Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: V+e+Zurrlpmrf1C3k1AYBQbwwp7PJhurpXKvIzjq5gs=
Subject key identifier: 8A:D5:CD:1E:3A:90:E7:61:BF:25:FA:C1:CD:43:96:6D:A0:24:46:CD
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019EC0DB5B6D6D6D9B48E0314403BCE0D73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 191D
Signing time: Sat 13 Jun 2026 12:01:01 +0000
Manifest this update: Sat 13 Jun 2026 12:01:01 +0000
Manifest next update: Sun 14 Jun 2026 12:01:01 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: SqaeztRMpuruvnxEYDOHQqFwa3OVu1WWMBXmiY8Ezv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:5b:6d:6d:6d:9b:48:e0:31:44:03:bc:e0:d7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jun 13 12:01:01 2026 GMT
Not After : Jun 14 12:01:01 2026 GMT
Subject: CN=8ad5cd1e3a90e761bf25fac1cd43966da02446cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:a2:29:4a:20:56:4a:66:63:02:6e:8a:be:
e8:c5:f5:a8:33:74:b8:5d:24:95:de:72:a0:24:ff:
58:b7:81:a3:14:59:e9:92:17:2d:31:15:cb:55:43:
b8:de:e7:e1:6b:18:0c:75:be:45:02:21:b7:4a:72:
b5:c1:9a:57:c4:a3:0e:17:81:01:58:95:6d:c0:8f:
5b:c1:d2:b0:4e:23:2d:66:d2:65:74:b8:25:73:3d:
81:62:e0:7b:24:ca:67:f8:2f:3d:4f:b8:25:4a:54:
33:3d:81:43:b5:f4:cc:45:8e:95:fd:b2:55:bc:a2:
15:31:83:9a:74:2a:23:d0:43:1b:4b:24:e1:dd:e3:
25:53:66:2c:38:50:4c:2b:77:98:3b:e5:b9:5b:e8:
83:80:43:ac:86:4a:6e:7e:8e:bd:23:6d:8b:53:a4:
96:6c:f4:a9:bf:f6:54:f0:98:c1:45:4f:c6:29:4b:
5c:22:3d:c4:ba:11:06:45:cc:06:c5:ad:fa:a1:54:
f5:7a:be:fb:1b:df:a6:be:f7:6c:cb:e8:c3:4a:5d:
63:c2:7a:ec:0e:5e:c9:87:87:a5:ac:c5:91:f9:1e:
c7:31:da:d7:00:cc:41:a2:f3:b0:cc:06:56:40:e1:
b0:8b:5f:7b:91:99:2d:bd:a0:ee:58:c6:e4:d0:c1:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:CD:1E:3A:90:E7:61:BF:25:FA:C1:CD:43:96:6D:A0:24:46:CD
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:eb:fa:d6:7f:7d:71:cb:13:f9:dd:c0:b0:5a:5c:ca:d1:1e:
f4:89:ea:ba:c8:10:5a:1f:5f:ee:f3:c0:20:4f:99:d3:6c:24:
9a:48:b3:d4:cc:86:bb:65:37:76:35:06:5d:a2:08:cf:a3:df:
cb:02:f3:da:d5:68:57:12:2d:3f:b5:db:b5:36:18:3f:77:68:
fa:90:be:18:a1:fd:ef:6b:84:10:45:1a:ff:48:89:22:00:b0:
88:13:30:67:78:fa:29:d6:0f:69:bc:67:20:55:c1:e9:4e:c8:
4e:44:b8:db:47:3e:cd:11:b7:f0:b2:6c:bd:c8:b5:96:a4:5f:
42:d6:33:c3:9e:0c:ec:c6:67:87:ed:f6:69:80:91:f9:0c:86:
e3:d6:4e:90:c5:c7:a6:a2:38:6f:1c:62:7a:af:2a:60:72:fc:
aa:40:d2:aa:82:2a:dd:03:eb:27:9a:e6:8a:19:da:83:92:27:
ad:35:65:bc:36:04:4d:f6:83:67:2b:f0:17:c8:65:c5:af:52:
27:e7:b3:ee:5c:5e:c5:bf:5c:9c:11:9b:27:5d:4c:ea:da:f8:
08:9f:2c:79:08:1a:3a:1f:f4:c1:fe:29:06:14:b5:7c:57:dd:
27:58:c9:be:ef:e5:6f:d6:2c:83:ce:b2:bb:16:45:f3:17:4e:
32:2b:06:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A21ttbW2bSOAxRAO84Nc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjYwNjEzMTIwMTAxWhcNMjYwNjE0MTIwMTAxWjAzMTEwLwYDVQQD
Eyg4YWQ1Y2QxZTNhOTBlNzYxYmYyNWZhYzFjZDQzOTY2ZGEwMjQ0NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BWiKUogVkpmYwJuir7oxfWoM3S4
XSSV3nKgJP9Yt4GjFFnpkhctMRXLVUO43ufhaxgMdb5FAiG3SnK1wZpXxKMOF4EB
WJVtwI9bwdKwTiMtZtJldLglcz2BYuB7JMpn+C89T7glSlQzPYFDtfTMRY6V/bJV
vKIVMYOadCoj0EMbSyTh3eMlU2YsOFBMK3eYO+W5W+iDgEOshkpufo69I22LU6SW
bPSpv/ZU8JjBRU/GKUtcIj3EuhEGRcwGxa36oVT1er77G9+mvvdsy+jDSl1jwnrs
Dl7Jh4elrMWR+R7HMdrXAMxBovOwzAZWQOGwi197kZktvaDuWMbk0MHIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrVzR46kOdhvyX6wc1Dlm2gJEbNMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+v61n99
ccsT+d3AsFpcytEe9InqusgQWh9f7vPAIE+Z02wkmkiz1MyGu2U3djUGXaIIz6Pf
ywLz2tVoVxItP7XbtTYYP3do+pC+GKH972uEEEUa/0iJIgCwiBMwZ3j6KdYPabxn
IFXB6U7ITkS420c+zRG38LJsvci1lqRfQtYzw54M7MZnh+32aYCR+QyG49ZOkMXH
pqI4bxxieq8qYHL8qkDSqoIq3QPrJ5rmihnag5InrTVlvDYETfaDZyvwF8hlxa9S
J+ez7lxexb9cnBGbJ11M6tr4CJ8seQgaOh/0wf4pBhS1fFfdJ1jJvu/lb9Ysg86y
uxZF8xdOMisGwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:44:18 2026 by rpki-client