Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: 3zEh6MwtZmMErj98eqRUxXp2vSpLyb3ioRLWYZh3MeU=
Subject key identifier: 61:21:50:8D:E9:1C:E3:B7:C3:87:A7:66:C5:4F:A2:B1:2C:F6:F4:92
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019EC0A3B7A9603A54789A30AF9BA2226FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 02D1
Signing time: Sat 13 Jun 2026 11:00:15 +0000
Manifest this update: Sat 13 Jun 2026 11:00:15 +0000
Manifest next update: Sun 14 Jun 2026 11:00:15 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: yNoRwEBNLoIvcy8PkjjcU+xm52+buhaQ1Lg0GTf0ypQ=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:b7:a9:60:3a:54:78:9a:30:af:9b:a2:22:6f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Jun 13 11:00:15 2026 GMT
Not After : Jun 14 11:00:15 2026 GMT
Subject: CN=6121508de91ce3b7c387a766c54fa2b12cf6f492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:91:5f:31:0d:51:98:5f:d6:05:6e:07:64:
2c:15:08:c6:20:0e:87:f6:03:79:ad:96:9c:b0:45:
3d:80:06:c4:aa:a1:3f:c4:d7:a1:03:9d:62:32:13:
c8:6e:08:6d:94:fa:8a:a0:d6:bf:91:98:01:9b:56:
e4:83:01:a8:1d:b7:f3:fa:9e:c1:be:37:d2:ba:f1:
6a:1e:f1:c7:28:f6:f7:03:6a:07:c2:b7:1f:7f:d4:
2d:65:78:8d:70:19:af:7f:40:14:0d:d3:23:5d:cb:
88:8c:35:9b:73:44:cf:0c:27:1e:e6:29:bd:cd:f5:
73:35:fd:07:8d:58:a9:1e:b8:8b:60:88:9f:c8:27:
50:73:87:a9:f7:5d:33:fd:36:f7:5e:ec:57:d1:3c:
41:8a:4c:47:bf:96:ad:72:c5:72:fc:9b:c9:02:65:
17:da:ba:10:0d:2f:6b:6f:32:7e:55:82:56:e4:1a:
7e:fc:80:2a:3c:80:ba:1b:30:5f:49:65:33:8b:86:
e5:82:f7:94:68:28:ec:df:d6:2d:bc:18:6d:32:79:
c7:b0:1d:c6:aa:eb:03:c3:72:f4:59:21:16:f6:b9:
39:5b:04:ae:3f:f6:e7:15:b7:eb:0b:45:d9:ca:e7:
c2:2d:7a:2f:42:76:f9:b6:36:dd:1c:aa:75:0b:4a:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:21:50:8D:E9:1C:E3:B7:C3:87:A7:66:C5:4F:A2:B1:2C:F6:F4:92
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:41:33:50:90:f0:06:fd:c8:cd:48:08:ea:7b:d9:32:7e:
51:32:23:43:a3:6a:69:49:1e:31:c1:61:9d:54:7f:01:b4:1b:
d4:0e:40:9a:df:8b:9f:e9:d6:68:85:e9:4a:3d:73:02:c4:f9:
29:cf:78:5a:a5:30:f7:d9:8f:50:41:e3:09:f4:f8:53:ab:97:
2f:20:ff:65:5a:40:51:54:72:42:ce:a8:e6:db:ce:57:a0:80:
47:ab:66:c1:f4:8f:11:80:04:b5:bd:0e:4f:b2:98:fa:64:77:
ee:b0:fe:b1:a0:d2:77:f9:97:10:45:dc:bf:15:d5:b5:e0:98:
a4:f4:0a:3f:fe:2e:66:6f:ed:7c:51:b3:4e:e1:ba:f5:55:6c:
bd:10:26:d1:1b:1a:f1:ed:4b:47:df:b3:ae:c8:36:7a:b9:40:
ec:69:95:7c:6d:da:cd:6e:8d:7e:d3:49:4d:d5:c8:d6:6e:15:
f2:87:29:cf:b2:a5:40:06:67:ff:8e:38:57:13:e2:42:20:5f:
6b:3c:7b:94:a3:dc:48:1b:97:64:82:8f:3c:1b:8c:18:2f:0f:
85:28:69:8d:e6:73:be:75:d3:ad:a8:18:95:96:f1:1d:dc:0e:
c7:99:14:5d:a2:57:6d:63:74:07:e3:bb:a2:98:c5:c9:0a:5a:
54:a7:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:03 2026 by rpki-client