Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: 3NRIPZEwvPiVcPyM13Q5l85r+7zrwzPN82OmOzeZd2U=
Subject key identifier: 9E:00:21:51:11:F6:B8:A5:18:C4:18:90:01:1F:FA:74:AA:04:03:F1
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019EBF91A6C219D9C29C6F77963AD3EFD42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0FEF
Signing time: Sat 13 Jun 2026 06:00:54 +0000
Manifest this update: Sat 13 Jun 2026 06:00:54 +0000
Manifest next update: Sun 14 Jun 2026 06:00:54 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: C4q92mPXYmi9ziuqN3iV4IpRau4lh4aIJ3rHk4qnqFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:a6:c2:19:d9:c2:9c:6f:77:96:3a:d3:ef:d4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jun 13 06:00:54 2026 GMT
Not After : Jun 14 06:00:54 2026 GMT
Subject: CN=9e00215111f6b8a518c41890011ffa74aa0403f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:e4:e3:65:7c:0b:57:79:50:e9:9a:7a:04:
79:4f:45:6d:de:37:bc:d0:7d:9a:95:e6:a7:d6:25:
bf:c0:99:4c:b0:1a:58:13:b6:75:3d:35:4d:d0:ae:
a0:7a:2e:17:53:f9:04:f5:d8:ec:46:ec:7b:dd:ec:
8b:61:0f:3c:d9:fd:f9:cd:43:5a:62:81:96:59:26:
4c:64:ce:b3:ad:e6:35:14:8e:e3:eb:a5:1f:06:04:
8b:ba:d0:e4:57:ad:35:dd:1d:77:96:3b:4b:44:40:
bf:7e:38:cb:5d:b7:a6:4e:47:fd:fe:b1:6f:88:62:
0e:b4:a1:4d:99:ea:ad:77:e7:b4:a8:de:36:0a:ab:
e6:da:7f:b5:b3:ea:67:e7:47:77:e4:3a:ae:03:18:
1b:fd:28:cb:b1:95:92:d9:d4:d2:cc:27:23:80:01:
6f:03:33:20:78:22:98:b6:17:db:1e:3c:f9:23:b8:
72:84:18:9c:6e:25:7c:53:27:37:58:ee:ce:2a:bc:
86:51:76:55:13:d5:f5:e1:1b:b9:91:75:b3:0d:cb:
27:c3:20:ce:f2:3c:a0:34:32:0b:17:8c:22:f3:cd:
b4:ff:ac:29:bf:47:fb:63:59:cd:0e:71:a4:0d:69:
73:e1:0e:4d:42:6a:15:f9:ed:04:46:c5:00:4a:b3:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:00:21:51:11:F6:B8:A5:18:C4:18:90:01:1F:FA:74:AA:04:03:F1
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c2:40:73:05:1c:f9:65:27:cd:3d:76:b2:5a:1e:6c:42:96:
8d:30:fa:ed:ff:b6:48:ac:63:6e:31:f1:8f:16:9c:ff:36:4d:
2c:3f:6d:1a:c2:77:c7:60:a2:33:a0:11:89:57:b9:aa:6f:eb:
f0:ef:06:7e:92:b9:5e:a9:5a:ce:b4:c9:5e:f0:d3:89:91:3f:
cd:7b:f2:f2:4f:ba:b4:ed:ab:24:bd:89:05:d0:17:32:3c:b2:
63:33:88:7c:fa:14:e8:19:3d:ba:60:d8:7d:58:36:48:1e:18:
ff:6d:19:e7:29:86:f1:72:10:00:be:7b:e3:a2:d3:68:3e:e6:
83:bc:7c:9f:ab:9b:c1:42:ba:58:1c:a3:cb:5e:a8:4d:dc:24:
7d:ed:8a:ea:de:39:f8:e4:f7:7f:19:60:fa:fe:94:64:90:93:
3e:9f:a0:6e:35:e7:b6:61:db:5e:7a:18:9d:c4:6a:2d:3a:6f:
d2:d5:16:6a:7b:2a:49:3a:28:77:89:c3:5d:58:bc:3f:04:53:
6f:8d:01:01:e9:25:db:9e:2b:a0:21:f9:f0:46:3c:68:e3:67:
4b:6c:c5:33:5c:87:16:b3:52:4b:cc:e9:81:78:36:07:c5:3c:
d9:a2:7c:53:9b:0a:d7:52:5a:68:09:86:7f:f8:25:b3:30:69:
eb:fb:2d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kabCGdnCnG93ljrT79QrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2
MTljY2QwHhcNMjYwNjEzMDYwMDU0WhcNMjYwNjE0MDYwMDU0WjAzMTEwLwYDVQQD
Eyg5ZTAwMjE1MTExZjZiOGE1MThjNDE4OTAwMTFmZmE3NGFhMDQwM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7fk42V8C1d5UOmaegR5T0Vt3je8
0H2alean1iW/wJlMsBpYE7Z1PTVN0K6gei4XU/kE9djsRux73eyLYQ882f35zUNa
YoGWWSZMZM6zreY1FI7j66UfBgSLutDkV6013R13ljtLREC/fjjLXbemTkf9/rFv
iGIOtKFNmeqtd+e0qN42Cqvm2n+1s+pn50d35DquAxgb/SjLsZWS2dTSzCcjgAFv
AzMgeCKYthfbHjz5I7hyhBicbiV8Uyc3WO7OKryGUXZVE9X14Ru5kXWzDcsnwyDO
8jygNDILF4wi8820/6wpv0f7Y1nNDnGkDWlz4Q5NQmoV+e0ERsUASrP1vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4AIVER9rilGMQYkAEf+nSqBAPxMB8GA1UdIwQY
MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt
ZWQzNjQ3N2I5NDgwLzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw
LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8JAcwUc
+WUnzT12sloebEKWjTD67f+2SKxjbjHxjxac/zZNLD9tGsJ3x2CiM6ARiVe5qm/r
8O8GfpK5XqlazrTJXvDTiZE/zXvy8k+6tO2rJL2JBdAXMjyyYzOIfPoU6Bk9umDY
fVg2SB4Y/20Z5ymG8XIQAL5746LTaD7mg7x8n6ubwUK6WByjy16oTdwkfe2K6t45
+OT3fxlg+v6UZJCTPp+gbjXntmHbXnoYncRqLTpv0tUWansqSTood4nDXVi8PwRT
b40BAekl254roCH58EY8aONnS2zFM1yHFrNSS8zpgXg2B8U82aJ8U5sK11JaaAmG
f/glszBp6/styw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:30 2026 by rpki-client