Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: lSfXGcMHKXmlhXd26+f7mEjZkjv/HRpI6TpNR9nuyNg=
Subject key identifier: 5B:47:AB:02:A0:3B:95:2A:3A:40:4E:9C:FF:27:AB:0B:E1:CE:F4:50
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019EC0A467F98E1C55E16BD6B23B4162472D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0209
Signing time: Sat 13 Jun 2026 11:01:00 +0000
Manifest this update: Sat 13 Jun 2026 11:01:00 +0000
Manifest next update: Sun 14 Jun 2026 11:01:00 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: jC7D18nRIKDnRjN8e+bVglnOV2lM41KQlX+tEgit8ms=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:67:f9:8e:1c:55:e1:6b:d6:b2:3b:41:62:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Jun 13 11:01:00 2026 GMT
Not After : Jun 14 11:01:00 2026 GMT
Subject: CN=5b47ab02a03b952a3a404e9cff27ab0be1cef450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:02:eb:75:f9:8e:4c:e9:e4:a7:03:ea:0e:
10:63:62:fc:32:27:d6:97:e2:49:f5:46:98:7b:68:
8f:32:57:a7:fa:bf:a7:6e:89:17:50:7f:7b:e0:15:
4f:a4:9a:3c:7d:4f:cc:ff:ae:a5:28:35:50:36:2f:
ad:a0:2b:9e:3a:c7:ac:69:44:cc:68:86:70:73:63:
d2:85:4a:c4:e8:76:c2:61:09:23:f3:4b:69:ab:36:
d9:49:de:8a:80:5b:37:f1:39:54:47:b9:73:8f:7a:
d0:46:cd:53:b3:e4:ab:5e:4e:af:08:c5:8a:42:94:
49:c3:90:39:b9:02:0f:58:62:91:60:7e:6e:82:ae:
51:60:33:49:5e:a8:ac:91:78:1b:6e:ad:7f:6f:18:
a4:8b:c8:10:4f:c2:19:41:04:d8:ec:2d:e9:e7:e1:
19:c0:67:dd:f6:69:17:2f:36:6e:49:a1:bf:98:0c:
46:b4:92:b9:dc:03:76:74:db:6a:0f:1e:e5:26:8e:
78:d6:b7:b8:67:61:5c:24:9d:aa:d8:cb:5d:75:5f:
01:b2:68:d2:3d:2d:95:8a:e7:71:25:be:e1:fc:17:
c8:95:28:2c:3f:3f:06:06:8c:fb:df:c9:b4:f2:4f:
8e:d8:2a:6d:26:10:3e:b6:c5:68:01:8e:f2:e6:e8:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:AB:02:A0:3B:95:2A:3A:40:4E:9C:FF:27:AB:0B:E1:CE:F4:50
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6a:64:31:bf:6a:e8:f9:ff:1e:df:3a:bc:3c:bb:a2:61:70:
62:db:3a:bd:40:2d:1e:db:c9:df:c8:f0:f7:0e:ad:6b:bb:c6:
d1:96:03:8a:cd:01:ea:4c:33:88:6c:13:7f:d1:01:8c:2a:33:
1a:27:a2:85:02:aa:15:74:67:28:ff:dd:33:16:8f:62:f3:00:
91:b8:d2:88:3d:23:5e:12:d7:fd:68:68:60:fb:8b:55:d8:f0:
9d:4e:7d:b7:bf:e4:11:8c:9b:0c:3b:c4:f5:2f:11:36:6d:e3:
e9:20:57:70:c6:68:e7:a5:f1:bd:92:74:dc:1e:18:d0:ac:1e:
65:42:16:62:88:10:87:5e:99:ec:66:80:f3:c3:88:40:42:e4:
88:59:d2:24:a3:b7:9a:0b:56:6d:04:dc:27:05:60:eb:83:89:
0b:d2:cc:b4:fd:5e:5e:ac:63:66:24:9c:20:af:02:b4:94:56:
5d:8b:39:dd:6a:1a:5c:42:38:c5:ad:92:07:35:df:fc:c4:22:
11:2a:e3:81:36:3c:ee:e8:10:5b:a2:ae:4e:e7:6b:c5:34:0f:
29:63:b8:1b:7f:7f:c8:6a:89:d3:58:77:6f:20:b9:24:23:f4:
20:67:59:a4:8c:ad:d8:9f:e6:fb:57:48:55:7e:84:97:84:46:
11:df:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:54 2026 by rpki-client