Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: n65QP14yhXaBOAmdrlSk9x5LpuEhVVq0gA9XKk1LiVw=
Subject key identifier: 83:5C:63:7B:61:1C:94:47:BF:E3:60:BE:B8:A7:66:22:37:85:D3:94
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019EBFC87F08B7A9DCC6A864A9125BF95D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 12DA
Signing time: Sat 13 Jun 2026 07:00:48 +0000
Manifest this update: Sat 13 Jun 2026 07:00:48 +0000
Manifest next update: Sun 14 Jun 2026 07:00:48 +0000
Files and hashes: 1: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (hash: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268=)
2: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (hash: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU=)
3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: u6cKi9Fd0tqrDPqtGKhweF/fFxmhEvB1MMYvom5spPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:7f:08:b7:a9:dc:c6:a8:64:a9:12:5b:f9:5d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Jun 13 07:00:48 2026 GMT
Not After : Jun 14 07:00:48 2026 GMT
Subject: CN=835c637b611c9447bfe360beb8a766223785d394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:5f:8d:92:e8:74:ab:25:98:e6:19:90:ca:
af:a7:6c:9e:8e:2e:25:45:d5:32:db:4c:93:25:04:
99:a3:bf:ba:48:bd:d5:63:0e:16:b2:16:d1:38:2b:
9a:c3:0a:27:72:c0:99:f8:42:08:f2:3f:a1:00:0b:
ce:b5:3a:07:aa:c2:c0:ac:0a:4d:b8:38:a0:ae:ca:
d2:fb:a3:75:ab:36:41:9c:55:e6:16:8f:f0:40:26:
1a:35:37:0b:6a:0b:14:5a:5f:2c:dd:50:a5:9a:bd:
c4:6e:97:b8:12:e0:d5:b0:5c:19:3e:3e:ca:df:d1:
7f:19:fd:1a:eb:da:c4:97:d2:93:ed:25:c1:93:7f:
5c:d0:97:25:11:02:4d:09:f7:53:b8:c3:42:d2:01:
15:c6:be:b1:c6:9e:4a:a0:c2:2b:dd:8e:c7:4f:59:
bd:00:98:2a:fb:cd:34:23:80:2a:0a:51:d7:16:bd:
0d:8e:7a:0e:83:d0:48:96:12:e0:aa:cc:ab:a3:7b:
3e:ca:c8:8e:2a:48:27:f3:a1:32:58:ae:1b:1f:cc:
9c:ae:eb:a8:a4:88:bc:fc:ad:e5:59:18:f7:5d:68:
a4:44:71:e3:e2:38:d8:cc:49:72:56:74:28:8d:83:
b2:22:f3:e2:74:23:e8:d8:bc:05:06:a3:ff:22:71:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:63:7B:61:1C:94:47:BF:E3:60:BE:B8:A7:66:22:37:85:D3:94
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:98:9b:15:23:51:0e:90:f4:15:48:df:30:82:b9:0e:e3:49:
ee:4a:3f:ef:68:57:cf:b8:e8:aa:0e:72:de:ee:33:22:ba:1c:
62:79:be:73:0b:e7:80:b7:c3:59:15:ad:51:6a:1f:27:b6:21:
97:87:7c:c1:23:39:0c:6b:b0:0a:a6:36:61:75:c4:5b:1e:24:
de:4a:19:0c:bf:77:8c:14:d4:4a:45:8f:19:ad:3e:c5:c3:25:
35:64:13:36:d3:0c:a3:22:2e:7d:3c:48:9e:a6:1a:98:cd:32:
01:a9:49:a3:75:d6:4d:b8:10:2d:74:32:1a:3c:c8:22:d8:a5:
2d:87:87:67:65:98:f2:21:a4:b2:17:66:48:b6:63:28:5c:84:
af:ea:ca:e9:6b:e0:b5:bc:2b:b6:c1:8d:10:98:76:80:bc:90:
92:51:60:b2:12:40:5c:1c:90:33:cf:c9:43:47:dc:86:22:4a:
6e:ee:de:91:0c:8f:d5:ce:21:9c:68:b3:49:61:7e:da:39:cd:
cb:a7:71:45:c8:1a:ff:29:23:fb:8c:2e:69:3f:fb:20:c3:0a:
db:49:17:eb:ee:97:3f:f1:54:84:3c:d7:58:2a:00:fa:51:4d:
31:71:f7:c7:ac:c1:7f:9d:c1:c3:90:eb:e9:e2:1a:9c:29:ee:
68:7d:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:47 2026 by rpki-client