Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: vkkcDB+7RSq4UsBj7lRun9wLl6yjLR6SevLUj5kVqis=
Subject key identifier: 4C:6E:4F:C9:D9:7F:18:6C:54:13:DA:12:35:8B:6D:73:93:3F:2D:89
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 019EB7A18F60744EAC0E9FF6D9BC695CA8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 0A25
Signing time: Thu 11 Jun 2026 17:01:18 +0000
Manifest this update: Thu 11 Jun 2026 17:01:18 +0000
Manifest next update: Fri 12 Jun 2026 17:01:18 +0000
Files and hashes: 1: aVvwIvFhIA2YyxZBLI9kzTJE_PI.roa (hash: Mj+NFBQcENFWKW7e7z2aigtw4XOb5IdgmVCiSgTc5lY=)
2: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: WDCdQs8CWo/RrHbbXV4tzAy0Z5RTpKX0D+zXO9Nnh88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:8f:60:74:4e:ac:0e:9f:f6:d9:bc:69:5c:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Jun 11 17:01:18 2026 GMT
Not After : Jun 12 17:01:18 2026 GMT
Subject: CN=4c6e4fc9d97f186c5413da12358b6d73933f2d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:c3:eb:45:5e:14:2e:ba:bf:da:0e:9a:75:
56:d5:41:8b:18:83:5f:9e:22:5c:fc:87:78:4f:f8:
18:d7:9f:38:85:27:80:3c:dd:c6:8e:68:7f:b9:52:
26:d4:8f:bc:9a:7a:cb:d6:12:ba:eb:79:14:60:62:
ee:d7:25:09:03:cb:e1:e8:06:43:c9:6d:4b:32:8b:
9d:3b:53:8a:36:ab:76:e3:1c:3a:e8:a5:cc:06:2a:
9d:27:f7:dc:b6:e8:5c:6e:c2:36:d3:62:ee:aa:18:
aa:0b:dc:47:7a:a8:06:fb:bb:1d:3a:39:78:66:77:
68:a2:7e:bc:86:22:4f:58:4e:f7:93:03:c0:18:7d:
69:33:19:41:be:58:dc:c3:9c:99:f4:ad:44:cc:07:
67:cc:ac:eb:fe:a2:73:2e:57:de:43:c0:8a:cb:23:
4c:8e:4d:ea:64:8b:05:fc:5a:28:16:43:f0:3f:73:
69:3d:16:84:b8:ce:82:9e:0b:59:04:c1:30:6e:65:
67:90:5b:bb:9e:b8:55:38:90:be:d5:ee:e3:b8:f2:
16:dc:d2:38:ff:e0:03:ea:0d:06:f7:f2:9d:5d:0c:
a5:d8:00:ac:8e:e4:ff:5c:1d:dc:a5:3e:fc:e7:3c:
e1:ef:6b:6e:93:14:15:ba:84:74:75:6b:90:55:6d:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6E:4F:C9:D9:7F:18:6C:54:13:DA:12:35:8B:6D:73:93:3F:2D:89
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a8:c8:d7:29:eb:61:7f:c3:cf:45:1e:32:89:78:93:a1:ed:
e3:48:d9:fd:53:37:26:a4:11:84:77:9e:53:d4:e8:4b:62:bb:
ea:87:bd:1a:01:39:bb:bc:38:dc:03:55:85:90:61:7f:e3:31:
05:29:cf:c4:66:4d:bd:19:0a:3a:91:66:de:8a:61:7a:aa:46:
e0:6a:0b:65:4d:a8:3f:e0:cc:0d:7e:d7:06:eb:7e:5f:ce:21:
a3:1e:13:0f:25:49:cb:ec:7a:b8:12:dc:2d:80:2d:a5:cc:89:
2a:0c:96:e1:0b:29:55:f2:c0:04:ef:d8:49:55:50:2e:7a:8f:
2f:30:77:ce:0b:d7:21:77:9f:2a:92:e3:d4:48:14:6d:19:23:
5b:c1:8a:eb:58:77:fb:ff:70:ce:ef:b0:08:cd:35:b6:66:e9:
e1:c3:b6:6c:6c:d3:42:9d:7f:f6:57:c5:27:03:d6:0a:27:ac:
49:1b:22:72:f7:bd:61:e1:58:43:9c:b7:f0:e1:37:b5:b5:76:
b2:a0:02:cb:0d:df:27:ea:31:d4:6a:c6:27:91:1b:05:fd:b7:
90:31:c2:89:2a:47:a1:0c:ce:5d:6b:94:99:16:17:d5:bf:b9:
f5:8c:64:e3:1f:cb:9e:e0:57:d9:b8:ee:ae:3c:b2:56:c3:1b:
fd:6a:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:35 2026 by rpki-client