Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: fNjdrtw17Zbk0cm4ynkQhkVPomOWUqNeNBEPQuV4Z3k=
Subject key identifier: 02:26:68:1C:AD:B6:0C:96:75:A0:66:B1:7B:BF:8E:A5:12:F1:F9:91
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019F0CD127CB4C07CDB629AD3E68B59AF993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 016F
Signing time: Sun 28 Jun 2026 06:01:01 +0000
Manifest this update: Sun 28 Jun 2026 06:01:01 +0000
Manifest next update: Mon 29 Jun 2026 06:01:01 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: SIrSaMcTbcCN2f+2t/CZN2mhZRqzw1oo1DWELwp7Jwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0c:d1:27:cb:4c:07:cd:b6:29:ad:3e:68:b5:9a:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Jun 28 06:01:01 2026 GMT
Not After : Jun 29 06:01:01 2026 GMT
Subject: CN=0226681cadb60c9675a066b17bbf8ea512f1f991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:ad:2e:04:4c:b4:8b:02:ce:94:ca:96:10:
2f:ff:6e:37:3e:ea:2c:0c:de:18:c6:26:20:86:70:
1c:ee:82:a4:80:9f:56:95:00:07:6e:fa:4d:24:21:
f2:ed:14:f6:66:52:ea:7e:28:c3:c7:74:2b:87:35:
e9:dc:e6:13:8d:d1:51:af:84:4f:ad:82:83:89:f0:
f4:d0:a5:a2:67:2d:7e:9d:35:94:62:91:e0:12:db:
c2:28:b3:3f:75:ed:d3:18:97:21:09:96:4b:38:a9:
a9:ca:7f:cf:a4:13:c4:a0:54:f5:d4:61:97:e0:81:
38:20:0b:1d:a7:8a:c4:d1:3f:9e:02:86:d0:7c:e3:
2e:3e:d9:6a:04:98:cc:70:0f:91:fd:1f:34:df:69:
74:37:cd:23:9a:d8:a3:ba:06:52:58:2e:8f:ec:eb:
1d:47:4e:a4:fc:e9:3c:39:c4:a8:f3:df:cc:75:a4:
8c:d0:41:dd:23:14:8a:bb:04:d9:ce:3e:73:16:9d:
be:36:4d:e6:2a:87:94:f2:06:39:3c:b1:53:06:5b:
f6:1d:b8:11:16:5e:24:15:27:9c:51:cb:3f:9f:58:
96:2e:c3:f5:8b:89:a2:b6:14:39:a7:16:3f:4d:57:
e2:a9:62:e5:ba:e9:3c:e3:da:7a:5d:15:3a:c1:98:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:26:68:1C:AD:B6:0C:96:75:A0:66:B1:7B:BF:8E:A5:12:F1:F9:91
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f0:ad:54:c7:47:16:5e:0a:d0:2b:b3:fc:0c:1b:a9:00:fb:
2d:db:15:19:fc:0c:d1:2b:8f:fc:6f:35:11:2d:14:52:4a:07:
5c:b7:5e:f9:3e:8e:c2:c7:e9:cc:6b:66:6a:80:81:d7:03:f9:
44:b9:a5:6e:d5:6e:a9:c3:68:cd:44:0e:9e:37:ad:93:70:5e:
4a:81:37:c7:28:b6:14:25:64:01:13:3e:1e:d4:6d:7a:32:ef:
c8:69:01:cd:5b:ae:63:4f:6e:be:3e:31:80:0a:14:73:be:87:
88:f2:cd:65:58:7d:99:4f:a9:07:10:30:d5:de:11:85:4c:db:
fb:a5:7b:5f:e3:21:0b:a3:da:ad:f8:29:f7:e6:76:fc:44:eb:
b2:98:75:32:53:30:48:1b:a2:5f:9a:a7:cf:c7:6c:b4:fb:31:
2b:e0:dc:3b:59:63:07:4d:06:7f:cb:04:18:0f:18:ba:08:ec:
e4:b7:a3:33:18:d0:fc:05:d4:3d:59:f9:3c:ce:f0:df:a0:38:
ec:75:39:50:f8:59:07:00:6e:72:e6:6b:b8:cc:54:16:2c:71:
23:fc:95:83:0d:b1:88:ff:30:e5:db:1d:96:4e:d7:bb:b6:16:
78:c4:01:18:6d:5b:87:97:de:13:e8:2d:fb:a3:c8:9c:fb:16:
64:a8:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 15:42:19 2026 by rpki-client