Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: JqWNdDkUu2rgM/7XNqnEqr+7M6B24eeMD0Bmbklb0b0=
Subject key identifier: 9E:3E:56:38:A4:4D:DF:10:6D:40:8B:48:FA:C5:AE:BB:79:C7:AB:35
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019EB87D1EBC47BB936537AA231AC38673E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 1966
Signing time: Thu 11 Jun 2026 21:01:08 +0000
Manifest this update: Thu 11 Jun 2026 21:01:08 +0000
Manifest next update: Fri 12 Jun 2026 21:01:08 +0000
Files and hashes: 1: REX0hu_C2MCFA8A9sNibvfYrMsQ.roa (hash: gw7ymm92afywzQaqVosCHJIBxHzAVNds/TfPB78701A=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: ZGvDzs9N2D2V+Wp/K0XGShQKURUdikunpKxj1qN5rNE=)
3: xUXT0-vW_Dj00odbgeqel7FL6zQ.roa (hash: FfT1QP922EJ3fLG64AQol2ksXpgcMzdXxvb9aBfpqLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:1e:bc:47:bb:93:65:37:aa:23:1a:c3:86:73:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jun 11 21:01:08 2026 GMT
Not After : Jun 12 21:01:08 2026 GMT
Subject: CN=9e3e5638a44ddf106d408b48fac5aebb79c7ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:73:b8:50:6a:42:ef:9c:f0:90:5b:ef:59:
d6:55:cb:f9:cb:03:6f:2b:0b:51:a5:a4:78:4e:43:
5e:4c:3d:c4:9c:2c:fa:93:d1:e1:35:77:ed:a6:72:
18:9f:29:3f:71:06:c4:ff:53:94:e7:42:d1:37:01:
3e:7d:b4:97:f9:ec:94:5b:fd:9d:15:16:3f:67:53:
b1:e1:c1:7d:11:2d:00:8d:11:6f:13:ee:72:f8:a8:
d4:11:ac:6b:e6:00:bd:3d:1f:2f:14:61:f4:52:b8:
c5:cf:81:37:d8:79:47:2e:0f:0a:0a:1f:7e:06:16:
8d:7f:8a:73:a2:54:7e:38:36:16:d2:34:94:04:e3:
1a:ce:a6:ad:cd:91:2b:cb:a2:4a:66:fb:55:38:39:
9c:72:30:e4:88:66:9b:20:9c:25:48:63:ea:ef:73:
8b:48:fb:ef:35:32:06:11:cf:a6:9c:e5:38:1a:ef:
96:8b:ac:61:f2:d1:cd:e9:d2:c7:60:f2:03:7f:85:
0f:17:11:60:5b:4a:37:5f:2d:27:cc:e4:db:02:8c:
7f:81:ad:64:bd:c8:4e:3b:29:aa:93:13:2e:9e:ac:
c6:8f:53:15:f6:79:bb:b2:c3:b6:8f:e8:7b:a2:86:
64:08:d0:e2:72:60:01:0b:c2:44:10:dd:11:3f:22:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:56:38:A4:4D:DF:10:6D:40:8B:48:FA:C5:AE:BB:79:C7:AB:35
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:21:d7:7e:cd:fc:ee:d7:0e:9c:33:95:b2:7f:e1:2d:1f:
fa:28:82:aa:4f:32:58:00:62:f2:f8:0e:ed:a3:6e:a3:12:cc:
98:0e:cd:09:09:f2:79:30:0c:6e:5a:6f:81:5a:f6:65:1e:7e:
32:1c:08:51:c9:f9:1d:dd:50:43:82:8b:8b:77:82:00:ac:d4:
8a:c7:11:0c:09:4f:d2:4c:a2:c8:ac:51:ef:15:d3:d9:77:5c:
11:b3:dc:70:90:4c:89:c8:da:79:ac:e7:93:23:a5:89:18:d0:
69:1c:bd:ef:2c:fd:db:d3:94:a9:4f:e1:8f:38:25:c4:0b:38:
c7:38:e4:a9:df:76:b3:42:cb:6e:60:99:b5:a9:25:95:00:e4:
c9:d9:d0:9c:9a:bf:39:ca:1c:9d:a9:99:2b:a4:91:9b:d3:30:
7c:0d:81:fa:8c:a5:c6:c8:d9:3e:fb:6a:a4:b9:cd:d1:dc:25:
4d:b7:23:64:e1:34:c4:33:0b:69:7a:19:e3:13:45:3f:f0:f3:
89:26:53:4e:ee:63:68:3d:43:3e:a5:f9:8a:06:9a:fb:ca:7f:
ed:0e:74:a3:f6:ff:57:d6:4a:47:41:b7:f0:5e:94:6e:44:07:
37:d1:e9:3e:ff:19:51:3b:60:32:74:8d:b2:01:20:02:83:ce:
fb:3e:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:14 2026 by rpki-client