Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: Qwq6EuvDeVmT6rYaI8nhgW6oINE1aPAuD5yF1IlZGCI=
Subject key identifier: 1D:47:B5:AE:97:CB:5C:3A:C7:74:C9:E0:80:A3:C8:55:FB:F7:35:A3
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019EB9214CB3A4D3D5AD358EC7079A2C72D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 1956
Signing time: Fri 12 Jun 2026 00:00:27 +0000
Manifest this update: Fri 12 Jun 2026 00:00:27 +0000
Manifest next update: Sat 13 Jun 2026 00:00:27 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: Y+Od2nnGl3gwnJLy3JaA0w2SOtalcf+kDh223MBD9Ng=)
2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:4c:b3:a4:d3:d5:ad:35:8e:c7:07:9a:2c:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jun 12 00:00:27 2026 GMT
Not After : Jun 13 00:00:27 2026 GMT
Subject: CN=1d47b5ae97cb5c3ac774c9e080a3c855fbf735a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:cd:b3:8d:71:56:3e:97:22:01:f8:7d:a8:
8d:04:4d:63:54:7a:83:56:fd:35:a2:8c:de:5b:7a:
74:c6:c7:8c:f2:93:1e:79:93:7c:98:87:dc:8a:98:
89:81:5b:04:4a:a1:0e:8f:de:0b:be:16:6f:58:73:
88:9b:82:f0:b5:8b:d7:fb:a6:f2:7a:15:94:63:51:
61:28:f4:4e:68:48:12:0c:26:a2:ea:10:44:56:0f:
38:8e:7a:66:ef:db:d5:03:e1:4e:73:c9:95:79:3f:
4a:48:18:70:80:34:76:d6:19:6a:a2:e2:4d:c7:92:
21:e8:9d:ad:1e:cc:ce:7d:7a:40:35:53:63:d9:07:
2b:f8:47:c7:72:c1:ef:8c:dd:59:7f:a3:12:bd:b4:
72:1b:a7:ca:38:f1:b7:60:7d:5f:ed:2b:b6:c0:bd:
81:1d:9c:bd:65:be:e8:96:4e:f9:1f:ba:b0:f3:64:
0d:89:9f:51:20:39:aa:a7:e6:71:d4:1c:72:7e:f5:
2b:5d:ab:0c:05:dc:12:51:3d:be:01:84:48:22:d4:
4e:95:dd:52:14:dd:d6:32:bc:18:5e:fa:bd:df:24:
f9:03:8d:49:a5:00:dc:88:85:5a:34:69:95:b0:59:
5c:ce:8b:72:78:e5:28:27:36:94:70:86:50:53:3a:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:47:B5:AE:97:CB:5C:3A:C7:74:C9:E0:80:A3:C8:55:FB:F7:35:A3
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:cc:88:e2:3f:8a:c6:a4:0e:21:19:3a:c1:f8:d4:b3:b5:
c8:58:71:74:53:6c:c3:ec:4d:ab:75:f1:aa:88:6f:71:8a:c4:
08:eb:04:3c:6c:ec:c7:c7:a9:5b:51:dd:91:b1:0e:12:73:67:
5a:53:98:f0:8f:2a:e6:71:da:09:86:b1:37:1b:7d:97:ea:b7:
d5:a6:68:06:a3:a3:2b:12:27:9c:7c:b1:a2:4f:70:f1:20:c0:
e4:6e:70:0d:21:f7:09:38:67:c9:04:7c:62:cc:72:a8:18:d5:
ad:34:c3:c1:3c:22:44:25:bf:e1:b4:df:cb:4e:5f:61:dd:24:
f1:e4:b2:57:a9:ba:79:c4:34:2c:25:aa:6c:68:c1:3f:ce:ed:
c0:01:bc:87:a7:7c:fa:d4:45:30:79:56:bf:06:e1:3c:c1:cf:
f9:c0:af:b7:23:6a:c3:ee:06:1a:51:cc:f4:14:9c:b1:fa:03:
c0:b8:dd:89:dd:3d:43:67:34:cf:78:7e:5c:cd:f1:db:fb:60:
75:e9:82:1d:61:7c:b0:2d:3a:f2:f9:21:34:09:9e:2f:92:9a:
22:d0:d6:85:c7:23:15:ed:5b:67:7a:4c:d8:37:ae:c4:44:6d:
3b:91:1f:88:24:aa:21:c7:6c:46:a8:25:90:29:8d:4e:0f:80:
5b:e5:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:10:34 2026 by rpki-client