Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: DynQ1r8Dq5gUC4OzL/YKj0tyPDSgVSYSe7UIFnpfxBo=
Subject key identifier: 76:4F:0A:FE:04:44:83:34:8D:A2:1B:8F:F4:1A:3B:EA:A3:26:E6:40
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019EB9FD4F287FAE17E2A2FC2C90AB90ACB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 18EC
Signing time: Fri 12 Jun 2026 04:00:46 +0000
Manifest this update: Fri 12 Jun 2026 04:00:46 +0000
Manifest next update: Sat 13 Jun 2026 04:00:46 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: z5hYG+v2QFk3clFuMofTGagjt9I5bKSuY7LSIwPxxEg=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:4f:28:7f:ae:17:e2:a2:fc:2c:90:ab:90:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jun 12 04:00:46 2026 GMT
Not After : Jun 13 04:00:46 2026 GMT
Subject: CN=764f0afe044483348da21b8ff41a3beaa326e640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:f0:14:54:5f:42:16:68:9c:df:92:c9:75:
20:f5:5c:f4:57:79:94:b7:db:e5:f7:ec:3b:f2:7e:
c4:2f:a6:24:b6:0d:58:cc:fc:3c:a0:8d:4f:49:ff:
bf:f5:5f:a4:b9:80:48:f9:c0:c4:1b:b6:70:63:27:
e0:61:a1:8c:97:d7:ae:cd:8c:90:06:a7:0e:07:6f:
0b:62:20:86:28:6d:d7:ae:5e:77:bb:38:75:37:e7:
09:5f:41:e4:b0:32:1c:af:a3:ac:1b:a7:b2:ce:e5:
ec:dc:6a:af:7d:32:3f:d6:ce:f6:c4:82:6f:66:69:
3f:f0:04:48:07:dc:f8:d0:02:57:3f:d1:72:77:4c:
f3:97:1b:4b:fb:66:70:69:90:15:fd:e9:ec:4f:33:
37:5f:8f:cd:64:0b:a4:67:11:48:d9:f3:71:cd:37:
c7:de:11:c4:54:45:d4:29:51:ed:0d:57:49:a8:8b:
66:88:3f:be:43:8b:42:b7:29:47:fc:6c:50:45:e4:
c4:eb:96:94:37:74:b6:f9:26:24:7a:bb:9e:e0:af:
b8:c1:23:31:b8:75:6f:59:d0:f7:aa:02:67:06:d0:
c9:5f:38:38:9d:3f:87:ac:61:eb:f7:91:58:8e:93:
42:af:99:74:7c:af:00:fb:37:41:a6:a2:d0:3c:2f:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:0A:FE:04:44:83:34:8D:A2:1B:8F:F4:1A:3B:EA:A3:26:E6:40
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:25:b8:34:8b:64:0c:a5:64:4e:82:40:7f:36:8d:2e:b2:d3:
9a:46:6c:29:81:1a:bb:f7:dd:02:87:6d:1e:32:cf:95:e1:e2:
a6:97:3c:4f:a1:39:5e:8d:91:2d:b5:15:98:76:d5:7c:a3:cd:
7c:de:a8:87:05:ae:c9:1c:cd:ba:fd:15:eb:29:98:7a:65:da:
d4:80:cc:5f:6c:f1:53:f2:41:1d:27:93:aa:cf:30:d7:34:8e:
50:d4:4f:4a:ed:98:49:b9:c9:1b:06:40:e9:72:0b:0b:8f:b8:
70:4e:24:24:b9:8f:19:77:0c:f4:00:b1:95:b4:2c:1e:b5:e3:
40:80:92:3d:c9:84:c0:35:cc:9f:c2:ce:6f:56:e4:d8:01:15:
34:56:e9:47:66:c1:0e:66:47:b1:e7:db:4d:e0:56:f7:b1:49:
dd:15:fc:fb:96:8b:d2:eb:d3:e5:20:dc:43:d1:de:e9:0d:d5:
7b:88:b7:63:07:2c:55:29:c3:89:12:b7:5e:63:a6:33:9e:90:
5d:9e:48:aa:ab:03:e8:a6:fc:34:2d:a4:16:ca:ab:63:e2:a8:
e8:aa:a2:65:0e:b0:d3:d4:03:90:f1:b6:25:b7:b0:02:36:14:
f6:b2:3e:49:87:bb:97:4d:db:08:d9:17:bf:45:04:5e:ec:10:
9c:97:6e:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/U8of64X4qL8LJCrkKy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2UzN2ViOWNiMTk4MzI1ZDY1NjY3MzI4OTI1OGQyOGVi
OWYzYjgwHhcNMjYwNjEyMDQwMDQ2WhcNMjYwNjEzMDQwMDQ2WjAzMTEwLwYDVQQD
Eyg3NjRmMGFmZTA0NDQ4MzM0OGRhMjFiOGZmNDFhM2JlYWEzMjZlNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1/wFFRfQhZonN+SyXUg9Vz0V3mU
t9vl9+w78n7EL6Yktg1YzPw8oI1PSf+/9V+kuYBI+cDEG7ZwYyfgYaGMl9euzYyQ
BqcOB28LYiCGKG3Xrl53uzh1N+cJX0HksDIcr6OsG6eyzuXs3GqvfTI/1s72xIJv
Zmk/8ARIB9z40AJXP9Fyd0zzlxtL+2ZwaZAV/ensTzM3X4/NZAukZxFI2fNxzTfH
3hHEVEXUKVHtDVdJqItmiD++Q4tCtylH/GxQReTE65aUN3S2+SYkerue4K+4wSMx
uHVvWdD3qgJnBtDJXzg4nT+HrGHr95FYjpNCr5l0fK8A+zdBpqLQPC9qcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZPCv4ERIM0jaIbj/QaO+qjJuZAMB8GA1UdIwQY
MBaAFKk+N+ucsZgyXWVmcyiSWNKOufO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYt
MzlmNzUzNzU3ODQ4LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYtMzlmNzUzNzU3ODQ4
LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByW4NItk
DKVkToJAfzaNLrLTmkZsKYEau/fdAodtHjLPleHippc8T6E5Xo2RLbUVmHbVfKPN
fN6ohwWuyRzNuv0V6ymYemXa1IDMX2zxU/JBHSeTqs8w1zSOUNRPSu2YSbnJGwZA
6XILC4+4cE4kJLmPGXcM9ACxlbQsHrXjQICSPcmEwDXMn8LOb1bk2AEVNFbpR2bB
DmZHsefbTeBW97FJ3RX8+5aL0uvT5SDcQ9He6Q3Ve4i3YwcsVSnDiRK3XmOmM56Q
XZ5IqqsD6Kb8NC2kFsqrY+Ko6KqiZQ6w09QDkPG2JbewAjYU9rI+SYe7l03bCNkX
v0UEXuwQnJduwg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:27:51 2026 by rpki-client