Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: ktTbp0REtw4NbRkJP0DcgwjC8qgZJxHrmYobiy1Yc4k=
Subject key identifier: 84:09:7B:88:B6:89:9F:5D:99:FC:4A:A4:C4:98:4A:9F:C0:74:A2:F2
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019EBF5A910C396C1900F2485EF118451855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 15F9
Signing time: Sat 13 Jun 2026 05:00:43 +0000
Manifest this update: Sat 13 Jun 2026 05:00:43 +0000
Manifest next update: Sun 14 Jun 2026 05:00:43 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: jtS556r8638wc2UhG2M8bGr9jsESg+TuedsaMvsp6Hg=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:91:0c:39:6c:19:00:f2:48:5e:f1:18:45:18:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jun 13 05:00:43 2026 GMT
Not After : Jun 14 05:00:43 2026 GMT
Subject: CN=84097b88b6899f5d99fc4aa4c4984a9fc074a2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:c3:77:40:47:aa:d8:f4:a5:18:83:3f:46:
fa:58:88:e0:f3:63:c6:a6:73:88:f6:42:8c:06:80:
e1:25:b9:86:66:b7:e9:6e:2f:9e:cd:4e:3e:c7:ca:
ea:89:f7:0b:3d:04:ba:0b:b7:e5:73:7b:da:c7:97:
79:e4:ac:99:f3:0c:9d:7d:bb:41:56:a9:c5:0a:c8:
fd:9a:85:96:42:c2:11:96:b6:cb:ea:23:b9:9f:ab:
52:27:66:fc:01:90:21:f2:08:0d:39:77:83:f1:96:
b2:c4:91:96:20:cc:25:8a:d2:d7:92:a2:a4:7a:85:
e4:c5:24:f9:8f:ad:d8:41:37:fd:04:5f:1c:f6:24:
65:ed:59:dd:d0:89:26:28:52:2c:ca:50:04:0f:1e:
ba:b6:0a:ce:84:3c:dc:b7:b5:65:97:63:29:fb:1f:
6a:d9:6a:27:e2:1c:95:7a:82:d6:ee:aa:cb:f0:1d:
70:7a:c4:e6:a9:0d:19:60:89:e0:31:63:1d:81:30:
a9:a1:bf:8b:08:52:f3:1b:e1:7a:42:04:5b:7b:b8:
1e:d1:d2:4c:cd:ed:db:31:d5:3a:c5:31:e6:ca:7b:
84:e9:db:5a:f3:f7:38:e6:cd:bd:39:a8:4f:e3:ef:
43:38:6e:d4:b1:a0:92:4c:5f:1c:5c:0e:f9:a5:ca:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:7B:88:B6:89:9F:5D:99:FC:4A:A4:C4:98:4A:9F:C0:74:A2:F2
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:06:f3:14:29:32:cb:02:db:94:bf:44:84:6e:bd:bd:a6:
9c:95:bf:7f:36:08:12:0d:96:bd:4a:29:d6:86:7c:38:e4:a6:
76:b8:66:c2:6c:ca:d6:93:7e:be:a1:34:79:7b:81:db:3f:f1:
b0:3c:20:87:f0:16:4b:31:d9:bd:bb:44:36:30:b2:06:b8:cd:
6d:69:ee:10:2a:35:7f:07:b1:76:35:55:4c:df:e6:db:34:c6:
72:d8:30:45:ae:97:be:2b:cb:1d:f2:17:6b:71:67:5c:1d:79:
23:bc:64:8b:4e:d9:28:14:3f:b4:57:10:f3:17:6c:71:11:a2:
58:3a:bc:56:59:06:d8:cb:ba:93:6e:2d:f6:c1:09:bb:3a:e7:
e0:15:df:07:f8:ed:9a:77:9c:19:92:95:e6:3d:e0:44:e0:b2:
53:97:82:09:9d:82:75:75:d0:f2:2c:29:2b:46:01:5e:43:f8:
7b:d4:1b:5f:ec:27:f4:2c:26:82:60:c5:76:b9:a0:28:7d:12:
90:65:52:fa:21:6a:c5:2d:b8:a0:df:f1:ca:7d:0a:a4:e4:57:
50:4e:0a:1b:2c:02:34:b8:51:7d:75:ba:8c:42:89:9e:56:97:
24:b1:f7:2e:87:2a:cc:98:d2:e9:77:c6:61:bc:a6:62:38:ba:
8f:11:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:06 2026 by rpki-client