Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: t0CzWOQWcypVIRAraGxDB6FP4EW5VI7lxtIh8ygEaJw=
Subject key identifier: DF:2C:D7:71:0D:02:BE:03:C1:90:5B:3B:B7:ED:99:7A:F0:D8:E5:5D
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 019E92B846CFA587871A98976F1358CDAA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 03BB
Signing time: Thu 04 Jun 2026 13:00:10 +0000
Manifest this update: Thu 04 Jun 2026 13:00:10 +0000
Manifest next update: Fri 05 Jun 2026 13:00:10 +0000
Files and hashes: 1: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (hash: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: RKpExuMHxprm5Nfgxh4EfnAeGOWWlemhKyjtiz0II28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:b8:46:cf:a5:87:87:1a:98:97:6f:13:58:cd:aa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jun 4 13:00:10 2026 GMT
Not After : Jun 5 13:00:10 2026 GMT
Subject: CN=df2cd7710d02be03c1905b3bb7ed997af0d8e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:9c:ee:80:20:3c:b9:f7:96:37:50:c9:fe:
6e:1e:fe:29:05:86:c9:1f:48:24:cf:b0:76:c2:af:
3d:22:77:30:02:f5:32:08:f1:cc:60:8f:41:11:1d:
a8:e0:21:8b:93:ce:c8:0c:b5:d4:91:03:ec:7c:c1:
1d:46:cf:1b:fd:3f:b6:96:74:5e:6d:fa:51:6f:7e:
ab:d7:cd:90:fd:18:c3:fb:0e:d7:2a:04:bd:7a:be:
3d:13:98:52:b4:e6:9e:0c:cd:3b:02:65:0f:c2:b9:
03:93:43:96:1d:67:1c:da:ef:34:ec:91:61:e5:ec:
0c:ed:af:03:2b:25:ef:3f:bc:3e:c0:c8:cc:22:5e:
1d:50:9b:31:5e:19:b6:17:00:9f:3e:48:e1:c5:28:
e6:00:60:f7:4e:5b:76:ad:1f:7f:7b:c0:90:d3:97:
dd:42:45:e7:b7:29:3e:2d:99:60:47:44:34:e3:15:
bc:92:92:4f:ed:1c:15:ef:48:35:10:f9:b1:3f:7c:
bf:a5:2f:10:9a:26:92:62:49:bd:14:97:95:73:84:
3d:e1:31:18:f8:41:6f:86:bd:47:ca:e7:32:20:2c:
97:57:e3:40:cb:11:10:17:31:6f:d5:52:8c:16:d6:
7a:b0:bc:8d:85:71:0b:ab:dc:27:82:9f:33:49:c7:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:D7:71:0D:02:BE:03:C1:90:5B:3B:B7:ED:99:7A:F0:D8:E5:5D
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:7b:2e:16:5a:91:7b:01:7c:01:b6:e1:8a:3d:4b:a4:ae:
d0:bd:56:61:5c:0d:be:78:0e:6c:22:3a:c1:0e:c6:16:ae:3f:
9a:6b:15:83:8c:c9:d6:37:9b:22:0d:69:e8:8b:04:84:00:da:
84:81:24:a3:12:e6:82:08:2a:85:88:01:f1:7e:43:d0:4f:41:
6d:c6:ad:18:9e:ee:9c:09:5f:59:f3:a7:46:80:69:b2:36:36:
ba:35:af:24:2e:b9:92:df:2b:1a:2b:cd:91:44:b7:05:1e:14:
1a:c8:02:cd:06:cf:fd:5a:b6:61:ec:6d:5e:46:d1:97:f7:9a:
2f:53:f4:9e:06:62:73:25:69:2e:3b:52:c0:06:2f:5d:8f:50:
9d:e8:00:fb:94:91:70:e2:2d:dd:a6:51:75:f6:37:b5:d1:7a:
8f:60:33:0d:6b:71:73:5b:89:d2:22:e6:24:83:85:73:b0:b3:
f5:42:70:84:b8:9b:d0:0a:b7:c6:0f:36:47:f4:f7:dd:0e:10:
75:44:68:e5:cb:1a:4c:11:6d:7b:40:9c:f4:a3:16:a0:9b:93:
17:ff:98:8f:f4:da:86:7c:05:6e:86:d8:66:7b:cb:ae:0e:db:
69:93:a4:f5:af:cc:50:53:ba:a0:88:26:7a:af:be:53:a3:3c:
9e:ac:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:20 2026 by rpki-client