Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: s/igYePPQ2UjLaUCkVHGj1geB3zcH3QHSC/mIhGzvGU=
Subject key identifier: 04:4F:C2:9A:FA:EB:E1:AB:8F:91:E2:B7:07:57:C9:26:1B:3F:3E:12
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019EC1B7568BD06027A437BE189D36498DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 1278
Signing time: Sat 13 Jun 2026 16:01:18 +0000
Manifest this update: Sat 13 Jun 2026 16:01:18 +0000
Manifest next update: Sun 14 Jun 2026 16:01:18 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: 7t5P/24RioPNp3rAZO86aEQdSM2debMlEntFg9G6o2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:56:8b:d0:60:27:a4:37:be:18:9d:36:49:8d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Jun 13 16:01:18 2026 GMT
Not After : Jun 14 16:01:18 2026 GMT
Subject: CN=044fc29afaebe1ab8f91e2b70757c9261b3f3e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:68:31:19:14:79:8e:35:5b:27:06:c4:83:
ea:66:83:17:1f:a8:26:07:be:05:39:64:2c:be:61:
36:2e:ef:d7:ed:80:70:e5:f9:44:c5:e3:7b:c1:88:
70:17:e6:02:5c:68:18:ff:a3:49:62:89:df:dd:17:
f5:0e:89:2e:8e:61:f2:5d:5e:76:53:81:b3:46:3e:
7e:2c:42:14:fd:bf:34:09:a1:fc:74:07:53:a5:6d:
18:23:d3:37:a8:c3:a6:ec:42:a6:bf:d5:4e:13:44:
da:3b:d4:c0:68:c4:87:fa:9c:71:ed:0f:f6:7e:89:
4e:f6:49:c8:a6:7d:38:ae:51:21:6c:83:ce:bb:83:
5a:8c:01:d5:65:4f:67:76:f5:9a:96:62:6a:20:e7:
39:28:2f:5d:b9:d5:6d:d7:00:31:49:77:28:0f:2b:
79:ec:5d:48:ea:0d:ce:9a:f0:f0:94:1c:47:01:42:
a2:ab:81:be:3e:70:a7:0d:8e:20:24:95:ff:5b:c5:
95:d7:28:bf:87:ae:68:c8:fe:2a:9a:51:ba:57:0a:
74:ec:33:9b:7c:e4:5e:5a:b7:25:6f:94:b0:d6:23:
71:31:ca:89:8c:26:10:c1:5c:8e:4c:fb:b0:9a:ae:
38:f4:f1:5d:03:a2:40:e7:7a:6c:f0:e2:8c:d6:fe:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:C2:9A:FA:EB:E1:AB:8F:91:E2:B7:07:57:C9:26:1B:3F:3E:12
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4b:44:53:77:83:02:1f:d8:ae:1d:7f:28:fe:db:5e:c8:c6:
f0:02:f2:5a:bf:38:4f:64:10:e9:f3:1b:04:6a:9d:b6:25:ce:
96:13:2e:c1:1a:0a:de:4a:02:75:52:18:56:41:5c:29:9e:02:
10:57:e6:67:75:92:60:1a:ae:31:51:38:e0:75:8f:ef:2b:a5:
cb:2b:bb:91:c5:62:ff:60:7d:48:4a:03:07:d7:44:10:e2:4f:
a6:1c:92:20:55:2c:60:c9:ac:eb:54:ee:30:65:38:2a:e4:36:
e0:45:f6:1a:60:a8:fe:77:60:ce:de:8c:0f:eb:c5:6e:84:98:
6c:37:af:14:72:2e:17:44:c8:32:67:74:bb:48:15:44:0f:4a:
d9:95:40:d6:f2:26:37:6f:c6:49:f6:94:ba:ee:e3:c6:b6:42:
5f:80:be:60:29:1e:59:dc:b9:fe:06:eb:92:fa:c2:55:1b:3e:
83:f0:d1:af:80:5f:38:fc:fd:11:20:e9:56:2e:b0:5c:85:18:
9b:e3:ee:bd:7f:c0:59:68:fe:1c:cf:71:f8:a2:09:72:bf:ed:
cc:5d:8c:57:2a:41:9e:fd:eb:f9:f4:ee:0f:e0:d9:76:21:f1:
a7:09:9d:12:c4:47:06:77:00:a7:92:66:f2:27:68:b6:f3:90:
08:ea:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:45 2026 by rpki-client