Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: TQaFtIlNKdkuPxm1E4ZAt94xqYUDYCmsWqg5r/jr4hA=
Subject key identifier: AF:5C:2E:5D:E7:38:35:B6:95:4B:13:3A:94:B1:60:48:CB:16:AE:30
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019E9D06388BB4FF66DB430EFA2AF9D1A30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 124C
Signing time: Sat 06 Jun 2026 13:01:31 +0000
Manifest this update: Sat 06 Jun 2026 13:01:31 +0000
Manifest next update: Sun 07 Jun 2026 13:01:31 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: kuklOldc3m4DtX+uGal8EKWy6rrtwO4322RXoGphbxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:06:38:8b:b4:ff:66:db:43:0e:fa:2a:f9:d1:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jun 6 13:01:31 2026 GMT
Not After : Jun 7 13:01:31 2026 GMT
Subject: CN=af5c2e5de73835b6954b133a94b16048cb16ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:47:00:24:ea:fb:06:77:d9:61:2d:3e:85:
b9:67:d6:21:43:9b:91:07:f6:9b:74:68:bb:47:fe:
bd:8f:e0:7c:57:42:5d:d4:76:a1:57:06:2c:d3:75:
4c:7f:13:76:eb:64:14:05:c9:73:b0:51:ef:da:bf:
14:f7:34:b9:ab:60:3c:14:ac:66:57:64:52:87:53:
3f:60:02:5d:a3:4c:96:e9:81:60:15:0e:2d:8a:9e:
e5:21:a8:a4:4e:12:74:2c:a8:2e:bc:e2:5e:6c:ae:
d8:a9:f3:67:df:b8:31:b2:87:42:d6:ba:14:bc:be:
1b:8d:72:60:c0:16:d3:fa:f1:87:d5:0c:32:64:01:
d5:a3:61:fd:49:70:b9:a8:15:28:3f:12:16:1f:d3:
cb:c0:eb:6c:25:1e:0e:8e:b4:9e:12:c2:4d:93:9d:
66:cf:c7:da:36:ae:05:46:db:62:25:02:30:50:f9:
74:1c:ab:a8:c3:88:db:76:0d:d6:82:1d:20:20:38:
0f:9e:cc:af:2d:73:f9:db:1a:e8:2d:24:1d:65:2b:
68:f3:e5:1e:82:f3:00:17:b0:6e:92:a8:ad:71:b1:
d7:8a:39:0c:ad:db:45:b5:7b:1a:31:8d:0b:a2:f8:
98:5c:f0:63:ee:43:82:c7:1c:d4:06:f0:eb:23:2b:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:2E:5D:E7:38:35:B6:95:4B:13:3A:94:B1:60:48:CB:16:AE:30
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:57:2b:31:80:a6:e5:ff:5f:f2:52:58:5c:d9:0e:ca:08:29:
35:b5:8c:29:ce:75:3d:71:8c:53:7d:fe:34:59:2d:93:bc:30:
25:df:23:2b:bf:e6:4c:e6:69:90:88:a5:c7:78:c7:70:dd:1f:
07:3d:2d:c6:17:4a:bb:b3:d4:c0:4f:0a:6d:36:27:32:14:e3:
5b:8b:38:c0:eb:63:b7:a2:ce:e2:07:d1:87:77:3a:e0:d5:2a:
1d:21:c4:ed:c3:24:b6:89:66:bd:9b:20:71:e9:10:13:cf:58:
30:25:32:1c:73:3a:df:98:44:37:75:62:22:6e:6a:f6:9a:6e:
c6:79:83:7e:ed:15:73:19:ab:1e:a4:f8:b0:f2:ba:06:ee:46:
6b:80:fe:e4:c5:d9:17:80:2e:4c:46:d7:fc:b1:15:90:f6:9d:
62:12:4b:ae:86:a0:c8:e5:d3:4b:14:3b:02:62:84:5b:5b:74:
70:cc:34:19:48:0f:ce:1f:6a:d3:ad:5d:6b:4e:45:16:b1:a5:
19:e2:f1:30:41:f3:01:a2:17:e3:ee:30:d2:c0:6e:f3:bb:0d:
5a:f8:3e:f7:c1:55:fe:2a:68:ba:e7:9a:f0:ba:92:df:f2:f4:
b2:92:68:98:42:2f:19:da:2b:aa:a9:d4:0b:fe:6f:b9:16:5e:
49:0b:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:32 2026 by rpki-client