Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: qZjSTg4KaeFvHhtaaAmCfk00PYzDgGFBy/wI9PEiOTY=
Subject key identifier: 5A:2C:21:92:FF:C8:2B:CE:23:9E:29:05:23:A0:C8:54:30:89:0B:67
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019EB76A98C11C1E9FEC4A05B90D369FBAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0AEC
Signing time: Thu 11 Jun 2026 16:01:16 +0000
Manifest this update: Thu 11 Jun 2026 16:01:16 +0000
Manifest next update: Fri 12 Jun 2026 16:01:16 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: 28gSvdQi2qFY/rUXHe0DIBEWsgIXx75xSncneGtxSI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:98:c1:1c:1e:9f:ec:4a:05:b9:0d:36:9f:ba:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jun 11 16:01:16 2026 GMT
Not After : Jun 12 16:01:16 2026 GMT
Subject: CN=5a2c2192ffc82bce239e290523a0c85430890b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:42:d6:35:f1:50:26:6a:d1:30:82:ef:0e:
ec:4a:67:c7:d9:82:3f:b6:9f:d8:89:f1:e2:93:e6:
d5:11:e7:18:16:40:e2:5b:ac:39:87:56:c4:eb:46:
31:f9:93:00:c7:59:b4:0c:50:07:3d:d7:dc:f4:14:
96:b5:41:44:44:8e:02:7c:b4:68:ad:f1:7a:c9:be:
5c:ab:a2:22:b7:dc:2a:21:a2:89:d5:b6:b0:7b:d2:
23:bc:51:4f:6c:a3:ea:8b:c8:b4:a2:5b:c2:2c:dc:
35:88:bf:29:d1:1a:34:3a:b0:21:ea:0a:e1:e6:90:
85:79:04:89:bb:23:71:9d:4a:d5:89:31:b4:81:b0:
d8:62:86:c0:e6:31:d6:33:03:59:7f:9d:15:b8:f1:
98:5e:dd:8f:9b:ee:f4:a5:63:ad:de:f4:d9:fd:b6:
b0:8f:29:0c:b2:31:07:d9:f3:08:9c:d0:d3:43:2f:
4b:de:60:2c:06:db:64:a8:54:12:49:7c:de:63:eb:
3d:83:7d:b7:18:a4:fb:69:ae:ad:40:98:aa:8f:ee:
ff:cd:6a:5f:79:82:ed:c8:49:1b:74:d1:56:92:42:
f3:36:4c:64:c6:4e:45:fd:97:b4:58:ac:b8:9c:f8:
1e:5b:20:52:c0:26:23:3f:fd:eb:27:52:11:0a:1b:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:21:92:FF:C8:2B:CE:23:9E:29:05:23:A0:C8:54:30:89:0B:67
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:b7:ad:47:be:1e:04:d0:f1:5d:bc:f0:93:e4:ac:fe:21:
b5:40:ee:f3:be:c2:56:52:d3:d2:58:3d:a2:32:15:59:ba:e2:
d7:93:a8:d8:65:b0:f7:f6:c3:e5:28:ae:fd:c2:30:e5:cd:81:
6b:07:79:85:f9:24:85:0b:cc:c6:0c:06:7b:3a:d7:c0:1f:70:
c6:c0:6e:59:5c:50:c1:5f:0a:4a:0e:e1:ea:37:68:64:bb:ec:
27:48:d9:5c:84:0c:33:66:18:01:af:aa:9e:30:7d:42:c8:1a:
59:89:82:3c:d4:70:ca:35:38:0b:6e:75:e6:dd:7c:49:b5:c9:
03:9d:f9:dd:31:59:59:ef:8e:d7:16:57:76:c1:ef:93:fc:ad:
b5:e8:3f:2d:d9:11:2c:9a:55:6a:86:61:a9:b5:d7:0f:84:fa:
43:99:a3:4e:17:d1:d6:66:ce:03:8d:00:5b:a5:53:92:38:6f:
e3:ff:03:a9:61:ea:d8:32:97:48:a5:d3:8e:00:0b:57:8a:d1:
dd:36:75:61:34:04:bd:f9:8e:90:86:7a:a9:b2:52:ed:74:b1:
ef:0b:4e:eb:53:45:59:f1:75:79:88:ee:f4:b8:5a:fa:d3:28:
83:64:0c:44:a7:d2:1c:fe:99:80:9f:46:06:05:f6:28:df:b4:
df:33:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:21 2026 by rpki-client