Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: sH7sW6w+3CD9/EdBwS2L9pT6LUCuquwFWFdW9MpOUUQ=
Subject key identifier: B0:9C:BB:E2:EB:12:DC:9E:05:41:B4:A9:03:7E:34:7D:47:EA:0B:87
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019EBEB5A88DB2E5B62EA91074F613D9C717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 02D0
Signing time: Sat 13 Jun 2026 02:00:36 +0000
Manifest this update: Sat 13 Jun 2026 02:00:36 +0000
Manifest next update: Sun 14 Jun 2026 02:00:36 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: NL2+3/UDBIanDjKdY3ayfixpa5dG5kehzBq2QvhExGc=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:a8:8d:b2:e5:b6:2e:a9:10:74:f6:13:d9:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Jun 13 02:00:36 2026 GMT
Not After : Jun 14 02:00:36 2026 GMT
Subject: CN=b09cbbe2eb12dc9e0541b4a9037e347d47ea0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:15:02:d7:c6:93:60:dd:e8:8a:4d:59:68:
68:80:09:0d:d6:19:0c:9d:cf:b9:22:5e:b3:6f:3e:
9e:37:85:58:f0:ea:a5:8f:ac:3e:0e:b5:7b:cf:78:
9c:3b:38:9b:6d:3c:a6:1b:f1:2a:57:3a:f3:de:12:
ed:30:19:65:1a:9d:59:33:77:b0:34:97:15:88:1c:
09:89:b1:3d:d2:9b:21:c3:aa:16:ac:86:2e:84:27:
6e:87:b0:1f:e8:e7:42:2c:1d:e7:e8:05:46:67:fe:
8d:de:ea:68:d1:ce:9e:ea:cd:a4:56:52:d2:97:3b:
16:98:df:b5:27:e8:fc:72:1f:55:b0:b3:c8:f4:e2:
40:a3:4f:16:dc:60:2b:d7:a6:44:8f:79:af:15:27:
94:ee:81:ea:a3:c6:7a:9e:6f:f9:f1:a7:d5:db:3a:
36:a2:64:39:01:8c:a6:6f:a4:63:db:9b:31:df:af:
10:37:a1:fe:37:15:d8:4a:b6:62:9b:ed:8c:87:a0:
d7:85:d0:e7:3f:21:4c:b2:bd:5a:a7:ba:a6:53:4c:
77:9a:07:93:95:11:5f:ff:85:ad:e5:52:da:c0:df:
2c:6f:9f:b2:3b:60:90:68:f0:26:f1:1b:ca:b0:1d:
8e:12:ca:47:43:e6:c5:ff:80:a4:9d:6e:39:d1:5b:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:BB:E2:EB:12:DC:9E:05:41:B4:A9:03:7E:34:7D:47:EA:0B:87
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:18:ec:cf:18:13:6a:3c:f3:19:2c:6f:fa:e3:2e:eb:da:e5:
4d:1f:54:d6:48:ca:5b:c7:3a:0f:bc:79:81:41:2b:f0:11:78:
04:b0:0a:51:8e:39:fb:67:93:d7:d4:bc:3c:a3:a7:2b:06:1c:
73:18:99:b1:17:61:a8:35:85:40:2a:f0:cc:54:71:cc:84:8c:
a9:9e:36:f2:93:94:32:38:33:b7:55:e4:36:ff:2a:d9:23:97:
9b:7b:52:d9:42:2a:d4:5b:59:32:02:0b:c1:94:90:68:d2:22:
e9:ca:21:b9:b0:a7:26:50:cb:4c:20:89:84:00:1e:8b:02:a9:
f2:24:92:07:18:72:20:7b:43:15:64:7a:70:ab:17:04:2d:5b:
fe:46:c0:bc:aa:1f:75:54:24:29:dc:cd:c6:e9:22:2f:a7:6a:
bd:d5:b8:8f:e2:65:cc:c2:de:b2:a5:7c:b7:85:e1:7f:02:39:
fe:38:fe:6b:68:5f:9b:71:fb:ce:6a:ec:a9:7e:10:6b:26:bd:
5e:75:00:9d:d7:fc:fa:96:f3:5a:2d:5b:d0:03:ef:91:2a:64:
8a:99:fe:cf:6b:b4:ac:43:be:2f:19:97:bf:04:cc:74:a4:76:
ff:73:a1:f8:53:bc:20:81:d6:8d:8c:2c:bd:87:4a:fe:d8:e0:
37:12:03:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+taiNsuW2LqkQdPYT2ccXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzBkM2I2OTlhYzVhZWZmMmRiODhhNWNiYzFjOWQ4ZDA5
YzcyMzEwHhcNMjYwNjEzMDIwMDM2WhcNMjYwNjE0MDIwMDM2WjAzMTEwLwYDVQQD
EyhiMDljYmJlMmViMTJkYzllMDU0MWI0YTkwMzdlMzQ3ZDQ3ZWEwYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aYVAtfGk2Dd6IpNWWhogAkN1hkM
nc+5Il6zbz6eN4VY8Oqlj6w+DrV7z3icOzibbTymG/EqVzrz3hLtMBllGp1ZM3ew
NJcViBwJibE90pshw6oWrIYuhCduh7Af6OdCLB3n6AVGZ/6N3upo0c6e6s2kVlLS
lzsWmN+1J+j8ch9VsLPI9OJAo08W3GAr16ZEj3mvFSeU7oHqo8Z6nm/58afV2zo2
omQ5AYymb6Rj25sx368QN6H+NxXYSrZim+2Mh6DXhdDnPyFMsr1ap7qmU0x3mgeT
lRFf/4Wt5VLawN8sb5+yO2CQaPAm8RvKsB2OEspHQ+bF/4CknW450VuhMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCcu+LrEtyeBUG0qQN+NH1H6guHMB8GA1UdIwQY
MBaAFENw07aZrFrv8tuIpcvBydjQnHIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEt
MTQ1YTAxMjc4OTQ4LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEtMTQ1YTAxMjc4OTQ4
LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxjszxgT
ajzzGSxv+uMu69rlTR9U1kjKW8c6D7x5gUEr8BF4BLAKUY45+2eT19S8PKOnKwYc
cxiZsRdhqDWFQCrwzFRxzISMqZ428pOUMjgzt1XkNv8q2SOXm3tS2UIq1FtZMgIL
wZSQaNIi6cohubCnJlDLTCCJhAAeiwKp8iSSBxhyIHtDFWR6cKsXBC1b/kbAvKof
dVQkKdzNxukiL6dqvdW4j+JlzMLesqV8t4XhfwI5/jj+a2hfm3H7zmrsqX4Qaya9
XnUAndf8+pbzWi1b0APvkSpkipn+z2u0rEO+LxmXvwTMdKR2/3Oh+FO8IIHWjYws
vYdK/tjgNxIDaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:48 2026 by rpki-client