Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 5Rs7nmshCyApEIQqCGfFJWy922yrWIQkoKi3DYYw/jc=
Subject key identifier: D4:B5:07:D0:69:6A:90:BF:F0:7E:0C:10:01:6E:E4:F9:1B:2B:9A:73
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019EB6FC0F8B667AB2A8C3CF38DB3AC0859C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 07FF
Signing time: Thu 11 Jun 2026 14:00:32 +0000
Manifest this update: Thu 11 Jun 2026 14:00:32 +0000
Manifest next update: Fri 12 Jun 2026 14:00:32 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: 6OR0gyPIvjCTpWzwitRM7mQfnQNn0ihpe6nAqRxjtEw=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:0f:8b:66:7a:b2:a8:c3:cf:38:db:3a:c0:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jun 11 14:00:32 2026 GMT
Not After : Jun 12 14:00:32 2026 GMT
Subject: CN=d4b507d0696a90bff07e0c10016ee4f91b2b9a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:ff:50:92:43:17:c8:c7:bb:aa:88:4b:33:
d4:2e:8f:48:14:2b:9f:93:65:8d:34:56:6d:e0:2c:
03:b2:72:15:4c:e1:bf:80:76:98:40:52:1a:61:9c:
87:79:c1:a2:e1:60:67:b5:dd:ce:2d:18:83:4c:3e:
bb:e3:aa:4b:12:9f:f4:55:f4:e6:9d:20:9d:01:ce:
25:c7:e1:1d:e9:a4:b1:28:ea:c0:1b:16:c5:bb:70:
17:7f:63:a5:1d:7a:bf:bd:d7:31:b5:35:a1:16:e5:
4e:d8:6c:9b:23:21:95:26:cf:7a:71:c2:90:b5:8e:
7c:15:de:40:1e:b1:22:c7:13:15:a1:ed:e2:3c:da:
b5:79:8c:0b:1e:82:18:f6:3b:19:54:76:6d:0a:c7:
36:3b:1a:a4:1a:8b:fb:2b:f3:c1:40:de:e4:a0:98:
1b:a7:b1:89:36:b4:4c:8d:2f:37:99:13:dc:6d:5f:
a3:35:54:df:b3:32:b0:bb:4c:99:7d:12:91:fe:3f:
a9:e5:36:a2:29:64:62:cb:b9:e7:1e:f5:8f:fc:e8:
39:45:50:43:9e:46:1a:5d:45:88:a1:98:92:b4:5a:
6d:40:ca:f6:69:64:b7:2c:8c:19:32:03:07:24:52:
14:ed:7f:05:ac:ef:cd:a8:1b:bc:0f:9d:f5:07:d0:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:07:D0:69:6A:90:BF:F0:7E:0C:10:01:6E:E4:F9:1B:2B:9A:73
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fb:82:c5:7d:54:2e:84:75:74:91:fb:c9:80:ca:ef:e2:79:
0c:ce:ab:28:82:ee:8b:e9:ef:f7:83:61:2c:d1:6e:b6:e2:c0:
75:67:bc:7e:dd:69:f6:e7:1d:10:be:53:e3:1c:13:eb:e7:13:
72:d0:67:5f:d3:c1:7f:15:82:f4:77:c6:8c:b9:24:0a:e1:4c:
53:e7:ac:91:f8:86:48:12:02:11:f2:60:f1:ad:35:50:64:00:
56:6c:fa:9f:ff:52:09:07:c0:4d:c1:54:13:b0:0c:cb:ca:75:
6e:b7:fc:67:d9:d9:d9:4e:06:0e:cd:39:4e:a5:d3:29:0f:57:
ad:cc:a0:c6:b2:ae:db:9f:20:a5:41:02:5e:19:2c:83:f6:8d:
4c:37:ba:97:c5:71:ef:82:f9:90:b4:ed:83:5a:23:80:b9:40:
78:3b:65:f1:3b:be:c9:c3:91:32:41:46:a9:0a:c9:f6:e8:27:
ee:d8:c8:2b:a1:f3:92:24:0b:ab:a1:87:f0:96:9e:e8:28:f7:
6e:8f:2b:18:2f:c4:22:06:5c:5a:f8:f2:88:84:2a:86:72:45:
4d:a7:2b:ee:3a:db:96:b1:26:d0:03:f0:a5:97:35:d7:0c:52:
2e:db:ae:4f:46:dc:be:9c:1b:ab:94:02:db:6f:0f:ae:4d:d4:
69:e3:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:54 2026 by rpki-client