Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: yuvBXOivtAt582fRDoITEeNbx8mH1uZRJnDI/nE+x44=
Subject key identifier: 54:6B:12:BD:8A:19:7D:F2:6E:A6:79:8C:20:6E:BE:CF:51:8C:C6:BB
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019EBA340DE0CBF6A6D2A87B743CD1EE343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 05:00:34 +0000
Manifest this update: Fri 12 Jun 2026 05:00:34 +0000
Manifest next update: Sat 13 Jun 2026 05:00:34 +0000
Files and hashes: 1: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (hash: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: Cuwsgx6RWmpjtJTTB4yJyJkfiOYdFq6FeMS1qPN0tVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:0d:e0:cb:f6:a6:d2:a8:7b:74:3c:d1:ee:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Jun 12 05:00:34 2026 GMT
Not After : Jun 13 05:00:34 2026 GMT
Subject: CN=546b12bd8a197df26ea6798c206ebecf518cc6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:26:16:51:23:1c:46:fd:2f:a3:d0:94:39:
4d:53:e5:20:c9:7d:13:a3:1e:a0:72:88:0b:71:96:
4a:ee:5c:78:a3:ac:7e:06:c5:ae:34:10:f2:6b:ee:
0e:49:74:69:c3:46:b5:bb:35:be:28:49:e2:39:0b:
c4:d7:4b:5a:b8:c3:24:26:cb:a7:04:1d:3a:2b:be:
a2:c0:ec:e9:af:8e:10:e6:14:75:2a:4d:9e:51:8f:
66:61:2b:83:10:e2:16:0a:cf:5a:c9:40:0b:38:4c:
04:5b:26:8c:9e:f6:dd:fe:1d:0c:da:73:7d:64:ee:
ce:c0:bd:84:3a:dd:70:7f:f7:8b:ef:16:e4:93:f9:
d5:9a:cd:ea:6c:2c:d7:4b:27:55:93:68:fa:76:f0:
65:b5:39:49:23:f6:53:10:80:e7:23:b8:29:2d:d7:
dc:97:3b:0a:35:f7:95:e6:b7:e9:12:64:57:c1:e2:
4d:4c:dc:04:88:92:b1:be:ad:d5:ee:d9:2b:68:02:
9e:92:a4:97:2a:53:4c:cd:01:ce:9b:f8:9d:fd:98:
c7:91:a5:47:ce:58:a1:0c:1a:2f:c8:d4:28:c7:b7:
26:d4:81:08:e3:f9:ae:05:d7:da:0f:5d:6c:cb:c2:
9e:da:a9:93:fc:da:31:d8:19:e8:1d:4b:05:71:17:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6B:12:BD:8A:19:7D:F2:6E:A6:79:8C:20:6E:BE:CF:51:8C:C6:BB
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:49:91:37:4d:4a:22:9f:e0:5e:0e:04:95:96:2c:9c:30:
86:0f:79:47:1c:5e:df:3a:3e:f6:d7:c7:0b:e5:b9:4c:84:32:
98:96:82:58:4e:c8:61:1a:ca:48:d7:71:f4:8a:7f:eb:d5:cc:
77:23:cf:77:38:ec:0f:f1:b1:47:28:af:d7:9c:bf:35:8e:9b:
a6:e3:d3:83:16:49:28:4a:84:12:24:04:46:39:22:a4:35:bb:
5d:b7:a1:ff:ae:7e:3d:1d:2d:3e:03:e0:5e:e9:b5:00:54:6e:
3f:01:75:ab:a8:a1:10:d6:34:25:43:5c:ea:59:9b:74:e9:e2:
b8:44:ec:2d:ab:6e:52:58:62:d8:ea:ae:5f:3b:5b:e5:6a:2b:
f4:13:56:36:0f:85:65:e3:ea:d8:db:bf:c5:d9:74:a9:9f:d1:
35:44:1f:b0:95:3c:d1:b1:27:94:79:52:ba:2b:67:46:2c:7a:
f9:91:fc:bc:79:32:9c:0e:76:70:a9:b0:31:5b:68:24:45:de:
58:ee:90:47:9e:fb:07:2e:b9:36:aa:02:ce:b6:a7:3d:bc:6d:
8e:8a:42:e8:da:da:a6:25:fb:2c:c8:6d:36:2f:b5:86:11:3e:
8b:ef:b3:46:08:fd:66:2f:83:d8:70:71:17:df:8c:bc:c0:bf:
df:51:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:31:33 2026 by rpki-client