Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: UxBGGgWZtikhiZGmMqHVZTRRK+igGTLIUDrk1wArEiI=
Subject key identifier: A5:B9:CD:11:BE:89:1B:13:B7:16:D4:F9:1F:7A:82:2A:75:C7:E8:5B
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019E9D0590BB6405353D895E1E9660BAAB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 07CB
Signing time: Sat 06 Jun 2026 13:00:48 +0000
Manifest this update: Sat 06 Jun 2026 13:00:48 +0000
Manifest next update: Sun 07 Jun 2026 13:00:48 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: Z8AGmlSDRDmp9nWedkyina5TGfM4foufQmeNZS0OOjs=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:05:90:bb:64:05:35:3d:89:5e:1e:96:60:ba:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jun 6 13:00:48 2026 GMT
Not After : Jun 7 13:00:48 2026 GMT
Subject: CN=a5b9cd11be891b13b716d4f91f7a822a75c7e85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:f5:5a:d4:74:d9:0f:b7:0d:97:de:67:c5:
4f:10:11:88:fa:b5:cb:87:61:9e:b8:ba:48:65:a1:
e7:a5:ba:3c:c5:5d:c8:83:c6:5a:a2:97:7e:71:9a:
2c:6e:36:20:28:94:5f:16:2b:df:38:17:94:66:1b:
98:cd:81:96:4b:9a:c4:3f:0c:e9:1b:9a:ea:7e:38:
30:3c:75:c1:f8:fc:4e:2c:0f:f6:83:84:f9:a3:14:
2b:88:ff:15:56:84:9f:d2:d1:03:7f:81:52:73:01:
5e:3d:28:86:2c:3a:38:5c:4d:e3:f8:da:ee:55:f7:
78:bd:c0:8e:76:4f:d3:66:6b:28:0f:cf:8f:87:50:
d9:be:26:85:95:f7:a7:f2:a2:f3:de:0e:f6:b1:32:
bc:78:b7:50:07:b3:fd:1b:7f:cd:c4:a6:2e:a1:a5:
eb:92:b6:c0:48:82:62:f9:d8:e6:eb:4c:b2:99:b0:
53:a8:12:ca:1e:0c:56:27:6b:70:c8:94:6f:77:11:
a5:ea:37:e6:b7:36:83:c1:cd:94:33:6e:49:a4:ad:
09:9b:c0:27:28:c6:8f:80:30:57:93:bb:94:e5:23:
b8:ca:a0:1b:33:72:dc:9a:3c:25:f8:d4:77:ed:df:
8e:6a:dc:1f:9b:35:a4:2c:d9:72:a5:72:19:8c:d1:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:CD:11:BE:89:1B:13:B7:16:D4:F9:1F:7A:82:2A:75:C7:E8:5B
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:3a:f5:a4:5a:66:96:9c:a5:3b:c6:f8:96:e1:c5:ed:80:
24:e4:2a:31:1e:bd:86:59:ad:73:a0:19:a0:b9:24:00:1c:be:
ff:ca:96:1c:53:d8:db:3f:df:88:98:f2:8b:e6:70:69:20:60:
88:eb:b9:46:2f:4d:c2:55:e7:e9:99:ad:62:2b:53:8a:de:bb:
71:4c:ff:19:ce:05:4e:9a:5b:ee:ca:2d:19:9c:37:e9:cb:e3:
0a:ee:c2:cf:39:6f:cc:43:ea:a8:17:28:42:2b:12:8a:87:8c:
fc:35:89:9d:b3:dc:0c:c4:b8:83:4d:f8:d4:e4:af:2d:f0:df:
44:74:41:4b:6e:ec:4f:86:54:b7:07:9a:70:01:3c:4a:61:40:
8c:3c:43:b8:f3:f7:56:51:5f:f5:e1:ca:6e:13:43:f2:ec:10:
8e:74:a4:27:af:58:ed:27:a1:d4:10:ef:61:a4:ac:f3:b4:36:
17:0a:17:b2:3b:b9:ae:a8:4d:fc:70:d8:5f:bf:d9:63:75:77:
7d:fb:9c:09:9d:fb:7b:d1:16:16:bd:be:f3:d8:fa:ff:82:9a:
fe:8c:03:49:18:20:f3:c7:19:20:68:97:04:b6:8c:78:73:85:
6e:5a:51:ad:f7:67:8f:3b:50:b4:4f:83:99:fd:b9:c7:20:51:
dd:bc:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:06:24 2026 by rpki-client