Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: WRwkLdRDZAIX7XOUwqJqdr2bxdGM5b70qyvccegR7E4=
Subject key identifier: D7:AE:9A:4E:66:72:70:C6:B4:0C:13:69:AE:1B:C8:42:C1:87:A2:76
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 019EB8B4324A9EF7159679DBB54BD0DFEDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 18EA
Signing time: Thu 11 Jun 2026 22:01:17 +0000
Manifest this update: Thu 11 Jun 2026 22:01:17 +0000
Manifest next update: Fri 12 Jun 2026 22:01:17 +0000
Files and hashes: 1: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: 1m8FBXeY5KevqHKY4xVzyCbr1LXfyesN81OyRuwRipU=)
2: e3szWYnRwcnVrlDIwYxJ3pYMom4.roa (hash: BKtUpfmwzLTGUQniKBkvPeoFHhYGa5oaDqKuTCxUab8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:32:4a:9e:f7:15:96:79:db:b5:4b:d0:df:ed:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Jun 11 22:01:17 2026 GMT
Not After : Jun 12 22:01:17 2026 GMT
Subject: CN=d7ae9a4e667270c6b40c1369ae1bc842c187a276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:9d:fc:38:c6:26:94:b3:9c:77:df:6f:18:
1f:d0:ce:1d:fb:2f:2b:26:20:0c:71:f3:3c:3c:f0:
23:9e:60:df:57:90:4f:58:42:40:d1:fe:ed:56:d4:
47:99:9d:42:df:19:f8:c6:33:a8:58:88:cd:8d:dd:
84:b9:f8:05:50:d0:1f:08:78:f6:07:f6:4f:a6:a7:
9f:2e:c7:77:41:73:94:a6:d0:33:2d:1e:bb:22:d6:
7c:ea:7c:fd:84:78:07:0b:26:84:69:75:da:f8:70:
dd:3a:c9:11:05:b1:27:26:9a:0f:b4:a0:b2:a6:6c:
47:38:91:47:21:5c:dd:25:ed:6c:21:c8:0a:71:2e:
00:87:44:19:a1:2e:65:fc:48:46:e8:64:18:3e:bd:
5a:4e:cb:83:d1:21:6f:5a:eb:70:98:74:cd:60:43:
9d:69:8a:52:0b:8d:22:b1:89:18:b4:55:c5:1a:76:
45:9f:b6:15:00:c0:a1:dc:99:29:f3:bc:49:d4:04:
36:0c:00:70:6f:e1:5c:76:73:b8:bb:e1:39:a5:c7:
42:78:fb:2b:00:bd:17:25:f0:82:2e:ab:f5:30:7a:
f8:50:2b:35:b3:9a:5e:3a:87:d3:36:de:16:43:2d:
91:e4:8e:c8:16:c1:cb:22:d4:9f:1f:ae:d6:e6:1b:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:9A:4E:66:72:70:C6:B4:0C:13:69:AE:1B:C8:42:C1:87:A2:76
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b8:e8:dc:0f:61:fb:d5:b1:2e:40:cf:d4:0d:81:7d:71:d1:
c4:a9:f2:36:a0:03:1c:d6:94:dd:2f:02:ed:e1:3d:ef:82:44:
66:32:85:8a:3f:28:3f:be:84:9c:a3:b7:22:b7:b8:f0:fe:87:
9c:3e:41:9a:5b:d6:91:d1:8c:2c:e6:d7:f7:6c:0f:0d:26:51:
fb:43:cc:9a:e1:70:23:80:da:12:1f:e1:a2:e0:78:ff:f7:9c:
8a:b1:0b:80:fa:33:00:a2:0d:3b:4c:bc:1f:63:ca:a8:24:2f:
69:bb:7b:36:9d:ba:25:1f:00:28:15:85:5e:f8:f1:9e:28:02:
65:4b:8d:68:f2:f7:af:41:7e:aa:72:48:6e:f3:bb:b9:e3:02:
92:c0:39:9f:6d:b7:b7:a9:a9:5d:e6:20:a9:69:c4:7c:29:10:
93:a1:f7:97:ac:a2:89:70:63:fa:01:b3:d7:46:ba:8a:35:d5:
4d:99:6c:17:2b:7a:17:9c:43:63:ef:bc:fa:db:09:b5:27:ee:
77:1e:b3:93:43:10:92:c3:06:c6:fc:69:c9:8a:20:d1:52:b6:
1d:2f:a1:2e:e8:2a:3b:09:98:10:61:3b:01:d5:1d:dc:79:0c:
92:1f:43:5b:79:26:3e:57:df:57:2a:da:fa:d0:15:91:73:71:
6e:9a:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:53:59 2026 by rpki-client