Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: YNzqOSD/YM5mpkoel92yq+i+bAx2PFeLZOxlTz8GGKE=
Subject key identifier: EE:9F:33:C9:34:3C:DA:C0:67:94:D6:77:A2:7A:20:A6:50:99:A3:05
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 019E8F1372A81E26516012B6F0203F76216F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0CCA
Signing time: Wed 03 Jun 2026 20:01:16 +0000
Manifest this update: Wed 03 Jun 2026 20:01:16 +0000
Manifest next update: Thu 04 Jun 2026 20:01:16 +0000
Files and hashes: 1: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: 4VH4Upt/HjhfqI/OhKUdjJHY0D1SejGhNRcGzooAXhI=)
2: pDsTCJPX6I7CTPbbV1F-Yk_RqdI.roa (hash: k6qre4EFHCNOu0yYjc+l0cPyKi7Hs3Gqi9mcxhitEa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:13:72:a8:1e:26:51:60:12:b6:f0:20:3f:76:21:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Jun 3 20:01:16 2026 GMT
Not After : Jun 4 20:01:16 2026 GMT
Subject: CN=ee9f33c9343cdac06794d677a27a20a65099a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:af:0e:6c:7c:4f:5c:e0:21:cf:8b:81:b5:
54:69:05:93:56:4e:b9:6f:3e:06:f3:cd:8e:16:6e:
53:92:c7:5b:a2:5a:f2:b4:85:51:80:04:ec:f2:06:
00:2c:cd:25:f7:ad:9c:c4:d9:6f:f6:52:39:41:b6:
a4:ab:ca:3a:1c:54:77:7d:bd:18:1f:f2:ef:c4:0d:
dd:8b:d0:d6:82:2d:ef:8f:7a:f6:d2:1f:07:c6:ac:
68:2e:6a:cb:fb:18:96:df:c6:e9:ef:34:53:27:ac:
4e:ce:b7:83:1e:75:74:e5:f7:35:c9:fb:f3:5e:7a:
2b:a8:0a:2b:ff:7e:a5:6f:49:c1:49:4a:98:72:9a:
d6:a2:6a:9a:e2:9f:ed:87:06:e7:4e:ea:c5:a1:44:
32:d3:53:a8:8a:14:fe:1d:be:24:0a:09:6a:25:68:
92:15:e5:49:d4:84:69:df:3e:b9:c6:42:24:34:cd:
00:d8:ca:19:e1:81:15:82:e2:37:87:d6:f3:d0:2f:
86:f7:e3:b9:84:67:91:e5:c9:5d:ab:37:07:4f:4e:
3c:b7:50:2e:cf:09:7d:fe:a8:de:11:de:32:5f:86:
7c:2f:c4:fc:0e:7c:75:c8:0d:ce:91:25:8b:b0:f5:
65:6d:48:62:70:7a:b0:73:82:a1:e7:5a:c0:19:e1:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9F:33:C9:34:3C:DA:C0:67:94:D6:77:A2:7A:20:A6:50:99:A3:05
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ae:b8:a5:88:ca:6a:74:9f:4c:c9:b9:0e:d5:31:a7:29:0a:
18:d0:40:09:a1:62:83:75:84:b8:a4:ca:de:67:0a:73:11:14:
aa:ef:75:11:12:23:24:39:9f:49:7b:ec:6f:54:06:79:70:6e:
1e:33:0f:f8:e0:79:0a:3c:ac:16:15:89:f0:c6:55:9a:96:2b:
2b:74:25:c2:38:9f:b1:cb:be:be:d8:71:7e:69:59:19:92:69:
68:4b:1e:f3:14:6b:aa:7b:2c:e6:d5:db:79:05:25:f4:9d:80:
ae:2d:56:59:97:05:90:0b:61:20:40:02:2c:01:9d:f1:a9:db:
78:31:fa:d7:3e:31:42:b7:67:b3:9a:29:30:ce:5b:8f:14:75:
e6:3e:4e:41:a0:a7:28:10:ef:f5:d7:91:bc:15:2f:e4:74:a6:
1a:8d:93:a9:ec:9c:d9:ab:cc:c2:da:69:82:88:57:92:3f:23:
d8:a9:38:f2:52:79:7e:03:dc:f5:18:7d:fc:d8:d6:dc:c6:bc:
64:da:d4:b4:83:b6:90:24:e6:8c:d7:46:2e:a1:ec:a9:be:b3:
f8:0b:a4:91:4f:cc:56:30:64:96:a6:ad:f8:0c:ba:c1:28:e8:
36:09:30:76:43:91:ad:3e:07:ad:68:00:de:dc:c9:10:5a:ea:
64:56:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:19:36 2026 by rpki-client