Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: uAgr5R+UngmxbBWKygauyclyuorUSCVVfI5ji5uSg84=
Subject key identifier: 94:1D:CA:F0:2D:76:33:D9:F1:CD:13:D3:E5:5F:1E:86:1B:2B:02:60
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019F11F79659813D6A34CAD6FA5933EDDCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 06:01:06 +0000
Manifest this update: Mon 29 Jun 2026 06:01:06 +0000
Manifest next update: Tue 30 Jun 2026 06:01:06 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: blNlblELov3HrMLx69mbQhsaBVvXr3pWV0s/hwGFZCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:96:59:81:3d:6a:34:ca:d6:fa:59:33:ed:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jun 29 06:01:06 2026 GMT
Not After : Jun 30 06:01:06 2026 GMT
Subject: CN=941dcaf02d7633d9f1cd13d3e55f1e861b2b0260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:d8:71:fd:a8:7b:0c:54:26:41:8c:b6:27:
0d:45:2d:83:a1:16:7f:60:34:09:ff:51:34:49:96:
6b:09:70:d1:24:36:2d:e1:f0:71:a5:73:7f:8e:9d:
3d:72:8e:4f:eb:38:05:fa:e1:2e:3f:ce:4d:8e:1d:
6c:50:6a:d5:13:dd:36:1e:4e:77:d0:fc:8e:66:c4:
36:09:4b:4e:4e:78:cc:f1:c1:49:cc:65:2b:72:22:
d5:94:f0:b2:6f:c8:30:ef:48:4f:9f:86:75:e3:e9:
69:a2:a4:55:ec:df:7e:6c:6f:ef:49:de:72:e8:f0:
64:71:e5:59:b6:00:7c:c1:20:89:10:76:81:b8:ac:
d3:cf:4b:3f:a8:4a:73:aa:89:55:fa:5a:1c:be:5f:
99:7e:23:3d:19:33:53:38:3b:ef:c5:52:de:02:94:
45:44:29:d0:cf:35:54:b0:7b:78:81:4f:ed:8e:7e:
69:cb:2c:d7:85:54:ce:7d:41:bd:a7:06:36:b0:b8:
b6:d3:64:b1:2e:ad:ce:be:b7:94:33:99:6e:c4:b9:
a1:96:95:ae:8f:7f:2e:ce:54:d4:04:7b:de:ae:6d:
0b:bd:59:3a:29:89:40:6c:33:95:af:3c:1a:69:1a:
78:04:3a:0f:a0:4d:3e:ce:a4:c0:b6:52:d8:61:38:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:CA:F0:2D:76:33:D9:F1:CD:13:D3:E5:5F:1E:86:1B:2B:02:60
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:d5:f0:1f:13:8b:55:8e:93:0b:41:93:cc:92:e0:14:f3:
61:ed:10:03:db:24:2d:55:b5:f6:b6:c7:d3:12:64:88:06:c7:
e9:2b:30:8c:44:82:ea:3e:59:07:f9:d7:ec:e4:cc:c5:4a:4c:
a3:4f:4b:c2:ed:45:33:e9:09:ba:d0:d7:71:32:3d:07:0c:02:
dc:cd:2e:e9:98:f2:b9:07:e1:cc:a4:19:a2:7a:76:03:95:58:
a0:16:fb:82:d8:42:63:29:ff:a7:0b:70:1b:5d:46:68:58:af:
c6:4f:7d:eb:82:bc:41:15:46:41:3a:1d:50:1f:52:8a:fb:89:
b2:35:5d:fe:45:cc:aa:19:5f:02:9c:fb:6b:08:c8:b4:8b:b9:
9d:a5:ae:0f:49:b0:93:f4:ba:4a:aa:c5:b6:65:3c:27:b9:0d:
3a:a0:10:b6:11:b9:64:70:fc:04:31:82:94:2e:a7:69:ca:06:
9e:51:5d:46:5a:5b:51:10:a1:21:22:0f:c0:91:64:3e:df:44:
b7:f7:ec:7c:67:9a:29:91:c9:29:95:93:c2:f8:0a:cf:2d:9a:
42:43:72:54:8d:07:c3:ca:aa:8d:50:d1:18:95:79:76:4f:52:
30:6a:05:4d:c1:29:38:c8:91:89:28:40:55:bc:34:0f:43:8f:
6b:92:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:28:49 2026 by rpki-client