Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: hauf2b6ygZRgW745gmEMSHmIc3KNaoonSMgROlXXwEw=
Subject key identifier: B7:DD:20:2E:E0:45:5F:40:B1:B9:41:91:E5:B1:3D:C9:F4:0B:09:F5
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019ED42B9116939084188E9E0CECC9957B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 1899
Signing time: Wed 17 Jun 2026 06:01:25 +0000
Manifest this update: Wed 17 Jun 2026 06:01:25 +0000
Manifest next update: Thu 18 Jun 2026 06:01:25 +0000
Files and hashes: 1: CitPrvEbL3mSkhY-h3ajKHpia-8.roa (hash: /+PG4/PPRJ0jxjBwjO3qbLw0M09UhMzUiGb+7CaKzGg=)
2: lcN_yuHnbi5WtHDyrC1WEMjdtHs.roa (hash: ik5LzxvVAt9iL2/7h4zp/cur7V0L47uoz6AFvyo0fRE=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: bZKo27zAcU3wCwfBJj+f4T01tvS52bZwdJpae1bSF94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:91:16:93:90:84:18:8e:9e:0c:ec:c9:95:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jun 17 06:01:25 2026 GMT
Not After : Jun 18 06:01:25 2026 GMT
Subject: CN=b7dd202ee0455f40b1b94191e5b13dc9f40b09f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:74:d2:04:36:d2:3b:85:47:ba:eb:19:bb:
47:ce:1c:85:e3:e0:8e:9a:37:b9:a6:00:6d:d7:a8:
3d:5b:ff:01:d6:d2:4c:48:92:d7:03:35:22:9c:95:
99:a8:21:ad:cf:1c:3e:34:0d:f4:f5:c9:23:4e:bc:
f2:36:99:c3:bc:35:54:19:8d:ab:e4:fe:a0:43:84:
b8:11:f3:27:9f:3e:9e:42:6d:4d:ff:68:21:d3:3b:
7a:09:a9:c4:b4:34:4c:4c:22:67:a3:6d:06:d8:c9:
47:c9:fb:23:81:eb:03:e5:b4:91:59:23:3a:91:79:
f7:49:9e:b7:7d:ba:0a:55:c9:32:c1:0d:e9:c6:fe:
dc:7d:e3:39:da:b5:ad:fc:ab:ea:cb:c3:b8:97:59:
5c:11:b1:00:49:52:e3:c6:2e:32:95:fb:3a:90:3b:
da:d8:a5:3d:f0:73:44:d1:fc:c7:dc:42:ff:20:75:
8f:41:df:9a:5e:08:7b:0b:01:a7:9d:fb:b8:20:da:
84:36:87:9b:af:c2:0f:29:cd:db:1c:4c:be:3d:40:
5b:e8:ab:cb:57:aa:2f:ff:94:7c:57:9b:53:1e:e4:
39:8a:63:58:ef:11:42:9b:cd:19:55:6b:af:a0:8d:
e3:df:57:1b:2c:12:c1:d7:2c:79:31:c3:f5:63:b3:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:20:2E:E0:45:5F:40:B1:B9:41:91:E5:B1:3D:C9:F4:0B:09:F5
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:1f:d3:a9:fa:e8:0d:fc:65:4e:7c:90:f1:6a:46:fb:f2:
66:60:f0:5f:df:c5:47:5f:bd:21:81:8b:c0:6d:2f:ac:a5:5a:
a6:91:00:1c:3c:8c:e1:1c:6e:90:e8:18:10:ed:42:a7:6e:9d:
55:71:f6:9f:e0:d5:d8:e7:3a:7f:91:ca:c6:8c:88:c9:78:aa:
93:16:64:b3:f8:cb:e0:9c:d5:fe:07:d0:d9:2c:63:4c:d7:1e:
6e:41:26:b8:83:e7:eb:71:a1:a7:ad:49:23:5c:1d:eb:07:f2:
56:ee:84:96:56:4b:67:2b:f8:77:5d:22:2c:d7:2b:34:06:9f:
bd:95:9d:1f:f1:b0:eb:d0:52:28:9b:c5:c3:72:8e:69:f7:f1:
75:4e:5b:c0:6c:28:16:69:a0:a4:a1:33:ce:27:97:80:9a:24:
16:13:5c:b9:29:59:eb:a1:ff:72:c8:d8:cb:d7:15:32:6d:a0:
f8:4e:b8:85:d6:27:58:27:30:88:d5:52:df:11:27:69:29:24:
e2:8e:a8:b9:c7:61:91:4c:4b:49:1e:3c:c8:68:0a:27:54:81:
aa:e7:16:ae:fc:ed:2c:1d:52:13:76:ab:3f:2d:9e:b1:54:1a:
72:cf:09:d5:b8:4f:f6:f8:38:e4:6e:55:96:04:03:a6:f9:0e:
c2:d0:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:49:27 2026 by rpki-client