Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: A0k7RnyGSX3PPTf4MCIYuAQAQOE9+hyGKKkfTtXo/ag=
Subject key identifier: 3E:95:6C:91:D6:77:1C:C2:76:A9:76:9E:E7:AB:72:83:FF:60:8D:28
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019ED499E347E3A010C7D5073CF86150BB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 1968
Signing time: Wed 17 Jun 2026 08:01:55 +0000
Manifest this update: Wed 17 Jun 2026 08:01:55 +0000
Manifest next update: Thu 18 Jun 2026 08:01:55 +0000
Files and hashes: 1: e9ATf5sPxhIIrZkXrfrTWItTCA8.roa (hash: 9bYZXPWqJ0NbEhPnRTTZ2nAWZSD7VDe4KmSotczV1Og=)
2: eJ3EsbBMhzFDB-H0FiABM5_1h7o.roa (hash: 2Gzq+fr47dBnSE3c78QxSTACSN9b6779m8anTE61jss=)
3: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: 51eQVwxcXzOV4qWtUuCAJJqJmWxo2neIiBzWZ3Cfz/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:e3:47:e3:a0:10:c7:d5:07:3c:f8:61:50:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jun 17 08:01:55 2026 GMT
Not After : Jun 18 08:01:55 2026 GMT
Subject: CN=3e956c91d6771cc276a9769ee7ab7283ff608d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:68:7f:da:80:9f:75:d6:86:87:ef:de:80:
e4:94:32:35:c7:1d:71:c9:68:82:96:51:4b:27:3f:
ac:c7:ad:00:04:1b:5b:58:cd:4e:7c:32:0f:78:07:
47:2e:31:5d:5a:5f:d9:4c:39:d4:b3:5c:82:3d:d9:
06:9b:fa:88:d2:8b:3c:c0:1c:5c:f9:cf:06:65:56:
3e:63:f4:29:77:b1:6b:3e:1f:ed:84:e9:84:ef:3f:
e3:be:5c:65:1c:c0:b4:c4:80:7b:27:c3:c4:5e:19:
88:8a:f2:c2:0d:2b:a7:57:cb:ad:98:e4:0d:ff:e5:
fe:d7:93:0b:2e:04:10:b0:22:74:31:98:f8:8e:56:
5e:bd:52:0f:d8:45:88:e2:6a:21:8b:99:d8:7d:eb:
24:6e:d4:8c:e9:10:7d:f5:a5:e1:bc:60:55:6d:0b:
78:6b:22:91:4a:58:31:c7:75:f1:ea:18:ad:e3:5e:
e4:92:b7:b4:b6:52:84:e6:b1:af:42:af:77:b6:43:
db:03:a4:ed:bf:c0:03:23:a8:dd:8b:90:07:da:0b:
ff:b1:0c:c8:83:2b:67:ee:0b:97:b2:7c:19:05:7d:
24:11:9f:da:03:18:f6:3a:25:e4:41:1c:3c:3b:4e:
1b:0e:dd:91:e3:35:be:b0:5f:c7:85:ab:82:8b:fc:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:95:6C:91:D6:77:1C:C2:76:A9:76:9E:E7:AB:72:83:FF:60:8D:28
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:48:71:a4:dd:62:a4:e2:3c:a5:dc:3d:e6:75:16:69:e4:a0:
cd:ff:77:14:7c:96:aa:49:d8:b5:14:04:3a:ef:ab:25:17:22:
97:d6:f3:13:b6:b5:59:49:4b:57:43:49:a0:a4:f2:f7:7f:3c:
a9:62:5d:40:cc:93:33:e1:ae:7e:bc:1b:4e:44:b1:8f:34:a3:
dc:f8:7c:82:c6:69:75:dd:fd:04:0c:90:e8:d8:5f:a4:33:3f:
d6:69:a8:a4:4b:de:e8:6d:25:09:ef:45:27:91:9f:c7:fe:79:
35:ce:b6:19:47:aa:4a:a4:34:b5:98:96:ff:ad:cb:4b:84:61:
2b:bd:ff:46:c2:7b:ac:12:72:d3:e6:f6:18:ab:05:54:15:75:
2c:61:4d:47:30:ab:c9:83:e4:8a:fa:c6:bb:08:15:4f:2a:a7:
af:18:43:c0:33:ed:68:9f:51:da:44:19:92:f1:5e:1b:46:12:
98:0a:ba:ee:cf:4e:bc:95:88:ef:c5:fc:7e:5b:09:ff:11:0d:
ca:71:ff:21:ee:de:b4:70:60:3d:99:89:7b:01:5c:04:3a:5c:
15:c7:4c:9c:89:fd:5d:16:e3:8b:0e:98:43:f2:89:68:f1:47:
f7:93:3a:98:6d:67:36:80:52:dc:98:a8:71:13:8d:85:d8:f8:
6c:68:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:37:25 2026 by rpki-client