Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: g5x+KEBobaqTtsOgNV2Ulf+0OwrGsIWLox61noi4vt4=
Subject key identifier: AA:3D:F9:2C:52:39:FD:28:20:BD:A2:76:06:FC:09:49:F3:5A:D1:9B
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019EB9215D9E536AED47FE1859544A13E903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 088C
Signing time: Fri 12 Jun 2026 00:00:31 +0000
Manifest this update: Fri 12 Jun 2026 00:00:31 +0000
Manifest next update: Sat 13 Jun 2026 00:00:31 +0000
Files and hashes: 1: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: Zeq10VNKWh3+JP+sr5oSziHHhBpIULL5p6Mb19W8Bbc=)
2: Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa (hash: g40LtFFYkGRLTg/R02uueeyuMPwHWbYTIxLpfiRgOHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:5d:9e:53:6a:ed:47:fe:18:59:54:4a:13:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jun 12 00:00:31 2026 GMT
Not After : Jun 13 00:00:31 2026 GMT
Subject: CN=aa3df92c5239fd2820bda27606fc0949f35ad19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:b9:40:90:54:70:a3:10:29:ad:cc:c0:18:
f7:ed:8e:96:cf:53:8f:06:16:b0:86:17:2e:30:92:
a0:c3:e2:a0:ca:18:a4:2e:8e:2f:09:18:36:ee:70:
5a:e3:54:0d:20:75:48:e0:38:29:6e:aa:bf:dc:98:
88:a3:0d:93:69:9b:b5:84:25:97:5c:e0:ec:8c:28:
5f:90:59:22:46:72:ee:5e:d6:11:b9:27:ae:2d:aa:
f3:4a:ed:d9:4b:12:3c:c4:31:06:44:4c:b9:c4:99:
30:8f:e4:e0:ec:39:3c:96:7a:a1:7b:8d:2e:90:7d:
b0:b6:f5:13:ce:5c:be:0d:96:32:8f:f4:5d:f6:b6:
a8:42:11:9b:11:cd:4c:0c:19:d0:55:ec:d5:c5:09:
6a:9e:88:e1:91:7c:4d:4d:b5:1d:61:d6:69:3e:ca:
ca:8c:1d:4e:6b:07:73:3a:72:66:07:12:76:0d:8a:
a4:3d:0e:5e:ba:e4:41:73:84:6e:bb:cf:f8:e6:79:
00:f9:ee:ba:a0:d4:94:18:44:1a:21:89:72:c3:a5:
76:ce:55:0d:74:42:04:cc:4c:b9:64:10:8c:c0:79:
1b:df:98:24:7e:6e:3a:f0:d4:3e:1a:a4:ac:4c:59:
d7:f5:84:39:c6:3b:ca:ae:87:5e:bb:f0:d6:de:66:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:F9:2C:52:39:FD:28:20:BD:A2:76:06:FC:09:49:F3:5A:D1:9B
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c6:de:8e:da:76:0c:ac:e2:f4:23:46:ab:91:76:28:e9:b5:
fd:15:41:77:b0:5a:53:90:74:09:72:45:ea:68:81:f4:06:d4:
b3:bf:68:30:1c:b7:3d:fd:27:b2:29:71:ee:17:26:c5:7d:df:
22:f4:58:df:43:81:fb:0f:43:f9:e5:2a:4b:c9:75:5f:54:34:
d2:5f:bb:bb:fd:5e:3d:37:cb:64:6d:93:91:e0:42:b1:44:67:
c2:be:bd:85:4d:a9:db:e6:52:f3:78:07:80:92:4a:f3:67:42:
e2:4d:d5:5e:32:52:86:1a:26:5e:7a:39:1b:36:95:73:33:aa:
1e:a7:9b:af:6c:61:b7:9c:15:2c:7b:23:20:20:9f:32:4a:24:
bf:1a:de:bf:b1:8f:54:c8:a8:be:6f:e1:94:e6:d9:1f:96:15:
49:6d:d1:be:f3:48:f0:76:d6:28:a4:72:d3:12:de:de:b1:d8:
8e:43:95:e5:42:25:7d:01:cc:b4:9d:81:e5:8a:84:52:22:c3:
85:42:a1:ba:11:23:04:81:16:b5:69:98:ba:ad:36:5d:37:d5:
bd:eb:a8:0f:39:0a:4c:df:9f:d8:63:fe:a6:f0:17:50:bc:41:
4c:ce:84:23:7b:28:59:8f:d6:ac:76:2f:fb:39:3b:78:11:59:
3a:0d:48:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IV2eU2rtR/4YWVRKE+kDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx
MWFlYzUwHhcNMjYwNjEyMDAwMDMxWhcNMjYwNjEzMDAwMDMxWjAzMTEwLwYDVQQD
EyhhYTNkZjkyYzUyMzlmZDI4MjBiZGEyNzYwNmZjMDk0OWYzNWFkMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty+5QJBUcKMQKa3MwBj37Y6Wz1OP
BhawhhcuMJKgw+KgyhikLo4vCRg27nBa41QNIHVI4Dgpbqq/3JiIow2TaZu1hCWX
XODsjChfkFkiRnLuXtYRuSeuLarzSu3ZSxI8xDEGREy5xJkwj+Tg7Dk8lnqhe40u
kH2wtvUTzly+DZYyj/Rd9raoQhGbEc1MDBnQVezVxQlqnojhkXxNTbUdYdZpPsrK
jB1OawdzOnJmBxJ2DYqkPQ5euuRBc4Ruu8/45nkA+e66oNSUGEQaIYlyw6V2zlUN
dEIEzEy5ZBCMwHkb35gkfm468NQ+GqSsTFnX9YQ5xjvKrodeu/DW3mbHOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo9+SxSOf0oIL2idgb8CUnzWtGbMB8GA1UdIwQY
MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt
YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4
LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsbejtp2
DKzi9CNGq5F2KOm1/RVBd7BaU5B0CXJF6miB9AbUs79oMBy3Pf0nsilx7hcmxX3f
IvRY30OB+w9D+eUqS8l1X1Q00l+7u/1ePTfLZG2TkeBCsURnwr69hU2p2+ZS83gH
gJJK82dC4k3VXjJShhomXno5GzaVczOqHqebr2xht5wVLHsjICCfMkokvxrev7GP
VMiovm/hlObZH5YVSW3RvvNI8HbWKKRy0xLe3rHYjkOV5UIlfQHMtJ2B5YqEUiLD
hUKhuhEjBIEWtWmYuq02XTfVveuoDzkKTN+f2GP+pvAXULxBTM6EI3soWY/WrHYv
+zk7eBFZOg1IzA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:35 2026 by rpki-client