Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: 3HiKgJAYTnEQYlG2FANCjkLpUGTqd/q9kbXBu7yLD2c=
Subject key identifier: 82:B9:E9:D5:54:20:20:06:DC:08:61:56:0D:73:D5:D0:F1:55:3F:DA
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 019EBAA243C3FB136094CF6E99BF5C5DDF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 143A
Signing time: Fri 12 Jun 2026 07:00:56 +0000
Manifest this update: Fri 12 Jun 2026 07:00:56 +0000
Manifest next update: Sat 13 Jun 2026 07:00:56 +0000
Files and hashes: 1: 4fAc0qvvbfrjXposwEaaDmGttew.roa (hash: dDNXjXONJp+B+9Oc1+EzvCaLe6IuW2IEvD1Mpunz+gA=)
2: b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa (hash: FcUiatrGqQsxVpgGRcTbSSEMrQzJpNf+p+3PlDk628I=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: DeW2B1LDbV5gzW9lGl5KUCOEZtv25JAmoRpb6GiyKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:43:c3:fb:13:60:94:cf:6e:99:bf:5c:5d:df:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jun 12 07:00:56 2026 GMT
Not After : Jun 13 07:00:56 2026 GMT
Subject: CN=82b9e9d554202006dc0861560d73d5d0f1553fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:48:51:45:21:a0:ed:be:a4:da:5c:c2:70:
c5:ae:76:fb:82:5e:44:90:e4:0c:00:dd:05:a7:c4:
23:b4:fc:2e:23:3c:1a:64:85:02:9c:3d:89:a4:db:
7f:7e:ea:9d:0f:6e:66:42:00:6c:a9:85:24:63:39:
34:17:0a:d7:cb:52:c3:b7:43:a2:50:df:ff:e7:c8:
12:9a:c9:33:d2:97:2e:20:9d:71:fd:fc:1a:e1:6e:
89:8a:c0:05:ae:fe:ab:d6:9b:2f:34:e7:91:2b:cd:
79:fb:97:ea:3c:fb:cc:b5:e8:93:84:34:db:15:85:
2b:38:67:25:34:13:f4:bf:cf:07:07:27:cd:0f:9b:
59:4b:12:72:5c:e0:0b:80:05:39:2c:c0:5b:97:6b:
b8:58:e4:cf:59:44:7d:af:a1:70:40:41:63:65:da:
76:ba:6e:44:dc:be:26:ab:43:86:29:da:f5:6d:e2:
3f:94:60:42:01:e5:c8:07:11:b8:3e:7d:d1:44:34:
de:5d:b3:46:b9:67:d9:cf:f8:a0:ff:29:6b:08:87:
63:b3:d2:2c:2f:33:5b:c1:54:de:15:7d:4e:c1:cc:
88:69:5c:79:61:8c:82:95:26:1a:1a:bb:5a:f0:72:
be:a4:55:39:f3:a8:b5:65:2a:4f:4b:57:2b:42:a9:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:E9:D5:54:20:20:06:DC:08:61:56:0D:73:D5:D0:F1:55:3F:DA
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:0b:b5:7d:29:01:26:54:93:77:a6:b4:35:5d:86:fa:43:
6e:71:c2:cc:4d:57:8b:1c:b7:ad:03:45:5d:c0:4e:99:ce:4c:
ff:d5:c8:d1:34:eb:95:5d:a6:fb:ef:eb:bc:f6:ac:cd:67:0c:
1c:84:3c:28:62:c3:a0:2c:78:6f:8d:73:d4:13:fd:26:c8:73:
41:7a:98:89:d0:15:e3:9b:96:90:52:57:91:07:d1:01:b9:7d:
fd:68:3a:d7:0f:14:5b:eb:45:43:48:b3:44:1e:3a:64:b6:04:
f9:59:88:44:94:d7:a1:6f:76:3c:3d:43:45:e9:90:92:37:15:
49:60:58:44:73:aa:d6:ba:e3:6c:0e:47:87:bc:3d:42:9b:15:
00:bb:fd:74:36:49:98:82:0b:e8:52:f8:ca:66:4f:d6:e9:f4:
06:f2:76:c8:df:fc:61:7e:62:f0:a6:56:17:6f:4b:22:78:1c:
63:0a:29:ee:14:9d:ce:82:6e:28:ba:42:c4:4d:6b:91:ba:02:
90:99:32:0f:7f:34:a1:3b:e7:05:6b:25:23:3b:2e:52:75:c7:
66:5b:1e:27:de:84:2c:7b:74:4d:de:de:bf:e0:17:57:56:c5:
55:77:03:99:63:d8:af:b2:1e:ff:f8:04:0f:d3:de:60:be:2e:
db:f6:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:37 2026 by rpki-client