Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: jOn7xUUzgOtm/u+iEGZ1otl0f0I2sFAactYNsM/iMR8=
Subject key identifier: AE:7E:3A:EF:99:7F:48:56:C6:0A:87:17:A6:A4:91:DD:8B:76:2C:37
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 019EB6576804E386A93F4BF01A61BC957E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 18E7
Signing time: Thu 11 Jun 2026 11:00:42 +0000
Manifest this update: Thu 11 Jun 2026 11:00:42 +0000
Manifest next update: Fri 12 Jun 2026 11:00:42 +0000
Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: UnmtM7Bmon1vJkUZybdhP0xHxA3q3tX8PsYfbZfTnrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:68:04:e3:86:a9:3f:4b:f0:1a:61:bc:95:7e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jun 11 11:00:42 2026 GMT
Not After : Jun 12 11:00:42 2026 GMT
Subject: CN=ae7e3aef997f4856c60a8717a6a491dd8b762c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:b7:84:f6:cd:5c:fd:00:8c:48:fe:ed:06:
ae:2c:55:74:21:40:3c:25:fc:fc:60:8e:f3:88:d8:
aa:e9:4a:99:5c:4d:e6:4f:b7:d2:5b:4f:15:76:7e:
63:5d:6c:fc:62:ea:8f:f5:34:a4:eb:07:ce:0a:07:
cc:77:91:3e:49:57:61:93:c2:dd:32:c3:bc:7e:ce:
61:ec:17:4a:b0:74:59:ca:ef:42:b7:83:83:e8:1f:
e1:c1:7d:a7:22:6e:8a:c1:e6:cd:4c:8e:0d:f8:8c:
14:de:7d:32:7f:f7:5b:0c:4e:8d:75:60:36:f4:31:
83:72:fd:e5:e2:25:3c:ea:28:23:c7:9c:25:84:63:
8a:41:72:56:a0:90:31:e2:33:47:15:36:a7:1f:a5:
1b:0f:c2:ce:07:a3:91:29:01:8b:12:0d:30:08:d1:
38:fe:57:3f:dd:7a:f0:74:f7:69:67:c9:9c:8f:64:
55:db:03:cb:27:18:95:38:5a:58:54:7e:b1:0f:18:
bc:b6:57:c7:c5:f2:d2:eb:1a:cb:c5:b0:00:bf:73:
6c:4e:3a:ac:ae:95:45:0b:56:92:9c:ba:54:fd:06:
0a:de:e7:af:1f:28:8f:7d:2d:cd:8e:83:f7:3f:df:
b2:21:dd:88:b1:57:49:46:6f:55:29:10:0d:95:38:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:3A:EF:99:7F:48:56:C6:0A:87:17:A6:A4:91:DD:8B:76:2C:37
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5d:b0:5a:17:f9:e4:94:4c:44:53:c4:45:c9:a7:e4:6b:94:
f2:34:aa:83:03:ec:4f:89:43:dd:00:65:4b:16:45:b9:ac:b2:
19:66:84:03:d2:1e:f7:38:ca:c3:bd:31:bd:cc:79:4f:0b:0b:
1f:bf:55:3b:ad:d0:c9:39:85:79:1e:8c:fd:16:cc:93:49:e3:
c2:2d:f8:4e:20:b6:29:31:6f:15:b6:8f:2a:4a:d0:ce:fe:91:
e3:aa:7f:f2:a1:c3:47:91:a1:af:88:94:21:69:ab:7c:8c:cf:
59:b9:5a:ab:c3:b9:25:d9:c3:b0:ac:40:e1:be:cd:fb:66:ea:
98:8c:17:38:72:07:dd:0b:71:72:06:11:61:c8:be:80:9b:4a:
6c:cd:ed:72:ac:86:72:29:dc:8a:a4:3b:d0:56:92:50:a0:5e:
f6:cf:67:2e:ad:88:f3:21:6b:43:9c:28:82:53:c2:e0:88:60:
db:3a:bd:2d:1b:7e:14:c4:ba:03:27:2f:98:c7:39:a9:bc:2e:
8c:d9:7b:24:60:e0:c0:88:75:f4:d2:fe:35:02:3e:a7:9a:a3:
c2:b3:d1:b3:e8:96:5d:b6:db:e2:5b:61:79:df:60:c2:38:31:
de:0b:bf:99:48:5f:52:bb:a5:4f:4d:a1:fd:28:6d:98:0b:50:
be:c4:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:41 2026 by rpki-client