Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: G3r78hFMj9RHNkYONAfhEnjRVtU8HFPd68qhlV8NS5U=
Subject key identifier: A5:32:19:3C:93:16:BF:54:5F:4E:33:8B:63:00:00:F6:49:4F:3C:58
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 019E9137FF14E9916C7C4916D6D47FA51778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0BA3
Signing time: Thu 04 Jun 2026 06:00:26 +0000
Manifest this update: Thu 04 Jun 2026 06:00:26 +0000
Manifest next update: Fri 05 Jun 2026 06:00:26 +0000
Files and hashes: 1: AHY4ZcpWBg0aIiFkhUXaY2emMvk.roa (hash: XYjuOSawg9GbeUiAsIFDnNUeoKdfUJFTjZesq9ksMa4=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: INh3O+7QuGz6aN+88xZ5qvCyKj0WuFJcJ1XNENuvsbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:37:ff:14:e9:91:6c:7c:49:16:d6:d4:7f:a5:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Jun 4 06:00:26 2026 GMT
Not After : Jun 5 06:00:26 2026 GMT
Subject: CN=a532193c9316bf545f4e338b630000f6494f3c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:f9:4b:73:26:61:ee:61:34:89:00:1c:32:
fd:9b:86:ef:bc:57:bc:3f:2a:e4:e1:dc:55:51:d4:
86:1c:48:19:64:0c:ef:e2:5e:ad:10:98:76:cf:6e:
20:e5:86:58:b8:b2:d7:59:d2:36:ac:4f:92:6e:5a:
e6:e1:83:7b:e4:4c:03:12:1d:11:d8:68:7b:c3:25:
b5:14:dc:02:47:32:dd:bc:f1:b8:df:9d:5d:7b:4e:
4a:34:53:a6:9c:c9:24:41:aa:8d:a0:91:97:b7:84:
be:64:0d:64:eb:0f:2b:85:41:b1:ee:b1:43:3e:6e:
0a:8b:70:ec:53:3a:33:f4:a9:41:36:23:6b:e9:ad:
bc:0d:f8:a2:df:e2:e0:ef:9b:ba:fd:50:d4:58:db:
ff:08:c1:18:c0:ea:c0:3b:df:6d:74:37:41:29:d4:
a9:67:60:0e:02:ab:8e:e2:1a:8d:d1:19:fb:48:f1:
53:4f:5b:a2:86:ec:30:fd:0f:70:85:c1:27:ee:2f:
ae:a2:39:e5:77:64:f9:13:57:22:8e:7c:c1:f6:9b:
74:52:d5:21:84:81:d7:81:03:34:0c:9e:ee:97:50:
c8:13:5a:23:f4:20:82:11:27:9d:0f:ce:1e:68:13:
4d:c6:86:a0:69:c5:f8:d1:75:10:9d:7d:74:7f:3a:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:19:3C:93:16:BF:54:5F:4E:33:8B:63:00:00:F6:49:4F:3C:58
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d2:37:ce:c1:af:86:8d:1f:5e:ac:58:73:3e:44:b8:91:d8:
84:ee:0c:80:ae:3e:ba:0e:88:2f:32:3f:5c:a1:2c:eb:ea:62:
0b:2e:14:6a:9a:6e:87:e3:3d:ae:7f:ad:7f:79:ae:aa:d3:f1:
b2:eb:6e:02:21:f6:ef:51:63:a6:25:9c:42:22:ba:a1:89:c5:
85:9e:a5:e9:9d:a6:bc:0c:d3:63:a9:50:52:2b:df:b1:a1:84:
c6:57:71:b7:83:e0:a5:b6:17:ff:4e:37:d8:e0:96:88:eb:93:
96:0f:69:0a:92:24:ef:ec:bc:3e:cf:66:bc:44:fc:d6:a2:4a:
96:94:ef:83:77:d9:32:8e:19:a3:02:2a:65:ac:ed:65:9e:97:
77:f5:8f:dc:10:f0:79:13:58:d2:85:07:ae:46:5c:4d:4f:78:
36:66:fd:83:f9:68:5b:06:72:d9:d5:0b:c4:ce:d5:08:06:1e:
ac:8b:54:4e:80:c3:5a:72:76:d9:43:9f:ed:d7:93:c8:8f:ed:
19:18:f2:10:2d:15:8d:be:e8:f2:5f:6a:8a:11:cc:69:35:ea:
11:a8:51:27:ab:98:64:6e:af:03:72:18:35:92:59:7e:fe:a7:
d1:35:6e:a4:cd:0d:2b:50:b0:24:88:11:c7:76:06:11:99:ac:
42:b8:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:10:41 2026 by rpki-client