Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: SIFT7pD0GGgOh/jmSk4dmdsESGNF/92v6JeDynIIj1s=
Subject key identifier: 3F:B5:34:B2:1E:89:D2:54:CE:0F:5D:1D:75:53:2D:B6:01:B8:A5:56
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019EB80F180DEDDAC221C9A91952D88D053D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 195E
Signing time: Thu 11 Jun 2026 19:00:57 +0000
Manifest this update: Thu 11 Jun 2026 19:00:57 +0000
Manifest next update: Fri 12 Jun 2026 19:00:57 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: 7Bw2izNzPcFgvTpMhadd3Pm2Clc23dI/FLfgFExNF4o=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:18:0d:ed:da:c2:21:c9:a9:19:52:d8:8d:05:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Jun 11 19:00:57 2026 GMT
Not After : Jun 12 19:00:57 2026 GMT
Subject: CN=3fb534b21e89d254ce0f5d1d75532db601b8a556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:36:fa:3c:63:68:a9:32:3b:ca:06:a9:25:
e1:17:14:79:b9:47:a5:a3:26:0f:5c:44:cc:cf:f2:
d4:06:2a:28:38:e7:fe:c1:6f:75:ab:ce:78:a7:f1:
1f:53:8c:43:61:4b:71:af:4a:e9:60:18:9e:02:7c:
cc:d6:fe:d1:04:ee:43:ee:d1:04:c1:8b:20:21:19:
e7:4f:58:6e:d6:48:13:df:1d:67:5f:4c:7d:10:aa:
2c:2f:04:e3:3b:27:5a:18:ae:d2:bc:3a:0c:5c:65:
83:00:84:13:ee:20:94:b9:4c:c4:16:85:e7:67:7e:
37:f5:f2:4e:3c:5c:45:38:4e:56:8d:29:ce:96:e5:
6d:0b:21:df:43:7e:07:ab:02:d7:82:3c:59:eb:37:
5e:a2:4e:d7:16:0b:d1:f6:ab:64:a6:29:dc:34:6e:
bf:ef:58:a9:e7:16:c4:b6:36:7a:71:e8:31:70:ba:
73:fa:8e:a2:57:97:b0:08:d0:99:b9:41:ef:c9:63:
66:59:e7:df:50:23:a0:34:cc:a3:ff:93:9e:c3:72:
8f:5c:73:99:e5:57:19:1c:70:bd:90:49:7a:5c:d1:
de:99:a0:53:00:c6:10:10:00:f2:0c:c8:fe:66:8a:
06:fa:be:ca:39:74:ab:ac:7e:eb:ae:62:90:e4:02:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:34:B2:1E:89:D2:54:CE:0F:5D:1D:75:53:2D:B6:01:B8:A5:56
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:9f:00:fe:f8:f9:bb:6c:13:34:ba:5d:2a:63:a4:b4:70:
d7:df:66:7b:67:f3:b7:f9:10:2a:8e:8f:e3:45:26:2d:e4:b0:
b1:81:23:93:10:e0:74:cf:48:98:5f:e7:10:6c:49:e9:ed:a1:
39:38:a3:ca:9a:30:8a:67:b2:19:54:8f:9a:31:2d:80:7f:c2:
0e:b1:96:b3:f6:74:d6:34:84:8b:bc:f2:8f:12:f3:b0:a2:17:
de:71:72:35:16:8e:fe:55:f1:85:a2:ea:48:51:d6:60:ad:27:
01:90:ed:7d:e0:e1:6b:85:37:98:bd:77:42:76:6d:7d:9f:49:
71:34:40:a1:70:f8:f1:44:a2:be:23:87:90:ee:b0:6c:ed:7d:
6e:d4:d0:e5:ec:f0:27:f9:7c:7e:4b:4a:d9:df:55:d2:47:20:
92:77:98:97:c3:ef:ac:dd:25:de:f0:f9:9e:e2:2d:dc:9e:9f:
1c:01:69:c5:40:1d:47:9d:70:04:bc:ea:f7:fd:df:ae:33:a2:
3f:a0:37:10:4b:5e:be:2c:9a:14:eb:c3:b8:0a:dc:c6:ef:01:
af:b9:11:ec:46:4a:9e:99:63:f9:41:a4:2e:b8:f7:fd:f7:b0:
3c:d2:58:dc:be:a9:6c:d1:c7:53:07:e3:1a:2a:a3:40:d7:8c:
c4:69:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:42 2026 by rpki-client