Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: MyW3bpIUx/rH1psZh/SZZW+FN9LvA3S0JxlZgTxtTow=
Subject key identifier: 53:2B:F4:12:B6:1D:0D:21:F7:AC:58:82:B8:91:FF:D2:2C:12:80:CF
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019EBE47CEBDF5041E67FB28254029B7B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 16E3
Signing time: Sat 13 Jun 2026 00:00:37 +0000
Manifest this update: Sat 13 Jun 2026 00:00:37 +0000
Manifest next update: Sun 14 Jun 2026 00:00:37 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: Khbhaf7ijAFqPn385K8/gzWjeZUufpVp49LSAYqg61c=)
3: d4L-Ywam3q9FKYpyHF6Nixngago.asa (hash: zY2cIfwxMRiOqaAZBQMaP/RsPvaaJfXbxud7F/yA2YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:ce:bd:f5:04:1e:67:fb:28:25:40:29:b7:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jun 13 00:00:37 2026 GMT
Not After : Jun 14 00:00:37 2026 GMT
Subject: CN=532bf412b61d0d21f7ac5882b891ffd22c1280cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:e7:4a:f2:25:f3:27:38:39:ef:0b:84:84:
a6:28:35:ee:4d:a5:e9:5b:0b:e4:84:54:9a:c8:b6:
9e:84:6b:3d:10:13:bc:4a:2d:6f:99:33:26:6a:b0:
e7:71:84:af:36:b1:1a:f1:d2:10:80:2d:9c:6b:16:
40:56:e1:d2:a3:84:d4:f2:6e:53:49:09:4f:ca:53:
32:cc:d8:ac:e8:ba:61:ec:6d:90:69:d2:31:00:d2:
d4:59:f9:18:cc:3b:82:77:a7:a2:64:63:45:a8:f4:
41:dc:d9:52:98:d9:d1:3f:95:af:29:35:02:11:eb:
8c:8f:fc:b5:b5:27:09:0a:d4:8d:92:b6:d1:28:4d:
19:b5:da:e2:ea:e3:d2:8f:36:44:83:a6:a5:cb:62:
ff:13:c2:ea:93:7e:93:ca:93:dd:d0:58:73:e0:2d:
1f:8d:c8:89:b1:5b:a8:c7:49:a3:e4:0d:8a:81:0c:
46:a5:04:34:50:16:52:1e:c5:9b:3f:74:8d:cc:f7:
6e:59:d5:8b:b3:08:67:37:43:b6:20:db:a4:61:9d:
9c:bd:da:97:cb:e8:aa:24:52:4c:6f:ac:d3:8b:b6:
38:64:cd:25:43:83:bf:c3:e6:74:8a:49:3d:eb:76:
e1:b1:c9:0b:71:98:51:d2:5c:3a:7a:03:94:41:e7:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:F4:12:B6:1D:0D:21:F7:AC:58:82:B8:91:FF:D2:2C:12:80:CF
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:ac:e6:02:5d:c8:8d:f2:d3:5b:a6:20:7b:3b:f9:bc:2f:
6a:d1:f9:d4:c8:77:3c:bc:4c:37:ad:99:ba:1e:ef:1c:aa:e2:
d7:98:a4:cf:d9:74:a5:73:c2:fb:51:14:81:96:b3:f9:6f:5d:
bb:dc:b1:31:91:0e:cd:94:9a:c7:f8:41:43:0c:f8:e0:0d:a0:
fc:21:ac:78:19:40:3b:1e:4b:4d:ab:b1:92:af:48:05:12:1e:
a6:23:21:e4:28:e0:25:f0:e0:85:95:1f:dc:42:9f:06:e8:2d:
0b:fe:23:d2:16:0f:f2:0a:4b:ff:81:c0:b7:9c:ed:54:27:f5:
53:be:1f:08:e7:d7:1b:2b:0e:89:ca:bc:2c:ed:d0:8a:8d:40:
bc:03:f6:f9:56:a5:8e:37:89:29:b9:5b:04:39:54:3e:b2:c4:
61:9d:b9:61:91:f8:5c:50:1e:bb:0a:fa:7c:64:0c:31:c8:2e:
0a:cd:d8:98:fd:9a:ed:99:b4:37:73:0b:95:d8:c5:fe:ac:02:
d8:35:e1:54:2f:80:bb:ee:a3:5d:eb:51:eb:ea:d1:46:ba:9f:
0c:1a:29:86:ea:88:c0:9d:f7:2d:12:01:04:c7:b3:8b:5a:9e:
c7:08:97:d3:53:1a:39:e6:93:eb:12:a1:89:2f:c5:3e:08:63:
e1:26:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:04 2026 by rpki-client