Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: w+dsxl7NlwE3CthlgblgWpCQutFEVQ7E2XHB3WdRt74=
Subject key identifier: 28:96:4F:92:C8:12:4A:94:60:E4:B9:79:0E:08:28:88:25:F4:FA:66
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 019F182FFC6A8838A4DE954CC575FA143AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 0699
Signing time: Tue 30 Jun 2026 11:00:25 +0000
Manifest this update: Tue 30 Jun 2026 11:00:25 +0000
Manifest next update: Wed 01 Jul 2026 11:00:25 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: avWKjY1lQ4gqt8nq+86WtxmvsrA+JfT56B8wk9NFZ2M=)
2: iWvUwAU_qvWcuMvoIuoO-qPVv9c.roa (hash: FGFkjOVAlseZE4i4Gp+aJPkMH2fpBKQOFk0SOsvRbNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:2f:fc:6a:88:38:a4:de:95:4c:c5:75:fa:14:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Jun 30 11:00:25 2026 GMT
Not After : Jul 1 11:00:25 2026 GMT
Subject: CN=28964f92c8124a9460e4b9790e08288825f4fa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:d4:fb:47:4f:98:86:b9:32:41:95:04:15:
9d:16:f1:95:c6:82:5f:6d:05:94:fa:48:60:68:40:
b6:26:08:e5:1a:1d:fe:5e:12:f6:cc:0f:26:4b:ed:
35:a4:54:f2:02:3e:da:73:f6:97:a0:39:d4:b8:92:
df:47:21:2f:a3:83:e5:61:88:af:75:8f:a3:4a:a5:
9f:ee:b5:2a:c1:30:50:cb:54:c7:40:15:ae:c2:8c:
88:55:29:4c:2c:ad:95:a7:60:eb:7c:2e:47:86:12:
64:d3:92:f7:c9:aa:81:83:1a:20:f2:24:5e:fa:b8:
43:7a:4d:4f:b8:69:98:c8:9a:78:96:b9:eb:9d:a5:
be:01:62:b7:41:81:99:28:b3:24:9d:4b:de:51:15:
19:0a:c3:da:26:63:95:f6:85:3a:90:f2:9b:3c:71:
62:15:57:d8:c2:b7:e6:13:8e:69:d4:12:08:62:a9:
e0:2d:85:78:58:05:e5:14:37:53:4c:9e:aa:8f:83:
22:5f:5e:73:52:c4:bb:f3:95:fe:f6:0c:95:cf:40:
65:44:9a:f3:48:00:ae:d4:28:48:e7:d3:9f:5d:56:
82:a7:1e:51:97:4d:ce:37:ac:a2:0c:b5:8f:50:f8:
2c:6a:de:fd:eb:59:88:22:6c:d6:50:20:4f:73:dd:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:4F:92:C8:12:4A:94:60:E4:B9:79:0E:08:28:88:25:F4:FA:66
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4d:56:f1:c8:1f:8c:5d:36:22:9e:bf:f7:f8:e2:ca:07:64:
f9:c3:90:45:6e:f2:51:c5:71:f3:e0:d7:56:1e:60:d4:ea:7d:
10:41:61:42:c1:8e:1e:b0:49:f8:be:8a:0a:fe:4c:e2:64:07:
83:d8:15:1f:78:6e:d4:5c:1b:a9:64:6f:d7:e6:69:12:7f:de:
33:31:f6:28:6e:22:ad:cb:e9:38:5c:d7:1f:c6:66:67:05:f9:
76:fb:aa:52:f4:39:c2:ab:1d:63:7c:5d:cf:45:c4:d4:23:a7:
a1:a9:ac:aa:df:0f:d9:cf:33:89:e2:84:b0:cf:b2:04:05:31:
12:4d:21:bd:35:03:e5:43:05:22:10:21:c6:8b:4c:5c:7a:1f:
d3:0b:56:eb:ff:bb:94:59:6b:9a:14:af:f9:0d:c4:5e:d3:59:
6d:9a:a2:47:15:97:57:83:c9:e8:32:e8:52:d0:31:5c:cd:ec:
39:c6:81:c5:8c:df:5c:c8:72:cb:21:d7:5c:bc:df:20:1e:87:
c3:a1:f2:55:55:58:a8:04:2b:90:59:84:c8:3d:1d:84:8e:19:
e5:ec:eb:0a:30:cb:83:8e:af:f8:96:e9:c7:ef:e1:10:4b:10:
5e:39:ff:40:da:ea:c1:3f:a5:2b:3c:85:db:31:d8:ea:73:c4:
30:42:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:28 2026 by rpki-client