Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: G2LnBObOt7/w/0/fTphYxOC/zgLH8VQ5kWpjWS1Z5Tw=
Subject key identifier: A5:B3:01:57:E0:CE:D2:B9:A0:34:00:2E:B4:2F:48:13:64:66:9B:FD
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019EBE7EF0B7438E2CF11B811C924FD625EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 09F2
Signing time: Sat 13 Jun 2026 01:00:50 +0000
Manifest this update: Sat 13 Jun 2026 01:00:50 +0000
Manifest next update: Sun 14 Jun 2026 01:00:50 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: W3Gc4CG9W0GunvUK05sRnaMuajiQHogQaCPh30ebveA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:f0:b7:43:8e:2c:f1:1b:81:1c:92:4f:d6:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jun 13 01:00:50 2026 GMT
Not After : Jun 14 01:00:50 2026 GMT
Subject: CN=a5b30157e0ced2b9a034002eb42f481364669bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:ac:64:74:d0:3b:e8:9f:4c:12:55:ca:86:
c1:5d:58:73:e6:80:22:06:db:41:00:37:2c:ae:07:
be:54:de:84:e1:d3:54:4e:d0:6a:a0:a0:7a:62:38:
74:a5:d4:cf:04:11:0f:db:93:20:eb:bf:e7:95:7d:
31:c3:79:d2:86:fe:fe:5a:0b:11:59:48:dc:36:14:
83:bd:4e:37:de:e2:a5:a7:5d:6c:79:e0:de:38:97:
d2:24:71:7b:2f:32:54:33:e4:79:9a:b6:61:78:88:
38:85:1a:19:c2:f9:ce:d3:a5:9d:a4:94:a8:9a:32:
2f:b5:90:5c:1c:bc:31:46:e4:b1:ae:72:20:25:28:
0c:67:d3:68:6e:41:4e:1d:7d:1e:07:3d:ed:91:ef:
0b:bf:58:c0:a4:aa:4c:b9:ee:b5:f6:d9:6e:9a:c8:
c1:8f:89:b2:fd:59:f5:20:04:71:c3:c5:49:af:1e:
fc:0c:a3:fa:9c:21:1c:68:d3:a1:45:6c:5f:53:bf:
c2:bc:b2:92:0e:bb:aa:12:5c:fd:11:da:53:51:03:
5c:34:b3:2d:2b:0b:b9:01:96:8a:c6:aa:af:96:e8:
d7:ad:c0:d0:97:67:5e:33:3b:29:23:b2:6f:01:03:
3c:71:d3:44:fb:a9:35:2f:10:03:9e:28:b3:37:15:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:01:57:E0:CE:D2:B9:A0:34:00:2E:B4:2F:48:13:64:66:9B:FD
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:26:7d:e0:78:ef:db:16:3d:26:d8:1b:8c:b9:8d:3c:2d:51:
d0:2f:9f:ae:da:99:34:78:af:61:94:5e:b2:cf:3c:14:72:8d:
4d:e6:61:30:6e:6f:6b:d1:96:8d:00:aa:b7:f0:28:c4:3e:e8:
06:20:a5:53:2f:20:57:79:71:3a:75:80:1a:9e:22:02:cf:0e:
16:47:f0:98:b8:e3:0c:e3:af:c1:32:9d:66:12:9b:f7:d6:46:
4c:92:b3:ec:2e:34:f9:54:3d:c4:4d:b0:ba:ed:18:97:82:28:
c8:1e:48:11:75:74:35:96:f2:93:5a:b9:13:09:5f:27:95:97:
11:fb:4e:21:f8:6f:21:d4:fc:d5:81:32:7a:43:a1:3b:99:3e:
cb:98:f8:67:1f:c8:d1:b5:d4:df:9b:68:98:a3:ee:54:eb:08:
e4:ac:e9:e6:45:f4:ef:ee:bf:70:12:ae:61:36:90:07:f1:4f:
56:6b:90:54:cf:0e:13:24:81:3b:e2:44:66:1a:7d:e2:0e:1b:
ff:ba:b5:5c:41:a9:1b:e2:ea:7c:f3:31:03:43:f9:14:0d:2a:
36:2c:12:b5:a4:29:bb:d1:76:8e:aa:8d:8f:a4:4a:75:c6:81:
f1:7b:61:c1:a5:07:e5:3a:bd:76:15:57:5b:5d:b8:44:04:cb:
70:1b:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:56 2026 by rpki-client