Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: Zc3u7H09w0zGod7iH763BKP2GxJOafZZmBRO5ODiH6I=
Subject key identifier: 4D:34:E7:1B:70:6C:C4:70:BF:BE:B0:7E:F7:32:4E:9C:8A:E3:5B:3E
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019F1B6853A4CFF7CAA72AEDDEA3F81E3473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 198F
Signing time: Wed 01 Jul 2026 02:00:49 +0000
Manifest this update: Wed 01 Jul 2026 02:00:49 +0000
Manifest next update: Thu 02 Jul 2026 02:00:49 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: zmT2xZYmilvFWSITQajVIwKmaTVvn89wxvJ6KM/FI18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:68:53:a4:cf:f7:ca:a7:2a:ed:de:a3:f8:1e:34:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jul 1 02:00:49 2026 GMT
Not After : Jul 2 02:00:49 2026 GMT
Subject: CN=4d34e71b706cc470bfbeb07ef7324e9c8ae35b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:52:a7:f5:24:12:55:eb:37:7d:fe:5b:81:
65:35:2a:22:25:35:c1:af:be:0e:d8:d4:81:a8:3b:
0a:25:e9:1a:f5:96:49:e0:4a:68:59:72:f0:19:cf:
ac:8b:08:bc:12:c2:68:2b:60:71:ff:c7:5a:e0:62:
ac:0a:76:e7:ca:6d:52:89:41:6a:65:ae:9b:89:52:
0b:ae:d5:c3:95:8f:01:10:97:7f:5e:55:31:91:99:
5b:c1:47:da:fd:de:36:b7:8e:eb:56:a8:de:c5:79:
32:61:32:1b:c3:92:dd:88:3f:f8:89:ae:cb:cd:25:
f4:b9:fb:9f:44:0c:80:a2:49:4a:d1:42:02:31:93:
24:9d:f9:46:a8:79:12:c9:2e:6a:eb:26:9b:55:00:
6f:86:18:db:b2:65:2b:d5:1e:40:4b:a5:c7:15:9e:
18:57:68:ff:20:b4:66:6e:bd:a5:a3:98:cc:b4:04:
f9:a5:d2:d4:e9:ce:00:09:f4:df:71:b4:6d:fc:01:
73:70:e0:cd:92:20:15:80:07:f4:b8:41:49:3f:6b:
eb:8d:2c:23:5a:90:04:6d:87:0e:36:07:dc:fb:ed:
da:c4:8e:b5:38:96:75:37:c4:17:a8:a3:31:9e:25:
d7:fe:bb:b7:f5:04:e6:3f:c1:91:c5:85:f6:6e:eb:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:E7:1B:70:6C:C4:70:BF:BE:B0:7E:F7:32:4E:9C:8A:E3:5B:3E
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:e0:30:a9:3f:f2:fb:69:fd:8f:4a:b3:97:27:f5:df:7f:
ec:5a:2f:4d:c2:92:37:19:72:b8:a7:d8:bf:a2:3c:2d:36:ec:
fe:d4:fc:7a:69:95:f8:43:90:3f:4d:2e:51:f3:48:2e:74:4a:
44:32:bc:cc:44:6e:a5:05:0d:d8:cb:8c:5a:88:c3:5a:de:cc:
e8:14:07:d9:b5:6b:08:1b:21:2f:3f:82:bc:04:f5:f5:72:1f:
34:8c:b0:16:f4:aa:fb:45:50:9d:bd:e6:dd:ec:2f:5d:62:1c:
ca:b7:06:50:0f:0a:96:9f:87:4e:2a:b9:2d:71:b7:bd:b4:fe:
47:31:98:c0:0b:1c:af:58:fd:e8:06:80:58:6f:31:69:23:7e:
28:3a:60:fa:c2:7a:eb:66:c8:6a:7f:4f:a9:07:64:2f:81:3f:
db:6c:7c:ad:d7:63:d2:d6:3e:d1:fd:e3:31:cb:7a:22:10:bb:
5c:17:f3:ad:f2:40:74:5f:62:74:25:e4:18:a1:37:6a:0c:a1:
92:43:ee:31:08:f8:cb:2b:37:93:f4:19:9a:e6:98:05:ce:34:
c6:aa:0f:b5:27:e1:78:5b:ae:8f:83:2c:cf:0a:ab:e8:e8:a7:
42:5a:5d:d6:bd:8e:95:18:15:a4:49:d9:ac:6a:4a:12:8f:86:
6a:e8:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:10 2026 by rpki-client