Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: dSUrMSb9tzzt0Hh0gxU51qQ2aQiVG2VP7Dud9hC/BmY=
Subject key identifier: F8:C1:17:84:E6:DC:83:DD:8C:16:C8:E4:83:ED:2B:0C:2F:0B:AA:2C
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019EC06E2807746468CF69CD607028319664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 03AA
Signing time: Sat 13 Jun 2026 10:01:45 +0000
Manifest this update: Sat 13 Jun 2026 10:01:45 +0000
Manifest next update: Sun 14 Jun 2026 10:01:45 +0000
Files and hashes: 1: A5iuXW_cORbsvixFXow7PusXUbs.roa (hash: +5gLj6Wt4ZaNqfSC+m0HrIiKPOrW2+yDa66ixdPJ/8M=)
2: ih8GcxAhVwfWwQlPUzpQuVOLe-c.roa (hash: 3wfNubXgjKJ1/TUZb+D2ubigUZwrjebFGAnwYbZd+Zg=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: OB0JaC1FL5T3BYmU5o/y+MlO6cLyuzEZh+qLZB0so4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:28:07:74:64:68:cf:69:cd:60:70:28:31:96:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Jun 13 10:01:45 2026 GMT
Not After : Jun 14 10:01:45 2026 GMT
Subject: CN=f8c11784e6dc83dd8c16c8e483ed2b0c2f0baa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:e3:60:c2:66:a2:05:eb:23:0e:63:51:57:
b0:d1:ab:19:84:81:53:8c:db:06:9f:b1:3e:e1:bc:
74:39:2d:67:43:2d:a6:18:f5:35:81:8f:41:76:c7:
32:bf:14:44:46:35:ec:bf:e7:84:75:38:2d:67:27:
b4:1f:f6:87:d5:e3:d9:03:ad:47:45:a8:7c:97:3f:
26:7a:41:f5:ee:fc:dc:f3:5a:01:5b:f3:0a:7a:50:
f5:56:fc:db:4b:f4:e3:ad:31:98:f1:7d:ac:fb:6b:
5e:fb:2f:01:12:d4:c2:24:42:4a:7b:61:60:4a:5a:
ba:07:43:a2:ce:c1:db:92:26:36:c9:2a:96:63:cd:
98:c7:72:1a:3e:0d:e1:72:9d:db:5b:8d:df:00:a8:
4c:d5:e3:51:1c:fd:d8:b1:8b:f9:de:21:00:2c:56:
ad:8e:71:c3:7a:72:1f:6d:cd:26:7e:ba:86:78:81:
d5:81:ac:2c:e9:e7:df:ec:f8:33:79:49:00:55:ff:
fd:9c:9e:bb:50:30:67:fe:2b:c0:d7:f1:b1:fa:c8:
e7:f5:20:44:7e:77:b2:56:e7:9a:ab:b2:5e:c2:9b:
c7:99:8f:d6:33:ab:00:d1:19:c0:3d:3b:cc:db:24:
a5:c0:44:56:d7:95:6f:19:96:7c:73:d5:86:03:05:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:17:84:E6:DC:83:DD:8C:16:C8:E4:83:ED:2B:0C:2F:0B:AA:2C
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:92:f1:be:25:59:5f:cf:c9:83:f5:55:4d:b7:24:45:e2:
63:e8:88:03:dc:22:5d:59:0c:f5:21:7a:a3:9e:63:44:fe:55:
91:f3:0f:3e:37:93:06:42:cf:a3:86:42:da:c2:59:1f:1d:d7:
6e:7b:55:39:bd:1a:74:67:23:f2:5e:b7:db:09:39:3c:46:58:
bb:ad:90:27:30:28:9e:7d:91:2f:ab:5a:a2:fc:37:f9:dc:37:
48:93:96:45:a8:f2:28:b4:98:08:25:81:d4:e9:50:2c:c8:be:
17:e1:e5:21:c7:b8:16:06:9b:c4:92:9d:1d:18:06:b1:56:ce:
8a:4c:11:a1:02:f0:de:67:79:62:4f:3e:ec:a9:25:48:70:6f:
59:d0:d9:fc:4a:47:66:71:12:ee:47:3a:c8:30:fd:7d:1d:8b:
4c:68:40:04:f8:4f:55:a2:01:bd:8d:8b:43:fe:da:f9:ca:dd:
6a:6f:0d:63:f3:97:d6:8c:53:44:98:04:93:d9:db:64:ac:18:
17:86:4f:64:61:e0:7f:8e:d2:99:ce:90:7c:c3:fc:3b:6b:25:
57:c6:37:a7:ec:f3:53:67:6f:f8:f2:2a:50:df:5b:8d:4c:b6:
e1:6d:a2:f3:e4:29:92:0e:10:70:c3:75:4a:4a:8c:f7:df:13:
10:79:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:53 2026 by rpki-client