Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: A3BWBflfWJQOQ+sOA1Z2cl8aLbbr7fUuJ4m5Kq6lW4E=
Subject key identifier: B7:2E:30:55:2E:14:0E:B3:97:CB:9E:2E:EB:AE:B7:9D:0F:0F:E9:60
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019EB7A164E20FFAE341F9C5DD20ECD1625F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 15C9
Signing time: Thu 11 Jun 2026 17:01:07 +0000
Manifest this update: Thu 11 Jun 2026 17:01:07 +0000
Manifest next update: Fri 12 Jun 2026 17:01:07 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: fNaE0Q5z+jnLxRtubtfz/4Z+Q6bRnOjE+/ECYPPT3MM=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:64:e2:0f:fa:e3:41:f9:c5:dd:20:ec:d1:62:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jun 11 17:01:07 2026 GMT
Not After : Jun 12 17:01:07 2026 GMT
Subject: CN=b72e30552e140eb397cb9e2eebaeb79d0f0fe960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:05:e4:32:6e:3e:2d:4b:9d:a8:f3:a2:3a:
7c:1c:db:a1:b0:76:e8:f2:42:2f:df:58:ab:21:1d:
d4:a6:0f:15:46:b2:45:57:c2:4f:a0:65:4d:86:f6:
81:00:18:9d:48:c0:b1:39:0e:f4:93:f0:ac:a5:6b:
b4:c2:46:2b:18:50:18:5f:74:11:f7:67:88:a9:65:
0f:d4:4f:a3:70:c9:7d:9e:8c:38:b9:f8:eb:6a:0c:
cb:0e:4e:33:89:5e:ad:72:90:d7:40:34:57:82:88:
c4:a8:71:d3:7f:4b:b7:9d:f8:7d:b1:d5:34:4b:3d:
3c:4f:7b:2e:16:09:1f:06:b6:42:d3:6c:ec:15:5e:
33:89:b7:fe:9d:55:43:fc:3f:3e:9a:44:d7:09:f2:
b1:be:0b:d9:24:30:a7:26:2a:b4:5e:06:9e:e6:ad:
fe:a7:1a:f6:6d:ab:5c:6e:c2:ca:9a:a4:1f:f2:7d:
2d:f7:4d:d1:2d:b3:eb:30:76:3a:7a:0f:9c:cf:cb:
fd:26:d0:38:1e:65:13:8b:1a:5f:7f:ba:f9:11:66:
c3:4a:11:a3:fe:82:0e:0a:e6:63:f7:3c:c3:71:f1:
6d:7c:6d:63:12:2a:16:b6:e6:1f:71:98:39:34:98:
10:4d:e3:20:2f:33:63:db:97:08:3d:58:fe:38:05:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:30:55:2E:14:0E:B3:97:CB:9E:2E:EB:AE:B7:9D:0F:0F:E9:60
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c7:fd:40:18:30:bb:2f:34:d8:e9:94:28:0e:0c:ec:4a:13:
ca:3f:fe:52:aa:0e:0d:eb:79:cb:2d:b5:9c:b7:b7:6a:ea:84:
08:ee:93:fa:1b:f6:d7:44:28:b9:5b:13:1a:93:58:20:b6:e4:
0f:00:ee:85:02:55:e7:84:71:f4:01:98:88:0c:a8:a7:9b:53:
8f:27:de:c2:ca:be:f7:27:a9:b9:b9:60:8e:9f:4d:4d:bd:46:
19:f9:a4:20:bf:ad:1d:cc:f1:7d:8c:0f:d4:0a:d8:de:60:5b:
81:a5:d9:28:52:87:b9:94:f9:4b:09:ea:13:43:43:17:23:46:
71:58:56:70:17:b5:1d:78:fd:3c:b4:67:75:6c:22:b4:24:bf:
c4:bb:49:69:07:d7:fb:e8:3e:11:99:63:3d:44:d5:cd:46:00:
01:02:d2:cc:46:0c:bf:e4:d6:07:c7:e3:ad:3e:d3:40:fe:1e:
98:ed:aa:95:59:f6:34:2f:4c:d9:90:62:75:91:96:a6:33:56:
73:c5:9f:c8:8c:cb:93:02:c1:51:f4:57:8d:6d:50:ba:71:f8:
60:1b:20:a2:3a:c0:41:a1:22:aa:9c:42:50:7b:4b:f5:8f:a2:
9d:20:4d:47:94:63:65:f8:09:f5:58:94:9d:1d:85:15:0f:23:
b4:f6:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:17 2026 by rpki-client