Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: Xqa93zfgKSKoij2oUOU3salnqrACC1zVty76K2BjmVE=
Subject key identifier: 83:09:1D:D1:EC:D6:D0:D1:0C:A8:18:C8:82:4B:C3:BA:7A:D2:55:40
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019F129C31396C2026B4AA1124544F866551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 19B1
Signing time: Mon 29 Jun 2026 09:00:53 +0000
Manifest this update: Mon 29 Jun 2026 09:00:53 +0000
Manifest next update: Tue 30 Jun 2026 09:00:53 +0000
Files and hashes: 1: DuJmGWifOMO9raJbGr-Dic1J_wY.roa (hash: Zb3tG+z4TL7iWUC3uCpBd3IBefadb02gqKiouwyOf2I=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: iwOV/VHprMxnHScYYDhCIsShgXBx0w22FV6Vb8Ch5Ko=)
3: viNdF4GjOL8ikONaRFp3xaFJQ6U.roa (hash: uJwtKCv2JTbPu2uzWL8YYN7VZw8mK2wy3RXekknsD30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:31:39:6c:20:26:b4:aa:11:24:54:4f:86:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jun 29 09:00:53 2026 GMT
Not After : Jun 30 09:00:53 2026 GMT
Subject: CN=83091dd1ecd6d0d10ca818c8824bc3ba7ad25540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:a5:d7:cc:05:67:9d:97:ea:dc:43:f4:19:
e6:ea:68:ad:6f:0b:d1:16:18:66:0f:70:8e:cd:f2:
7a:60:1b:08:a9:41:ce:2c:de:2e:3d:c6:e5:a6:79:
52:4a:ac:d2:98:39:b1:ae:51:8e:74:71:9b:ff:d1:
7c:5b:a9:e0:d2:7d:2e:06:a9:24:4e:35:5a:ef:62:
e7:65:bb:36:f3:9e:24:56:98:3d:5c:08:5a:3e:cc:
9f:eb:34:2b:53:eb:22:79:29:f0:fb:61:2d:0a:9c:
24:a6:0b:fc:63:84:46:c9:36:d2:32:f5:27:ca:98:
9d:90:8d:af:e6:2c:fc:9b:1d:41:2c:e4:98:5d:33:
47:38:c3:f5:e3:83:bf:46:bb:bb:57:3f:6a:dd:8d:
d9:85:81:65:73:3e:24:66:5e:24:88:cd:17:a1:db:
4d:08:15:09:e0:e3:6b:dd:9b:48:5c:54:02:4d:cb:
78:80:99:94:18:31:c2:08:35:8c:2e:cd:52:71:54:
65:42:62:5f:71:23:47:aa:51:c0:bb:3a:28:a9:ca:
04:6c:2c:52:50:8c:58:27:b1:dc:12:b3:cf:d6:2a:
a1:0d:93:58:7e:70:5b:ea:e6:a4:a0:d7:41:f0:69:
be:b8:75:3b:b9:a7:04:ca:4b:88:08:21:22:43:8e:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:1D:D1:EC:D6:D0:D1:0C:A8:18:C8:82:4B:C3:BA:7A:D2:55:40
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d8:67:e5:da:76:a8:60:82:93:f7:f3:46:4c:82:69:2d:67:
9a:c9:f6:ef:dc:d2:db:e2:3e:24:ae:2e:88:31:d0:65:f3:31:
51:72:14:62:cf:ee:b2:0e:4f:f4:98:7a:1e:8f:00:8d:22:a7:
41:e5:06:ba:a1:29:b9:94:00:df:94:f7:87:2a:62:8d:9f:43:
8d:0e:6c:8a:bd:db:b6:8c:48:7c:ec:c3:fd:25:2b:8f:b5:51:
4a:69:44:ad:dc:bd:80:6f:3e:98:9d:41:45:99:ff:51:a5:9d:
80:f2:43:d3:b8:29:a2:a6:94:d6:e8:7d:2c:74:0b:1c:11:04:
fe:93:bc:f0:6d:bd:4a:39:e1:bc:7c:37:6b:ab:5b:fe:38:df:
f3:f5:a7:cb:13:fe:bc:e1:c2:ec:15:77:d7:f7:e4:18:89:1c:
f9:f5:0c:e0:cc:fa:73:1b:ee:0c:f5:d5:e0:fe:56:c0:2e:19:
c4:e9:dc:27:bd:1e:53:7d:b0:8c:50:35:b5:a1:fe:2c:f3:9d:
ad:88:3f:5a:68:82:70:d9:58:d8:94:77:23:03:b3:28:0d:d2:
b5:7c:64:b5:01:47:4c:d5:6b:61:30:63:f6:db:08:5c:b8:be:
03:f5:35:e6:91:0e:b0:ce:af:96:f3:e5:68:e2:1c:94:ce:08:
43:2a:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:36:53 2026 by rpki-client