:f3:cb:4b:48:f5:81:77:99:a9:fb:d4:35:06:9f:3c:
b0:ae:ca:0c:80:29:69:e0:10:87:f1:47:f6:e0:bf:ea:e4:c8:
23:bb:c1:ee:09:1c:df:a3:7c:c7:ee:91:c3:88:6d:51:6c:51:
49:e2:f1:42:36:c3:f5:b7:03:2b:70:ac:35:7c:72:c2:98:4c:
06:63:89:3f:65:2d:5c:4f:7c:3b:5f:ab:77:1e:de:25:fa:94:
81:39:d3:4b:75:e8:b0:42:18:a9:3e:11:0d:b1:8b:36:c4:9c:
4c:cc:23:55:a6:fe:85:0f:13:39:54:9a:bf:51:6f:00:72:8c:
de:4c:d7:92:2f:12:07:e4:84:b2:d0:37:93:de:22:4c:5b:48:
53:0e:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:04 2026 by rpki-client