Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: bfO5cwrrYy6rcniw0xTWyCcMqDbMuVnMoIExJsB4u+c=
Subject key identifier: 94:96:6F:C3:17:0A:84:E0:7E:2A:EA:26:03:18:7B:A0:57:8E:70:60
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 019EB958B55CE1144B6C775C31EA4CFA9B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0ABC
Signing time: Fri 12 Jun 2026 01:00:58 +0000
Manifest this update: Fri 12 Jun 2026 01:00:58 +0000
Manifest next update: Sat 13 Jun 2026 01:00:58 +0000
Files and hashes: 1: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: L+jLYYd5+l2N5EnjVVuhNeEGbyK8JAT7YPtABkck39M=)
2: aPWLJM6IziuoIQ-9dg15aPOtRRI.roa (hash: nW9Lbvb0zK8UkUgMG6xc5L/WUYzGO8kQcti52apyWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:b5:5c:e1:14:4b:6c:77:5c:31:ea:4c:fa:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Jun 12 01:00:58 2026 GMT
Not After : Jun 13 01:00:58 2026 GMT
Subject: CN=94966fc3170a84e07e2aea2603187ba0578e7060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:c6:c9:7c:e3:ef:ac:54:0a:01:bf:48:7d:
fe:1a:aa:29:95:c4:1e:89:00:78:86:ab:81:74:c2:
2d:6e:27:6d:ca:9d:47:c0:8a:d7:16:0a:31:80:3b:
83:00:5f:7f:60:45:c4:a6:f2:2f:46:03:a7:40:c1:
04:39:b8:9e:71:24:4b:3b:7c:bc:5b:75:68:12:fd:
99:6f:33:be:e9:a3:d9:ec:88:06:d0:34:d1:5f:f0:
3f:89:95:ef:14:85:75:05:0b:83:14:74:09:a3:1a:
57:7e:61:97:2b:49:46:ba:98:6f:58:ac:ea:4b:0a:
b4:3c:13:00:f6:bf:39:fe:25:40:fb:ca:cb:e2:93:
fc:c4:b1:0b:9c:d5:b5:f8:72:ec:79:ec:6b:d6:39:
99:ae:7a:05:ff:cf:aa:17:01:63:15:64:af:66:c0:
ed:a0:42:ce:ca:e5:d9:fe:4b:d0:ed:b7:cb:7d:e2:
d6:2a:9c:3e:dc:f3:2d:30:29:27:63:1f:e5:5a:7a:
1d:80:15:60:69:25:ac:c6:75:5f:7a:6a:ce:59:8f:
d7:5e:d5:31:d3:cd:20:b1:f7:b8:f6:db:af:2d:57:
ae:9e:75:a0:d8:2f:7c:e1:25:b2:24:fc:11:6d:53:
11:7f:60:36:c4:e0:40:a7:1b:f2:88:85:1a:45:1b:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:6F:C3:17:0A:84:E0:7E:2A:EA:26:03:18:7B:A0:57:8E:70:60
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5a:d0:ad:64:3c:00:43:8f:de:d0:71:2b:9a:c4:70:30:d9:
07:ef:22:41:81:e2:2b:e6:b8:38:1c:ae:b3:83:b0:67:ca:f9:
95:3f:a2:3b:eb:8f:5f:3d:bc:43:1a:51:23:ce:46:6e:49:aa:
52:78:6a:97:71:69:d7:cd:10:67:5b:55:bb:f3:f2:63:f8:21:
ae:6d:1f:94:5e:34:a5:f0:57:8b:de:01:f6:4d:9d:66:e4:9e:
8f:9b:91:93:60:fd:0f:4a:69:ae:e5:f2:d5:f6:ae:a0:36:37:
5d:d2:32:ac:ac:d6:33:fa:35:76:58:b3:f7:35:f4:46:12:5d:
20:e6:b4:80:76:48:51:16:13:15:fb:69:d6:12:ee:1b:05:c3:
cc:ea:14:54:55:45:4c:c8:ef:29:99:d9:e6:44:52:0d:99:23:
b8:70:18:d2:08:2c:c3:7f:20:dc:8f:d7:36:40:65:57:a0:2c:
b4:26:82:e1:7e:cb:84:d7:21:3f:ab:49:fb:e8:7f:5c:1f:50:
a7:4b:5f:47:55:a2:08:0d:0f:33:fd:c7:34:16:f1:df:7b:4f:
24:dc:23:e9:4e:b8:77:9e:92:64:9f:d1:3c:45:35:ee:a8:0a:
19:6b:aa:27:e4:f1:f8:0a:42:a7:33:a6:bb:d1:ac:46:44:b5:
81:ca:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:55 2026 by rpki-client