Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: QTF5eORceA/2CuJ21Tg1Q8WpZpU4KYlARO/8enHhXjo=
Subject key identifier: 99:A6:8A:9B:20:A2:09:9F:B8:A2:69:3E:2E:F5:9D:2D:70:55:B8:A2
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019EED4675F30DE5A8B9B180F61EB57AC1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0B5F
Signing time: Mon 22 Jun 2026 03:01:18 +0000
Manifest this update: Mon 22 Jun 2026 03:01:18 +0000
Manifest next update: Tue 23 Jun 2026 03:01:18 +0000
Files and hashes: 1: 2j_D2kuSa562Zx4XnJ12w00oiMA.roa (hash: axWB++PeEKcojO8mVkayfPDvB+OsvgmhWTzXNDpM5Gk=)
2: 7Un3ch6sdTltAsulfRI9pykeqS0.roa (hash: qClWxzfRNb7UAsReGRMx4ioTUH4td3oi9VjiWf2rMZk=)
3: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: Spr4tIi5qG7WeMdmA20JUOMWAfcqEqDLxAs8/rNVcrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:46:75:f3:0d:e5:a8:b9:b1:80:f6:1e:b5:7a:c1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jun 22 03:01:18 2026 GMT
Not After : Jun 23 03:01:18 2026 GMT
Subject: CN=99a68a9b20a2099fb8a2693e2ef59d2d7055b8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:df:98:d3:9c:39:58:86:2f:82:77:ba:d6:
bf:7f:8b:04:9b:94:84:35:c3:bd:0e:e1:ae:d2:71:
23:58:e0:25:05:e3:13:ad:9e:4c:66:79:13:c6:3e:
6b:9d:d3:16:61:8c:b5:ae:0c:74:12:9a:15:77:1d:
31:05:0b:55:f2:ba:37:b8:de:fb:bc:93:96:bc:87:
12:0e:b8:e1:82:ed:2b:5d:8a:20:47:11:2c:49:0b:
ca:2c:dd:74:a8:90:d7:aa:87:03:bb:d9:97:9c:83:
05:89:94:c1:dd:9a:8f:34:a7:7e:c1:fa:4f:72:3f:
69:9d:8a:2c:8b:72:0d:56:b9:fc:e7:6c:49:6d:a2:
91:39:ae:e6:f7:37:32:20:ce:1c:6c:13:59:87:70:
06:fb:45:d9:ea:4a:01:a7:b2:29:ab:6b:05:3a:a4:
6e:0f:86:67:a5:89:8d:9a:7e:30:0e:86:89:ba:41:
62:b8:09:63:cb:e3:9f:b0:92:09:45:1c:10:34:c6:
c6:cf:4e:b4:48:b7:4b:78:3a:5c:74:86:83:36:1c:
aa:69:5f:ac:d3:72:91:5c:96:16:db:4d:8a:e7:a4:
da:2e:0f:d5:5e:8d:fd:9a:51:87:19:b4:8c:a2:7b:
1b:0d:3c:3b:3e:53:1c:e3:17:5a:bb:6b:32:91:08:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:8A:9B:20:A2:09:9F:B8:A2:69:3E:2E:F5:9D:2D:70:55:B8:A2
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9b:76:7f:6e:24:b7:cf:94:2b:72:16:96:71:3b:ea:46:bc:
17:45:46:76:18:0a:16:32:3f:71:9c:35:b3:48:ee:4b:56:13:
a1:a4:92:66:e9:ee:ea:ab:93:09:77:4f:49:a5:9d:6f:e0:75:
76:de:2c:01:3d:8a:06:f5:60:02:61:49:51:49:35:f9:fa:ad:
5e:30:47:96:1d:75:f7:a1:9a:96:b9:2b:c9:76:a7:ed:bc:44:
13:75:09:f1:be:34:6a:67:ae:11:ff:ed:4f:2c:9f:3a:bd:43:
df:38:b4:9c:8a:5b:cf:3d:2f:c9:14:c8:9d:11:a1:54:4d:21:
c5:b5:cf:34:36:2f:ab:c7:7a:61:78:29:6a:d6:95:4c:4b:31:
2b:83:c9:5d:6a:e1:99:2c:14:c3:dc:d2:5a:ef:71:86:af:de:
23:4c:64:d7:e6:4b:7b:f0:3d:2b:47:b2:61:82:70:44:73:c3:
14:17:23:ed:d0:4a:86:57:d9:91:d3:9d:6b:3c:28:65:f7:5a:
76:d4:65:d7:c9:75:76:91:6d:d6:00:9e:7e:b6:d7:e5:62:e5:
37:6e:20:36:b9:ee:66:9d:cf:7e:5d:fc:f8:f4:5d:50:92:2a:
86:15:75:9d:c3:56:98:e3:e2:1c:4b:f6:69:ba:ec:e3:0e:56:
9a:70:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 08:03:43 2026 by rpki-client