Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: rWnGBUT+3D4S8fT2znwZs8dbnnDKh6tyoDivhOJjRjw=
Subject key identifier: A6:0E:7A:6D:FB:51:86:BA:EE:93:6B:1E:06:A1:AD:DD:D9:89:58:3A
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019EBE47F1B8C1A232A840658AA5C5DD6897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 00:00:46 +0000
Manifest this update: Sat 13 Jun 2026 00:00:46 +0000
Manifest next update: Sun 14 Jun 2026 00:00:46 +0000
Files and hashes: 1: IPShWGUXlOQysmlHN59ggxp79no.roa (hash: h66cPY9mKXXd6y+2DIeK9BUX2MMAhCZtqkFLMLMhdLk=)
2: UUFYP2GnG27gknclmWjbFXee-5c.asa (hash: vtuGXz4SCbN+csRPRpu2i0eRfkh5mJ/Z4XlVSXzxMy4=)
3: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: e8oeORZhrIIZM0rNe43L/Ztv41ECqxJg/Cac/9acNlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:f1:b8:c1:a2:32:a8:40:65:8a:a5:c5:dd:68:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jun 13 00:00:46 2026 GMT
Not After : Jun 14 00:00:46 2026 GMT
Subject: CN=a60e7a6dfb5186baee936b1e06a1adddd989583a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:36:d1:cf:e5:4f:77:b4:8f:70:1f:47:92:
fe:f0:35:8b:57:9a:5c:64:0f:ee:6b:90:68:75:a8:
6e:df:00:27:f4:ec:02:3f:90:e2:a4:e9:ee:53:49:
be:0b:92:6d:fb:6d:30:bc:79:66:52:07:f0:c8:0a:
6a:90:3a:ce:db:9d:c3:6b:fd:25:a8:47:37:39:e1:
85:02:73:bc:19:4d:06:01:1f:59:d6:20:09:aa:c3:
c3:55:48:16:55:ef:36:18:d3:ea:21:10:5e:89:e8:
e3:f1:22:d9:80:99:28:f4:89:87:6e:fd:0a:c2:e9:
11:ba:69:e4:18:dd:b9:0a:9c:1e:51:fd:b1:d7:27:
d7:4d:ed:84:86:2f:dc:66:ca:30:24:fa:7d:27:f9:
be:90:0e:78:f2:22:46:ee:5c:5a:58:7d:65:61:fe:
53:07:69:3e:4e:46:ea:b6:36:af:65:3d:e5:71:39:
cc:37:ea:c1:03:74:da:e9:ac:07:e3:d5:db:9f:c3:
c4:88:41:fd:df:20:08:80:fd:84:03:74:c3:5c:bb:
e2:e8:3c:db:7b:98:19:c8:b0:f0:ea:d6:a1:bc:56:
26:17:c1:d7:ad:50:19:ff:ed:d2:1a:aa:f7:a7:a8:
c7:61:5e:99:6d:33:c2:b6:61:b3:09:2f:11:a9:43:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0E:7A:6D:FB:51:86:BA:EE:93:6B:1E:06:A1:AD:DD:D9:89:58:3A
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:5f:ae:46:dc:e7:8a:6a:b4:ed:ab:0f:e7:35:3c:a7:90:
b6:f1:ab:dd:1a:b4:ec:35:0f:29:e4:f5:87:68:9c:bf:bd:c0:
a1:90:30:11:47:df:24:92:6f:75:d3:74:f4:f8:a2:85:6b:38:
89:3b:2f:03:fa:2e:82:94:bd:20:ae:18:ff:17:4b:9f:93:ed:
28:f3:56:b2:76:f2:03:b9:cd:0f:2f:cb:1a:ad:ea:d2:34:72:
50:cb:d7:f0:2b:f9:54:27:0f:11:38:39:6d:0e:c4:4f:98:e2:
4c:3b:e2:c8:16:5e:00:65:3d:62:09:4c:af:1c:9e:3e:97:37:
9f:60:2d:77:f0:b5:4a:f1:ec:93:9e:d5:73:dd:85:18:a8:c7:
26:b0:68:12:0a:dc:4e:6f:fd:4a:fc:04:d7:fc:bf:2f:7a:83:
e0:62:48:11:bc:75:c7:35:1f:38:df:5c:13:5d:b4:df:88:36:
7d:8a:24:11:28:6f:bd:d2:f2:50:bb:87:4f:eb:18:59:6f:ea:
4b:fe:9a:74:9c:c7:a6:14:a3:71:a2:b9:2a:a2:86:a1:3c:14:
0a:18:37:ca:66:ac:5c:5a:f5:0f:09:a1:46:e6:55:09:90:d1:
22:b1:ba:46:db:34:f7:24:17:c1:fd:22:9d:94:49:ac:b5:7f:
7b:94:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:23 2026 by rpki-client