Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: xzlYfKUerh763n/49mvfIAmV7LGeHKRHcIov4IAX2iU=
Subject key identifier: 7E:57:FB:20:DB:D4:68:8B:06:6C:50:9A:4B:A2:2D:8D:CF:FE:84:38
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019EC06E20479D275580179D324C855A49EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 10:01:43 +0000
Manifest this update: Sat 13 Jun 2026 10:01:43 +0000
Manifest next update: Sun 14 Jun 2026 10:01:43 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: LNfAsMas0F8X4FbUbsKeiU6XQ1PFO2InwCMZ62AgXP4=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:20:47:9d:27:55:80:17:9d:32:4c:85:5a:49:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jun 13 10:01:43 2026 GMT
Not After : Jun 14 10:01:43 2026 GMT
Subject: CN=7e57fb20dbd4688b066c509a4ba22d8dcffe8438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d0:cd:ee:b1:95:44:3b:d8:25:3f:82:5f:4f:
7e:6a:a8:01:3d:35:ef:59:c0:4b:70:95:2e:23:7c:
ef:af:96:dc:6b:6b:48:14:42:17:5b:8a:1f:96:4f:
e0:ea:3a:cd:ab:e6:d7:f2:b6:07:d4:c9:db:aa:fd:
e9:fc:47:76:21:3a:24:2e:f9:b2:68:bf:db:10:fa:
a6:7c:ed:14:bb:b4:af:cc:cd:9a:47:30:4a:f0:14:
d0:95:96:43:9c:96:a5:7f:f2:e9:53:29:3f:5b:43:
f8:72:5b:d2:cc:46:c3:a2:18:72:d9:e3:be:46:92:
b7:f3:50:e9:f5:64:e4:c1:a5:73:a4:5e:eb:cd:61:
ea:5b:1c:7f:2a:ce:6d:24:08:45:20:8a:09:54:0d:
68:07:e9:21:b4:90:3c:5a:6e:79:c3:ac:97:ad:9a:
fd:17:bc:4e:49:94:68:c8:66:71:c2:6e:de:40:fd:
11:3a:bf:b4:35:d0:d9:e8:a3:72:66:97:f2:15:02:
d0:2a:69:af:d3:27:cd:93:8e:ac:4f:64:28:d6:c9:
68:bf:ad:8f:56:de:bb:68:22:72:cf:b8:63:b3:a4:
58:85:97:37:54:a5:fe:93:7d:4d:bd:fc:f6:53:6d:
8e:64:bb:54:66:2d:bf:27:44:75:e9:72:ae:b1:ad:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:FB:20:DB:D4:68:8B:06:6C:50:9A:4B:A2:2D:8D:CF:FE:84:38
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:86:92:a5:2c:c9:d9:4f:10:cf:3b:fc:7d:30:24:cf:e7:06:
81:d3:da:c8:c5:88:cf:13:9c:ea:42:72:34:34:1e:be:0a:59:
e3:2d:9e:e1:70:f2:96:31:17:3c:19:2e:b9:73:28:2a:9f:63:
3d:45:38:74:9e:a3:3c:60:fd:cc:cc:d5:bf:60:b9:47:a5:92:
8d:3e:92:f4:fc:47:22:d7:dd:1e:a1:21:41:fa:e3:7e:2d:10:
9b:06:60:90:32:72:7a:e7:9b:19:93:1f:f8:19:f1:55:3d:5f:
16:70:59:5f:68:0f:33:58:cf:5d:41:a6:e3:24:ad:f1:6e:45:
76:92:47:99:af:ea:31:ee:54:68:67:68:c2:34:08:e5:c4:87:
3c:68:db:d5:9d:3b:50:dd:45:81:e7:df:22:09:0d:42:b3:95:
24:33:53:27:f0:f2:52:f9:23:13:a2:ec:75:8d:3c:b5:fa:e7:
91:3b:a0:70:42:dc:10:63:5d:6a:8c:7b:21:6a:cc:a2:f3:61:
8b:6c:ef:31:84:b8:a9:87:60:d7:91:66:68:66:82:fd:78:e9:
85:5b:75:79:97:21:b2:19:50:44:dd:9d:f2:ca:61:b2:83:9c:
e4:8f:d4:d4:d4:65:f7:34:b0:3c:41:f0:6d:44:52:3f:cf:0a:
9e:b8:b4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:25 2026 by rpki-client