Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: a58pY6+s/IUTTQJ3yyyKz/H8UmQaTKpLMEDYxjRT9bA=
Subject key identifier: D1:E1:78:B9:51:02:98:35:89:75:DC:23:CD:CB:DE:01:3F:FC:66:BE
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019EBB47002C65997A5D52DDDC1CBE92A642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 10:00:52 +0000
Manifest this update: Fri 12 Jun 2026 10:00:52 +0000
Manifest next update: Sat 13 Jun 2026 10:00:52 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: b4MvB/BSc90+b/Ddz85YVBOS01A+c7VKK3tZad9M7HQ=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:47:00:2c:65:99:7a:5d:52:dd:dc:1c:be:92:a6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jun 12 10:00:52 2026 GMT
Not After : Jun 13 10:00:52 2026 GMT
Subject: CN=d1e178b9510298358975dc23cdcbde013ffc66be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:26:39:77:bf:e6:64:7a:3d:e5:f6:c2:ec:
0d:b4:79:fc:69:f9:20:1a:5a:f2:34:79:b8:ae:c9:
41:05:83:6d:07:5e:09:a8:8e:13:46:02:8f:84:69:
fe:31:b6:a5:0e:8c:cd:42:c5:43:8b:a7:3f:43:e5:
66:f9:b9:08:3e:c5:83:d5:96:4e:79:b9:ed:bd:19:
e0:cb:b2:29:86:5e:c9:70:99:c0:c5:ff:ed:8e:18:
66:48:2d:e2:e0:56:97:5e:33:82:09:49:e4:04:8e:
50:f2:d2:3f:84:21:ca:64:dc:e3:2f:6b:f4:1a:bd:
f6:8e:b9:c3:e4:63:d2:68:df:a2:a7:65:76:ba:8b:
50:23:c1:8f:22:2a:fa:70:39:61:0c:3e:c4:ad:ff:
b2:c4:2c:4f:b2:b6:58:ff:1d:b7:11:55:03:8d:60:
97:aa:e9:f4:df:66:e1:5f:24:1e:79:68:f8:24:6e:
12:9e:bf:8b:76:a5:3b:60:f6:87:db:30:92:d1:49:
e4:a7:7e:28:07:af:e8:26:af:42:bf:78:eb:1c:9c:
17:9c:a1:7c:0d:10:ad:2a:cb:36:c7:0c:3c:9f:18:
97:65:47:67:ee:b8:47:9a:79:3e:fd:2d:a2:1e:6d:
b6:82:d5:1b:ad:0e:20:28:24:01:d2:11:d0:38:f7:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:78:B9:51:02:98:35:89:75:DC:23:CD:CB:DE:01:3F:FC:66:BE
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:06:fd:37:e1:5c:8a:1c:2e:17:b7:db:2c:f4:b7:71:f3:04:
23:7c:ff:8b:06:71:b6:3f:63:c2:01:d8:f4:d1:f1:ce:6f:ef:
27:1d:1d:15:9e:3d:fe:cb:1b:8f:ad:6e:ac:e0:00:86:45:c0:
43:db:70:12:48:e4:bb:90:61:ae:94:8d:81:0a:d5:9a:ad:0d:
3e:d7:62:99:b2:65:6d:a5:1f:c0:2d:7c:91:14:a7:a0:89:22:
de:5e:fe:44:f6:03:1e:c7:05:fc:a0:5d:f3:63:42:b7:79:29:
8e:59:c8:2b:61:2c:e5:6f:ca:a9:50:77:56:1e:41:01:79:99:
d3:8e:92:62:b0:34:ac:be:9c:2f:86:ee:89:eb:f0:20:44:79:
12:e1:b3:7e:c0:75:23:5a:a8:49:72:22:8c:54:f9:1f:79:4b:
87:d7:96:31:90:0a:df:5e:e5:1e:aa:39:a4:ec:48:56:54:38:
75:dc:61:c6:1f:7d:f2:b8:5a:54:0d:5c:33:4e:97:0d:ba:00:
db:d7:99:f6:3b:94:80:d5:ee:4e:b5:9f:22:46:79:92:38:b9:
dc:65:dc:41:0c:c1:77:3f:55:f1:aa:61:86:80:70:24:86:ab:
00:fd:aa:9f:13:8f:a8:38:31:84:38:36:3c:fc:67:3b:48:f2:
6f:59:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:39:29 2026 by rpki-client