Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: T9Qdb/PWtzW6J5Mmh5P9iLaaiSY9RwI2YP8K6VjROX4=
Subject key identifier: 3E:F0:06:9F:7B:F3:33:F4:2E:5A:51:CB:E1:C5:0C:B6:DF:18:52:7F
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 019F1979DA578DD5DCE8F51C36C89D08B8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 17:00:43 +0000
Manifest this update: Tue 30 Jun 2026 17:00:43 +0000
Manifest next update: Wed 01 Jul 2026 17:00:43 +0000
Files and hashes: 1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: i2bIxp2J8sWz/VqI5WGMBaqGCJe09TylwiOi1XMzBcw=)
3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:79:da:57:8d:d5:dc:e8:f5:1c:36:c8:9d:08:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jun 30 17:00:43 2026 GMT
Not After : Jul 1 17:00:43 2026 GMT
Subject: CN=3ef0069f7bf333f42e5a51cbe1c50cb6df18527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:2c:99:c6:81:e8:36:73:f1:c0:0f:6b:3a:
9c:87:87:d3:c8:2c:79:31:54:0f:9e:6a:62:b0:e5:
ae:85:d8:71:5f:ec:36:d5:0c:89:71:7b:bc:cf:aa:
8d:cb:f2:ed:2e:d5:1e:7d:23:79:d6:b7:2b:47:72:
c8:ca:36:38:74:34:e8:50:fd:85:75:71:f5:f3:33:
8f:67:d9:75:d8:66:79:0e:40:ac:80:27:07:c4:4a:
49:fa:9b:0d:a0:13:2d:08:61:6a:28:32:9e:f9:61:
d3:54:31:56:61:e0:ff:0c:ac:b4:db:99:c7:71:a2:
bc:d8:ae:80:03:c8:5e:81:fa:0f:2d:a8:d1:ed:ae:
ff:81:f0:c6:c8:42:d7:65:83:df:fc:46:a3:1c:0a:
12:74:97:87:2d:54:9d:02:e2:74:92:12:fb:3c:70:
98:06:00:fc:6c:a8:fe:7a:09:df:8a:ca:69:c3:da:
8b:e4:7c:74:0e:77:52:e0:68:f1:5f:38:6e:9c:3e:
0e:f9:aa:11:83:40:94:67:96:49:10:cd:b2:4f:d7:
70:95:c3:6f:49:99:f9:f3:fc:e0:ac:fd:9a:93:44:
6f:9a:00:21:db:c7:fe:5c:0f:1c:da:03:d0:66:f0:
dc:19:b5:c3:f7:24:95:93:6d:fc:01:e7:9a:48:e1:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F0:06:9F:7B:F3:33:F4:2E:5A:51:CB:E1:C5:0C:B6:DF:18:52:7F
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e9:a8:fc:23:c5:74:39:fc:03:44:54:9a:d8:71:35:12:33:
07:14:db:2f:3a:90:8d:14:ed:b8:c9:da:bc:ab:d6:88:5e:15:
06:ed:4e:ac:c9:5f:49:af:34:a7:2a:38:a7:7f:4e:2f:46:a5:
15:a4:27:54:3c:15:94:13:60:bb:0f:7e:db:41:69:cd:b8:6f:
93:d6:0c:f6:54:b2:49:29:a3:7d:37:31:1d:15:3e:3a:0e:66:
cf:4c:c8:e1:42:d2:23:a5:a4:19:53:0c:aa:54:cb:96:01:2e:
9f:98:49:99:b2:b7:0b:f6:1c:a9:1b:c6:9e:3b:61:80:4c:53:
69:20:50:d7:2c:68:d5:65:cb:9c:0e:e4:4b:c8:b5:09:ad:b7:
73:22:2e:75:5b:84:33:6d:ce:5a:d7:ba:ce:88:8a:ec:a6:03:
31:52:16:ad:e7:cf:05:7a:3c:48:91:93:63:a3:66:54:80:6c:
d6:6f:ff:7f:79:6a:67:e5:db:12:ca:77:66:a8:05:f7:e4:5a:
47:c8:cc:80:74:e2:84:28:40:a3:1a:ba:b2:5c:fa:53:4e:e7:
52:f7:96:94:a9:e0:b9:a7:3e:b8:c7:59:0e:58:6d:0d:69:0b:
b1:6c:c7:6c:5f:b3:84:d4:23:99:12:e5:03:75:cc:4f:29:34:
1c:33:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:39 2026 by rpki-client