Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: grZSbk5zJrNl1NxQGuY0JrhzT5F6uGWsuo6x4NZlYgQ=
Subject key identifier: 85:F6:46:18:32:BB:B3:77:37:C8:9D:51:BD:3D:CC:4D:9E:7B:C7:AC
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 019EBA6AF162E02BC3ABD7281FF05A6B1215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 18E8
Signing time: Fri 12 Jun 2026 06:00:31 +0000
Manifest this update: Fri 12 Jun 2026 06:00:31 +0000
Manifest next update: Sat 13 Jun 2026 06:00:31 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: 7QzsDqaJem/9qGoqxCN6uCLADQApiOObmmcPtUDwpCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6a:f1:62:e0:2b:c3:ab:d7:28:1f:f0:5a:6b:12:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Jun 12 06:00:31 2026 GMT
Not After : Jun 13 06:00:31 2026 GMT
Subject: CN=85f6461832bbb37737c89d51bd3dcc4d9e7bc7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:73:6f:be:fc:76:1c:83:04:cd:30:92:17:
02:d5:f1:7a:5b:19:ff:8a:df:05:f2:08:3b:ad:71:
c1:12:8d:af:ac:91:45:d7:af:5e:4a:7d:f6:5e:dd:
05:3a:70:5b:8e:e3:2a:32:cc:14:38:31:10:cd:64:
d8:07:c8:35:97:12:7a:0c:75:86:e8:86:96:49:3a:
e4:8c:04:e5:9f:af:c3:a8:82:31:ba:e1:60:97:72:
2b:44:65:68:01:5e:4f:78:14:65:8e:71:02:ba:15:
d8:60:75:dc:dd:46:44:29:63:44:9c:d1:33:29:85:
7e:97:b5:b9:7b:72:75:0b:5f:22:88:8b:3b:8a:be:
51:62:23:63:4b:58:bf:67:22:7c:eb:4c:7c:fc:92:
35:e7:53:ef:f0:ce:09:aa:ed:c3:0e:d6:89:e4:9a:
44:de:fc:2e:74:d5:43:d5:0e:29:10:ce:01:3b:a9:
13:08:82:c3:ef:59:0a:d5:4f:4e:4c:16:ec:6c:c8:
b6:9d:16:59:50:2f:b6:8d:02:1b:4e:5c:99:ff:8e:
22:8a:56:fb:b9:6b:99:82:70:d3:a8:d4:87:dc:df:
36:a0:a9:7a:5e:97:db:54:f4:06:61:43:da:1e:1f:
4b:19:e8:9f:cd:29:b0:e1:cb:78:57:6e:5b:ec:b6:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:46:18:32:BB:B3:77:37:C8:9D:51:BD:3D:CC:4D:9E:7B:C7:AC
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:f0:8c:5e:87:01:ef:a7:a2:0e:e5:2b:54:28:79:b0:5d:
74:41:f1:fc:ac:f2:7c:35:92:9e:2f:9c:c3:1b:da:c5:19:d9:
30:61:12:de:88:57:d3:44:0a:b6:85:c0:34:0b:2c:6e:c7:8e:
ac:6d:58:75:67:8a:29:df:52:70:f8:92:a7:e6:39:7e:e5:f6:
d4:e2:7b:45:dc:fa:c1:c8:c2:f9:db:be:f4:6b:c0:0d:9a:92:
cd:d6:cc:ae:84:43:bd:d2:c1:6d:c3:89:78:08:da:5a:6f:cf:
f6:21:68:d3:9b:e3:5b:3b:6d:50:13:79:3a:38:19:8c:36:cc:
7c:68:b3:ab:8d:27:30:f2:f2:5e:6e:21:8a:a1:3f:c0:d3:fa:
81:0b:6e:5d:2e:90:78:6c:cc:74:7d:fa:49:37:b2:7a:29:03:
42:c6:fe:8b:55:cf:3b:74:38:47:dd:d7:31:9f:8e:05:58:e4:
b3:30:9f:f2:44:1f:62:27:71:ed:cb:e8:56:dc:87:a4:76:38:
26:12:45:f3:ba:aa:a6:2c:91:c3:36:93:7b:77:8c:09:1c:11:
87:3b:6d:93:88:3c:28:03:ae:72:31:aa:3f:61:f5:f3:14:36:
10:f8:e6:92:ef:bd:8a:65:96:f2:32:07:57:00:9e:7b:7c:87:
4e:52:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:56 2026 by rpki-client