Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: 9mEvTF3RhEiUuYdLwRlSl5JVctGAUgfmg1vmPyoIFvU=
Subject key identifier: D9:20:2D:3E:FC:D9:7A:F6:28:85:61:19:80:14:F0:7E:C4:28:76:8B
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019F0EBF9356B7D7525AECF204CF498A4B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 0170
Signing time: Sun 28 Jun 2026 15:01:03 +0000
Manifest this update: Sun 28 Jun 2026 15:01:03 +0000
Manifest next update: Mon 29 Jun 2026 15:01:03 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: yu8Ee+UGcLtyHy/eXVPP8qnfsa+RNFPZCYzSSGrBR9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:bf:93:56:b7:d7:52:5a:ec:f2:04:cf:49:8a:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Jun 28 15:01:03 2026 GMT
Not After : Jun 29 15:01:03 2026 GMT
Subject: CN=d9202d3efcd97af6288561198014f07ec428768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:3c:52:b1:66:0e:43:d2:c0:80:c1:dc:bb:
1f:d7:9f:1c:d7:0a:24:12:0b:df:52:61:50:46:5f:
a0:a2:9f:5b:13:33:67:8d:b6:5f:a6:ec:6d:bd:3e:
4e:c4:30:8b:2f:c1:43:10:05:55:50:f3:78:d1:80:
cd:58:32:e8:2d:6d:ef:a4:fb:a0:39:a2:7e:8a:1b:
4f:80:2d:da:e0:ee:ed:f7:64:07:89:f7:44:ec:34:
79:c3:a8:9e:7c:17:df:f4:5f:59:8c:85:e6:9a:1e:
13:6b:4a:f3:38:13:28:38:af:97:3e:50:66:b1:06:
15:7f:a5:3f:60:fc:91:c4:80:3a:98:d3:73:f5:0f:
b3:6a:57:68:fe:0f:fe:b3:df:54:f3:c9:2a:89:e2:
f5:b6:db:93:29:e2:fb:c4:7f:a1:4f:0d:1d:68:97:
f5:bf:9f:15:84:5a:8f:30:07:ea:5b:88:e8:9a:60:
9b:7d:79:f8:27:e6:4e:bb:a3:88:27:21:99:7e:b8:
39:21:64:29:f5:58:b7:bd:c2:ec:4c:db:be:b1:14:
67:90:1d:0c:db:0f:88:ab:42:62:35:5c:d6:00:86:
66:ee:36:2a:22:7b:7f:f3:0d:90:a8:a0:c8:f2:df:
cf:83:3d:31:98:22:65:40:af:6a:85:0c:7f:09:7d:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:2D:3E:FC:D9:7A:F6:28:85:61:19:80:14:F0:7E:C4:28:76:8B
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:87:29:d9:43:3a:56:f9:92:ea:a3:d8:4e:0e:55:b9:45:
bd:c9:bc:f6:86:73:63:aa:3c:7b:05:46:d9:48:e4:8a:bb:21:
36:35:7c:9c:80:b5:e1:8d:59:c8:9f:30:77:3f:97:4d:6c:94:
92:29:d9:08:1e:1e:df:8a:9f:0f:d3:e9:cf:54:f9:c0:45:34:
07:2f:88:17:81:e1:3e:2e:64:54:8f:a9:52:37:2a:40:80:a4:
1f:85:72:4a:46:fa:bc:c3:9e:42:c8:97:86:33:10:74:b8:38:
a7:86:09:84:44:31:1b:60:cc:6f:39:5f:84:07:4c:ec:2c:77:
81:e9:e0:31:9b:19:8c:ec:21:df:7a:cd:95:84:41:23:6d:8b:
4d:f5:a3:c9:a1:b3:02:61:6c:c4:a3:30:f3:2c:fb:eb:00:3f:
69:ff:31:96:2e:3d:ef:e2:b6:39:7b:de:49:b4:7d:f3:b3:49:
82:f6:fc:c1:46:dc:91:f6:13:58:6b:13:ae:d8:c4:22:3c:59:
22:40:5c:c9:6c:fd:a9:fb:7c:f9:b0:c1:93:2a:15:3a:df:39:
26:a7:b6:ba:45:dc:fa:3d:47:31:16:70:bd:1c:bb:61:4c:cc:
8d:d1:33:81:01:c3:77:b5:13:aa:ec:1b:9c:40:21:fa:2f:c8:
05:fe:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 16:49:20 2026 by rpki-client