Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: ItgUwM1Sduo1x9Tlih5N6/MaN9LI3bropZlQ5Jk9v6o=
Subject key identifier: 95:86:CD:3E:4E:98:A1:9C:11:23:3D:FE:34:35:D1:44:22:1B:67:33
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019EC0DB49E51A2189E75976579D91A43797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 12:00:57 +0000
Manifest this update: Sat 13 Jun 2026 12:00:57 +0000
Manifest next update: Sun 14 Jun 2026 12:00:57 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: UHg/fd1800OXVWn6B9ehJZ0FAlR/aP5ftZo0JnPZGfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:49:e5:1a:21:89:e7:59:76:57:9d:91:a4:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Jun 13 12:00:57 2026 GMT
Not After : Jun 14 12:00:57 2026 GMT
Subject: CN=9586cd3e4e98a19c11233dfe3435d144221b6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:38:07:05:5c:93:ca:e1:9e:04:1f:fe:5d:
91:e4:f5:78:da:8f:e9:c2:99:14:cb:bb:dc:83:31:
cf:41:39:27:c2:f2:dd:d7:a0:c0:1b:22:e0:54:61:
b3:69:0c:a3:6f:e4:6d:3c:32:95:e4:bd:4e:de:d7:
ed:a3:a7:26:7d:e4:1a:0a:e5:53:26:d8:df:d4:81:
de:c2:4a:a5:ae:be:02:0a:c4:5a:f5:44:14:7f:a2:
14:be:0a:77:bc:57:0a:8b:4b:52:38:b7:69:21:2a:
97:36:bd:cb:63:92:13:f8:0a:db:0e:c0:a6:c5:28:
fb:ce:9b:5d:a3:25:b2:66:c4:c8:27:80:7b:c4:bb:
23:0c:8d:b3:db:77:e0:56:07:06:20:08:61:91:da:
f7:61:a5:cf:70:f6:1e:4f:1f:bf:af:3e:13:86:65:
61:ee:08:bb:94:93:9d:44:d1:c1:db:68:a2:08:e9:
1f:60:d0:cf:5b:14:b2:c3:e9:ff:6e:b6:b0:cc:2a:
1c:ff:3a:61:3f:03:01:77:7f:1f:ba:2a:27:b5:f9:
de:ba:7c:3e:b5:74:d1:cd:7d:56:89:a1:13:5b:dc:
a0:be:c2:36:70:dc:aa:c2:39:81:aa:37:58:99:90:
f4:1c:2a:d5:4b:ca:26:b4:99:6c:7d:94:91:97:3a:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:CD:3E:4E:98:A1:9C:11:23:3D:FE:34:35:D1:44:22:1B:67:33
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:cd:f9:81:c2:97:59:bf:04:07:62:47:1d:dc:c8:f6:ac:
2d:3b:35:df:29:a5:aa:fc:93:48:43:9d:e0:9d:31:d7:f1:25:
de:63:90:10:4e:41:5e:88:78:d8:74:07:d5:f4:e0:b0:6d:2a:
b2:d8:38:44:ac:fb:e9:e4:7a:f8:9a:df:1c:05:bb:0d:9e:d8:
ff:a2:05:cb:cf:f1:eb:b2:46:6b:4c:8c:01:23:09:17:29:16:
cc:16:af:83:6a:42:4b:f3:10:9e:b6:a0:18:23:ba:1b:e7:f3:
76:27:d5:76:99:64:60:8e:81:d5:d5:c7:49:c8:1a:3b:24:1c:
5f:0d:1f:b2:4b:7b:ed:b8:72:ea:6d:62:0e:ad:bd:f4:8b:4b:
d5:78:20:59:0f:c0:64:c0:a8:76:af:36:2c:02:03:44:5a:53:
5d:2e:a7:c9:03:85:af:90:b0:a9:7a:62:01:46:bf:58:54:28:
8d:6e:e2:d1:8c:3a:53:95:d2:f7:a8:fd:a6:a9:a4:70:c1:8c:
9f:4a:61:07:82:bf:84:bc:30:6a:28:80:75:ec:dc:92:dd:20:
0e:6a:51:dd:40:c1:3c:73:b1:2b:0b:77:ea:af:d3:9b:a0:ca:
43:2f:29:aa:15:02:33:0f:84:40:e3:48:41:8d:6d:37:a3:46:
f1:7d:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:38 2026 by rpki-client