Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: Sokm2P9e+ncjIHwJglcMLIvV11Oq6hTrpTXBDT6vcuw=
Subject key identifier: FF:DC:71:B0:0B:F9:89:0F:99:D3:7B:A8:F4:70:63:76:DC:0E:F8:0F
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019EB6C51FCE9E65BDCE0BE1EB5C6790EAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 04F8
Signing time: Thu 11 Jun 2026 13:00:32 +0000
Manifest this update: Thu 11 Jun 2026 13:00:32 +0000
Manifest next update: Fri 12 Jun 2026 13:00:32 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: H8X4Xl/j+ujmjJL8FWwky6zDorXDx7QuzhgExYdkvhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:1f:ce:9e:65:bd:ce:0b:e1:eb:5c:67:90:ea:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Jun 11 13:00:32 2026 GMT
Not After : Jun 12 13:00:32 2026 GMT
Subject: CN=ffdc71b00bf9890f99d37ba8f4706376dc0ef80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:f1:50:da:ec:6e:a4:aa:29:7a:17:36:b8:
92:02:33:b9:9a:15:68:53:6f:5a:aa:58:61:87:eb:
a9:18:18:82:e8:0b:d3:12:5d:23:9a:a4:26:fb:f8:
3c:f0:9e:16:99:88:48:0d:23:c2:07:7e:85:75:b6:
55:56:3a:99:93:97:03:d1:4d:a2:35:54:5e:28:68:
74:72:28:c8:e1:f8:54:a6:e1:b5:24:69:a8:e2:55:
cb:3e:93:f6:f9:81:53:ad:dd:c6:4d:8e:19:99:5e:
c7:26:2c:15:05:ef:75:95:aa:e6:fb:89:1d:83:af:
69:6b:14:42:2a:8e:49:f6:46:e4:d8:a9:de:12:d1:
a8:43:b4:0f:e2:3a:9a:d0:8a:79:b1:37:a7:55:45:
1e:b7:6f:c4:b1:59:f4:5c:eb:e9:46:d0:d2:8c:68:
9a:3e:11:1c:5d:b3:9e:0b:bf:27:16:fb:23:8d:c6:
8b:68:b6:5a:d1:d6:8b:8d:b8:ea:cc:69:87:f8:fb:
c5:d2:ee:69:4f:c6:dc:2c:ff:05:a2:c6:87:9b:67:
e6:31:d3:45:13:04:0c:d9:81:d9:7f:2a:d6:a5:d4:
f3:04:23:bf:e3:56:33:7a:24:99:c2:9a:93:1c:8b:
6e:fe:2d:88:8f:7d:de:81:17:2b:2e:d1:7b:e3:19:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DC:71:B0:0B:F9:89:0F:99:D3:7B:A8:F4:70:63:76:DC:0E:F8:0F
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d4:08:e1:b7:d9:46:29:3a:8a:81:ff:8b:c7:16:3d:0c:78:
07:27:cd:00:60:bc:53:d9:54:66:46:07:05:05:4b:db:97:db:
e4:70:60:2f:01:06:fe:d0:85:61:b1:90:b1:b3:64:18:ea:bf:
bf:70:c4:58:18:e8:c4:10:6b:88:09:7e:87:71:12:3c:4e:3e:
dc:25:9e:be:71:28:15:f4:71:5c:d5:b3:0a:23:88:f9:99:3c:
10:64:a5:1d:63:4c:86:a2:3b:ce:e9:95:9d:5e:14:50:ce:4f:
25:1e:b9:15:22:de:a1:88:3a:7b:27:ff:85:0c:9c:7d:78:8d:
f5:39:40:a2:6b:e6:a0:f8:d4:0e:79:22:be:78:66:91:67:75:
8c:fa:ca:7a:11:e9:55:c7:ce:25:71:34:26:e3:93:48:d8:8b:
6c:28:c1:4b:fa:d0:0a:06:54:d5:f7:21:2f:a6:67:61:24:b8:
4c:eb:ae:99:41:3a:59:a6:f1:c3:89:5b:42:e0:16:aa:c0:14:
da:98:ce:85:40:89:e2:c9:65:2b:c0:75:88:a9:d5:e8:d3:08:
de:a3:2a:66:b2:0c:23:b9:65:fc:b1:85:c5:9c:93:98:79:59:
ec:d9:6c:d2:47:b7:91:51:50:01:0d:5a:99:5c:02:be:96:ad:
ae:5c:22:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:55 2026 by rpki-client