Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: jKEh9O1NQ2SOnjjs+WM/4AiYA6qZsA6qdr6EF0PJoHg=
Subject key identifier: CF:9C:4E:D3:33:EB:A0:48:04:42:0C:6E:0A:98:63:AA:1F:E4:62:12
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 019E90258FEDD75C5ABE49D25D10BC977970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 09CD
Signing time: Thu 04 Jun 2026 01:00:41 +0000
Manifest this update: Thu 04 Jun 2026 01:00:41 +0000
Manifest next update: Fri 05 Jun 2026 01:00:41 +0000
Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: ozxl42w1y5Eft2wUj62o7fYTZJSnXbFdSXsozxx1Ypo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:25:8f:ed:d7:5c:5a:be:49:d2:5d:10:bc:97:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Jun 4 01:00:41 2026 GMT
Not After : Jun 5 01:00:41 2026 GMT
Subject: CN=cf9c4ed333eba04804420c6e0a9863aa1fe46212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:84:30:5c:69:52:7b:91:5d:93:9f:49:3e:
aa:8c:40:c0:2f:79:16:48:b4:d4:15:2f:65:7a:bf:
0d:21:ab:63:54:c0:ce:fb:b3:ef:2e:2d:3a:75:06:
5b:82:d0:86:05:d5:6f:32:15:49:42:b5:6d:c7:30:
49:79:69:23:7d:75:87:28:dc:c5:4b:ef:aa:be:d5:
da:90:d7:3e:fa:32:6d:8d:e6:29:b0:2b:61:eb:2e:
63:c1:aa:f9:d6:fa:f4:e1:3c:63:80:a5:d5:d9:4c:
c3:ce:67:20:ef:45:5e:0a:6a:7a:4a:e6:be:53:d9:
3d:fc:ba:4b:4e:ce:f0:9b:47:dd:2b:d7:7c:45:17:
de:5d:4c:0a:2b:fa:7d:9d:54:1a:b2:27:ab:a1:21:
84:e7:22:f3:7f:10:20:a0:ff:ef:01:c5:e1:75:90:
fe:17:a0:05:82:30:0f:63:c0:c1:b8:2c:1e:34:77:
03:2e:5d:b0:30:1d:e0:67:c3:81:b5:ca:d1:e0:aa:
82:6c:f4:f9:f6:b3:08:81:39:a6:a6:f7:05:18:d4:
7c:2c:da:6f:65:aa:31:a0:4e:dc:28:bf:0e:f9:9b:
af:0c:d1:54:b1:cb:ed:a6:14:85:b9:e0:a0:dc:fb:
90:29:35:e0:ad:66:ba:12:b7:13:77:bc:b8:81:ad:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:4E:D3:33:EB:A0:48:04:42:0C:6E:0A:98:63:AA:1F:E4:62:12
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:e6:99:66:73:a8:f2:4c:fd:1c:a1:33:33:c0:7a:3a:81:
c7:bb:c0:09:7b:ee:36:5f:c2:a1:84:12:41:41:37:44:da:a9:
75:6f:8a:19:05:4d:85:88:91:53:6f:13:f3:93:a1:36:c1:87:
04:cf:91:b6:7e:34:8c:10:91:d8:51:27:a4:ab:ce:3a:34:f4:
27:15:3d:ec:3e:ea:07:8e:3d:dd:9b:cc:18:9d:d2:d4:bc:3c:
15:fe:15:25:00:f2:46:d3:73:f3:3b:77:f3:a2:46:ac:37:a1:
a5:d9:ff:9e:31:f9:3d:43:75:33:a2:67:ca:13:d9:6d:cc:2b:
ec:e1:d5:44:32:2c:65:10:e7:29:82:04:14:c0:6a:23:fd:49:
e1:d2:87:c2:5f:87:68:bf:d3:dd:bd:1c:6f:f7:84:65:8f:40:
6b:54:d6:2a:98:c9:73:9b:39:aa:ca:fa:3c:15:2c:4d:69:91:
12:59:cc:fc:95:84:30:c1:76:25:f6:17:e4:d6:77:9e:15:06:
4d:38:e8:26:bd:34:0f:f7:1a:23:3c:64:29:32:d8:14:12:1f:
de:a6:4f:5a:0d:98:2c:11:40:d5:25:01:c1:b4:81:4b:07:d0:
e6:0d:0b:a1:f8:78:76:38:e3:28:31:70:b8:27:5e:c1:24:c8:
b1:c0:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:02:37 2026 by rpki-client