Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: 9Tym21+9OM6AenYcui6Usieg2zYCI+1Y0+J79sGAc8s=
Subject key identifier: 4F:A8:3D:CB:53:53:D3:B3:92:84:22:9F:84:9A:36:E5:DF:A6:51:42
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019EC3007E453056DD44E2B6D31BFA484011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 22:00:49 +0000
Manifest this update: Sat 13 Jun 2026 22:00:49 +0000
Manifest next update: Sun 14 Jun 2026 22:00:49 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: SMtITeU+lKxf41PxO16sjn67EC/gLlOThtu6qjiuFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:7e:45:30:56:dd:44:e2:b6:d3:1b:fa:48:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jun 13 22:00:49 2026 GMT
Not After : Jun 14 22:00:49 2026 GMT
Subject: CN=4fa83dcb5353d3b39284229f849a36e5dfa65142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:6c:a7:dc:0d:33:88:47:3b:9b:7b:be:35:
86:c9:75:de:f3:43:79:59:c5:b4:d0:e1:ca:9a:41:
c5:6d:9d:c1:a0:f5:b1:10:5d:92:68:f8:7e:71:e8:
2f:e7:50:84:70:0b:cb:2b:ea:ea:56:67:24:14:b0:
da:1f:e4:32:07:91:34:8a:97:5f:27:f5:a2:93:bb:
33:6a:f8:e6:7b:83:68:d2:55:6d:98:b0:82:25:48:
3d:ce:a1:9b:f1:aa:d9:b9:ec:d4:b8:f0:ad:0b:3e:
fd:a2:1e:58:dd:ec:0b:60:f3:9d:88:0d:11:31:69:
54:95:a1:3d:66:b3:fc:51:7e:42:cb:a0:40:05:df:
ac:39:76:72:68:bf:7b:07:f1:d8:2e:dd:bc:44:e5:
d3:65:fe:6c:8c:10:e3:f3:13:48:0b:40:5d:2f:a6:
d6:84:88:73:67:c9:5d:e5:ed:96:2a:d4:ff:b0:3c:
41:44:83:d0:79:a0:fc:7c:77:f2:5c:bb:d5:24:70:
4f:0b:92:af:08:aa:b0:91:a0:eb:10:4f:31:08:57:
24:b7:0b:ad:5c:16:95:99:93:64:9d:46:ae:10:65:
1a:f1:2f:06:d4:7d:a7:f2:c9:8c:8b:b2:57:29:3e:
c9:a1:ad:18:c8:e7:5d:94:5f:7d:de:e6:a1:67:58:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:3D:CB:53:53:D3:B3:92:84:22:9F:84:9A:36:E5:DF:A6:51:42
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2a:12:f2:e8:24:02:21:de:a2:3c:cd:30:c3:b9:fb:22:15:
72:eb:93:d0:9f:95:82:33:ad:06:ed:61:36:02:15:d3:bd:2b:
54:4d:9f:22:63:dd:75:f7:89:90:a7:28:be:fc:d0:08:da:f4:
9c:b1:66:54:4f:98:b8:f9:31:41:37:5d:cd:ee:38:32:d2:1d:
9f:cd:3c:c9:44:7f:f2:62:20:7f:d4:da:a0:77:ac:46:ed:e1:
a0:78:76:13:1d:07:16:f8:59:ad:81:c3:1f:6b:cc:5c:c6:68:
ea:35:c5:07:eb:37:96:af:47:13:7f:f2:0c:10:0b:0e:a7:c8:
f6:5f:68:8c:dc:45:a3:34:02:08:22:33:c0:fb:ed:1e:62:61:
9f:df:7a:25:56:80:d5:ef:f3:3c:f6:79:1e:2b:0c:c3:92:e2:
31:89:c5:95:b5:e2:fd:2f:9b:09:d2:bc:80:f4:3c:44:6f:25:
f1:7c:8f:b8:d1:6f:c6:aa:fb:f2:13:34:85:bf:09:0f:55:ae:
fa:be:59:ec:a7:22:04:36:bf:79:ba:bd:dc:97:bd:66:f0:2b:
c3:b9:b3:be:ff:30:1a:5f:d9:49:ce:57:90:de:3f:b5:60:03:
f2:ef:55:87:25:ef:af:87:fe:e0:31:34:d1:5e:98:a1:bc:0f:
6e:20:ba:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAH5FMFbdROK20xv6SEARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjYwNjEzMjIwMDQ5WhcNMjYwNjE0MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg0ZmE4M2RjYjUzNTNkM2IzOTI4NDIyOWY4NDlhMzZlNWRmYTY1MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGFsp9wNM4hHO5t7vjWGyXXe80N5
WcW00OHKmkHFbZ3BoPWxEF2SaPh+cegv51CEcAvLK+rqVmckFLDaH+QyB5E0ipdf
J/Wik7szavjme4No0lVtmLCCJUg9zqGb8arZuezUuPCtCz79oh5Y3ewLYPOdiA0R
MWlUlaE9ZrP8UX5Cy6BABd+sOXZyaL97B/HYLt28ROXTZf5sjBDj8xNIC0BdL6bW
hIhzZ8ld5e2WKtT/sDxBRIPQeaD8fHfyXLvVJHBPC5KvCKqwkaDrEE8xCFcktwut
XBaVmZNknUauEGUa8S8G1H2n8smMi7JXKT7Joa0YyOddlF993uahZ1i+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+oPctTU9OzkoQin4SaNuXfplFCMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCoS8ugk
AiHeojzNMMO5+yIVcuuT0J+VgjOtBu1hNgIV070rVE2fImPddfeJkKcovvzQCNr0
nLFmVE+YuPkxQTddze44MtIdn808yUR/8mIgf9TaoHesRu3hoHh2Ex0HFvhZrYHD
H2vMXMZo6jXFB+s3lq9HE3/yDBALDqfI9l9ojNxFozQCCCIzwPvtHmJhn996JVaA
1e/zPPZ5HisMw5LiMYnFlbXi/S+bCdK8gPQ8RG8l8XyPuNFvxqr78hM0hb8JD1Wu
+r5Z7KciBDa/ebq93Je9ZvArw7mzvv8wGl/ZSc5XkN4/tWAD8u9VhyXvr4f+4DE0
0V6YobwPbiC6Eg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:31 2026 by rpki-client