
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File: qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier: ZqTV8bA22miyB/PKyXeNrzbDiqcAlmRa74MNBxasVOg=
Subject key identifier: FB:4B:C8:57:8D:51:23:7B:9F:D6:E1:E3:51:E2:33:B0:10:A1:19:B8
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer: /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial: 019EBEEC51DF2E0D848CD81B86C47F215ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number: 0E
Signing time: Sat 13 Jun 2026 03:00:18 +0000
Manifest this update: Sat 13 Jun 2026 03:00:18 +0000
Manifest next update: Sun 14 Jun 2026 03:00:18 +0000
Files and hashes: 1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: jIiH1MDrL48U8mWDpd7whU/uUqSqxUdexNkvDgEyulg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:51:df:2e:0d:84:8c:d8:1b:86:c4:7f:21:5a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Validity
Not Before: Jun 13 03:00:18 2026 GMT
Not After : Jun 14 03:00:18 2026 GMT
Subject: CN=fb4bc8578d51237b9fd6e1e351e233b010a119b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:68:37:75:cf:72:9e:42:fe:71:9c:44:4b:
a6:c2:c1:43:7d:72:00:87:58:7c:f1:1d:5c:85:7c:
e2:df:da:ac:26:22:2e:6d:8d:87:34:68:ee:5d:ad:
39:d1:c9:0d:ce:f7:0a:eb:58:05:dc:19:b9:5c:97:
ef:44:21:fb:11:3b:19:e7:9d:00:73:cb:43:e5:41:
c1:52:94:ab:3b:ba:59:81:38:dd:d0:8d:9b:2d:34:
80:85:86:6f:5a:3e:4b:73:30:0a:dc:f9:6a:16:88:
c4:6f:83:3f:53:99:6b:71:8b:56:62:a1:fd:28:6b:
1c:7b:d5:c9:fa:97:60:57:32:08:cf:eb:e0:43:8a:
a1:ef:74:8d:61:94:b4:0c:3c:17:22:06:5b:f6:c5:
9c:0c:63:9b:63:70:f0:c3:da:36:c6:87:e5:a2:29:
61:f6:88:ab:0f:41:3e:cf:6a:8a:65:35:5f:31:c5:
ce:c7:98:a8:5d:60:66:66:0c:fc:2b:10:c5:7e:bc:
54:ff:b2:df:81:ce:1d:b3:25:eb:67:7a:62:3e:93:
73:aa:5c:1a:76:5a:95:5d:13:51:72:28:e3:83:49:
3c:f8:18:1a:41:26:a2:01:44:10:e3:e0:71:e6:db:
50:bc:75:15:30:f0:b1:99:95:0b:0a:d1:88:c6:01:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4B:C8:57:8D:51:23:7B:9F:D6:E1:E3:51:E2:33:B0:10:A1:19:B8
X509v3 Authority Key Identifier:
keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e3:21:14:0a:77:4a:99:ba:80:d1:02:42:d4:e5:54:45:83:
b3:9c:88:8d:61:6b:8d:2a:aa:5d:d4:3b:07:35:93:78:51:08:
d9:ae:fc:ad:16:0a:70:23:73:65:e2:21:93:27:ba:67:49:71:
8b:be:10:ce:83:18:39:80:a7:68:02:84:46:f8:8f:23:4c:6e:
34:f2:f3:a5:41:8d:64:69:7a:09:f8:e5:bb:4c:e5:da:20:f0:
d3:d7:6a:84:ac:d8:00:ea:3f:e1:9b:fe:42:ab:de:08:ea:5e:
90:72:fe:63:90:a5:37:f9:40:bf:cb:04:ee:b7:78:3a:fa:9d:
89:58:18:71:db:5e:12:9c:9e:55:7a:14:7d:54:08:a4:aa:52:
10:91:89:78:ce:80:19:0f:2c:f7:be:d1:61:06:a0:3f:cb:8d:
bc:be:a3:fa:a8:c2:33:52:2a:dc:92:b6:33:38:82:f8:f5:65:
38:28:3a:b3:a7:c0:46:c8:c4:16:6a:e4:e3:0b:df:79:05:5c:
12:09:f3:e3:79:af:00:41:01:f7:db:e6:d5:5e:99:7f:45:f6:
45:cf:73:7d:8d:99:d8:0f:aa:6f:63:59:69:e1:4c:98:f4:2f:
3f:dc:01:e4:f1:76:bf:1a:74:f1:bc:a4:72:31:38:99:6b:ff:
74:1d:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:44 2026 by rpki-client