Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
File: qpzqolwClcyPY42qbWT3Ii9rCS8.mft (raw, json)
Hash identifier: WXl16a/D+5e7kwn2NxpA4MIVfj5nfiIYXRXBBQM1m8w=
Subject key identifier: 8C:94:7C:A5:E9:7C:A3:F8:4F:2B:44:03:87:EB:B0:5B:86:E2:E3:FA
Authority key identifier: AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
Certificate issuer: /CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Certificate serial: 019EC1EE2FDA4B3496EE2C6761DAB69E4B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
Manifest number: 0127
Signing time: Sat 13 Jun 2026 17:01:12 +0000
Manifest this update: Sat 13 Jun 2026 17:01:12 +0000
Manifest next update: Sun 14 Jun 2026 17:01:12 +0000
Files and hashes: 1: 5yQDORsjAc2qkrpGb2sFa87WdeQ.roa (hash: 6lWA3h6svKzAnLIBjtQj55IORN1aTf/i5R1xbiHi7hA=)
2: YR0KezbAbuwIwjhj2avNGcLc02U.roa (hash: rah4d1f8WB0+ik2fE3EWyLXPHfSge2y2R4kVqT1hjgw=)
3: qpzqolwClcyPY42qbWT3Ii9rCS8.crl (hash: lLABAbsxVCWOnBXONiQbg449QEXMG3WioU5/GtQRn2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:2f:da:4b:34:96:ee:2c:67:61:da:b6:9e:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9ceaa25c0295cc8f638daa6d64f7222f6b092f
Validity
Not Before: Jun 13 17:01:12 2026 GMT
Not After : Jun 14 17:01:12 2026 GMT
Subject: CN=8c947ca5e97ca3f84f2b440387ebb05b86e2e3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:23:f7:8c:a5:4f:a0:bc:07:35:97:d1:ea:
23:9f:d7:ee:62:e5:c9:d8:c2:dd:bc:55:86:98:30:
d4:82:28:29:59:93:ea:62:62:19:9f:e0:4a:cb:78:
70:6b:59:cd:5a:15:9d:ac:d9:4d:7d:76:04:c2:12:
0a:cb:d8:ee:90:b4:2d:1f:29:7b:19:84:71:73:9b:
93:30:99:ab:11:32:d0:27:f6:9f:ed:39:ac:cd:98:
8c:f8:1e:24:95:f8:f7:6a:ed:42:9f:d2:3a:54:ee:
ae:53:5c:b9:83:d4:ec:27:26:44:be:3c:9d:10:b8:
a7:31:b1:5a:99:0d:42:b4:27:62:6e:dc:06:a6:63:
2f:9d:92:b0:57:1b:e5:50:76:9f:6b:e5:2b:45:6d:
f0:d7:c8:b0:47:89:21:82:78:5b:99:b7:e1:2b:9e:
e4:60:93:70:62:79:fb:71:b2:5e:55:17:be:ae:85:
ad:f5:8a:8e:15:eb:b9:d9:34:2d:d7:bc:d2:ff:8c:
e5:c0:27:dc:c3:47:31:8d:5f:e8:27:bc:35:63:4f:
55:ad:1e:13:a9:95:42:d3:96:7f:ab:d3:95:f1:36:
3b:2d:49:c6:27:ee:bd:43:b8:9c:e9:6a:37:55:c0:
d8:a3:85:52:8a:a6:dd:be:0d:63:6b:83:d1:55:35:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:7C:A5:E9:7C:A3:F8:4F:2B:44:03:87:EB:B0:5B:86:E2:E3:FA
X509v3 Authority Key Identifier:
keyid:AA:9C:EA:A2:5C:02:95:CC:8F:63:8D:AA:6D:64:F7:22:2F:6B:09:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpzqolwClcyPY42qbWT3Ii9rCS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/qpzqolwClcyPY42qbWT3Ii9rCS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:75:61:3d:be:36:61:8e:7e:ca:90:2c:b9:9a:5b:1e:6e:
2b:0a:ed:a1:27:4a:2b:6f:72:db:bb:42:06:b0:90:de:57:5f:
91:0e:7f:ed:39:21:54:dc:52:0a:63:e6:8b:7a:5a:a1:a4:28:
92:ec:d1:c4:af:f9:02:72:ee:b3:a3:5f:1c:cb:8f:74:2c:35:
28:1c:1a:70:e6:62:b0:14:6c:17:a4:ef:e1:18:22:80:23:24:
5c:3b:a0:6a:4a:a1:93:62:2f:f1:ab:7b:00:41:b8:bd:a5:b4:
7e:20:be:4f:50:08:ca:36:44:8c:65:bc:e4:00:48:7f:92:4b:
cc:af:34:15:87:dd:a5:ac:15:84:6c:4c:5c:3a:b2:00:df:dd:
5e:f7:0c:a1:cb:57:48:db:0e:70:15:68:10:2d:ec:73:50:8a:
6d:3a:74:86:d6:62:fe:fc:bf:b3:a7:17:62:9b:f9:08:48:79:
09:f5:31:98:eb:fb:13:ed:be:53:31:c4:10:49:81:7a:cd:d9:
01:03:18:35:b7:8f:9d:b6:ff:c6:18:e6:94:be:74:c6:71:76:
d1:8d:05:6c:96:b9:73:22:5e:d2:31:64:85:98:1c:35:74:c0:
bc:2d:b1:c6:68:3f:7e:d3:14:1d:52:b3:75:68:ea:3f:39:4c:
5a:95:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:41 2026 by rpki-client