Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: 8aXg6EzQij373+Mpiqh5qZl0YvZw3fN/D/P4rEhkyBI=
Subject key identifier: 0F:9D:86:8A:96:9F:9D:78:86:CD:B0:36:F7:6A:07:93:2D:C7:10:DD
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 019EBFC819CF9286CC713846C9C874C66CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: EC
Signing time: Sat 13 Jun 2026 07:00:22 +0000
Manifest this update: Sat 13 Jun 2026 07:00:22 +0000
Manifest next update: Sun 14 Jun 2026 07:00:22 +0000
Files and hashes: 1: f-tD8eTfmg96rXItlzB5NU95HTc.asa (hash: dsO4U94ntj0LR9lV9Plk0cr+ZXf5ETUXO5D2F4wmKsI=)
2: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: zcPXvjS0N2rceKXRX4vZZt2+qclUCDIgDxJ0rAnRVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:19:cf:92:86:cc:71:38:46:c9:c8:74:c6:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: Jun 13 07:00:22 2026 GMT
Not After : Jun 14 07:00:22 2026 GMT
Subject: CN=0f9d868a969f9d7886cdb036f76a07932dc710dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:5b:dd:01:e6:eb:f1:0d:a2:d3:82:38:2c:
ae:4a:94:d3:b1:04:d6:0d:a5:32:1f:34:cf:cf:7e:
5d:2a:e7:62:77:6c:0c:e8:09:63:d9:ee:1f:6d:1e:
27:aa:5e:90:cd:60:66:b9:44:92:88:fc:1d:83:51:
4e:64:3d:87:bd:69:19:99:f3:12:1a:e4:c7:73:01:
49:54:79:a4:a3:7a:cf:db:cd:a2:24:0c:ce:f7:11:
2d:3f:26:ba:e7:bc:c0:8d:7e:35:4c:19:be:5c:86:
e1:a2:a3:8d:87:39:3c:4a:e8:be:e9:cc:08:4f:ac:
a8:94:2b:e0:04:67:00:e4:37:cc:49:2a:53:b3:90:
80:f8:6d:c4:de:53:02:bb:05:fc:0f:c6:c5:fa:8e:
8d:99:a1:be:2e:cb:14:09:16:cd:a5:c9:e6:fd:25:
d8:49:ff:81:29:31:f8:5e:e0:27:97:23:d5:40:7a:
2e:99:2b:57:5d:9b:69:aa:35:01:f7:2e:c0:19:da:
c2:42:18:60:8f:6d:bd:8e:a3:0d:8e:86:bf:3f:f4:
12:67:6a:53:36:e1:56:a7:43:57:da:16:7a:34:4b:
52:80:a2:69:16:4e:5a:c4:1e:4f:b4:59:bf:18:71:
c4:4c:4d:fb:09:23:1e:33:29:ea:88:d8:7e:b8:bd:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:86:8A:96:9F:9D:78:86:CD:B0:36:F7:6A:07:93:2D:C7:10:DD
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:eb:4f:f0:db:cf:eb:89:af:a3:22:95:10:22:57:20:3b:9e:
55:ad:2d:61:e0:51:94:c5:24:9a:cd:de:fd:f5:7c:2f:46:86:
07:92:a9:2e:ca:e6:80:d3:73:c6:8c:67:44:29:3f:35:81:bd:
eb:30:73:00:5b:11:a3:ea:95:c4:fe:47:ef:22:f5:12:1f:f5:
91:21:3a:fb:78:68:ff:33:24:50:0f:db:83:3a:cd:33:fc:5c:
d2:d0:b3:e1:10:83:03:87:88:e7:00:3e:d4:7a:a8:07:d7:10:
7f:54:a9:2b:03:bd:af:a1:c6:35:9b:75:10:5c:c8:6a:07:ca:
d5:b8:e6:a6:7c:e0:47:da:42:03:55:6b:a1:04:77:f7:54:99:
1d:a2:69:92:cd:25:80:ff:fc:af:dc:7a:4c:8e:2e:74:16:88:
b3:de:f4:38:cf:d0:c4:53:cf:7f:3e:11:7d:a8:55:2b:fd:a2:
11:3c:36:70:35:7a:ca:2b:fd:b7:39:12:ba:b2:b9:a7:62:46:
45:36:0a:7c:06:31:5b:02:e3:b7:b2:bf:dd:1d:93:12:f1:1a:
6e:c5:df:b9:ec:77:33:85:d6:29:ef:7a:ee:18:4f:28:d8:38:
6e:db:bb:9a:5a:3a:5d:37:99:50:ae:19:34:c0:aa:a5:cd:b8:
96:95:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:56 2026 by rpki-client