Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: u5zp3a9Rtytij8o2WR8FDF2dErTyyiHaSGcv4ItQZH8=
Subject key identifier: 68:62:57:7D:3C:32:43:71:A1:8B:B2:5A:38:16:5A:6A:6B:B4:20:6C
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 019EB87C75D488E9EEC8E949CD1211527BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 18E7
Signing time: Thu 11 Jun 2026 21:00:24 +0000
Manifest this update: Thu 11 Jun 2026 21:00:24 +0000
Manifest next update: Fri 12 Jun 2026 21:00:24 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: Jajtc+MIWDRqIHJIX5O0rWOamTSM/cuC4yla4z5dvGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:75:d4:88:e9:ee:c8:e9:49:cd:12:11:52:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Jun 11 21:00:24 2026 GMT
Not After : Jun 12 21:00:24 2026 GMT
Subject: CN=6862577d3c324371a18bb25a38165a6a6bb4206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:22:2e:3e:98:f1:94:ff:de:09:a4:84:1b:
d0:59:ce:e6:e6:ec:f2:97:f4:c9:b7:1a:99:81:0a:
6c:32:b8:85:a8:d5:75:44:c0:e6:d8:cb:da:9b:38:
5b:2d:38:1a:a9:8a:11:6a:a1:fe:86:7f:46:63:72:
a7:1c:cc:37:80:d5:e8:e3:8d:be:10:e7:e3:bc:24:
e9:96:cc:29:12:99:0c:46:57:be:d9:d0:db:4e:67:
bc:a8:62:ef:a1:63:b1:2e:f3:6f:1d:55:ff:d9:9a:
25:fc:31:57:d5:87:c9:e8:60:75:fc:56:78:b0:18:
6f:7c:71:3e:d5:d6:2d:9a:e3:f4:f8:b8:55:6d:6d:
10:0c:52:b0:83:11:79:e8:68:f2:64:82:93:11:3e:
af:c0:fb:56:9b:0d:90:04:a7:35:b3:cf:dc:66:3a:
dc:86:0d:d8:fb:e8:64:c0:db:af:5a:5d:83:f1:e2:
e2:7d:5d:1b:ca:c5:bb:9b:b9:a2:d6:c3:c2:42:9a:
ad:5c:36:03:b7:ec:36:f7:aa:87:5e:c5:94:4a:56:
6e:6d:4d:f0:a9:f0:96:f1:80:40:c3:f5:8d:cd:45:
27:91:0e:74:54:67:f1:b7:20:cd:ae:49:36:8b:50:
a1:f6:b2:96:cf:fa:cd:e4:5b:5b:d0:fb:d3:81:37:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:57:7D:3C:32:43:71:A1:8B:B2:5A:38:16:5A:6A:6B:B4:20:6C
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dd:9f:b3:f4:d2:93:98:12:df:c3:06:8a:eb:4d:92:ff:36:
21:07:fe:7a:d6:c7:b0:a0:18:a3:f2:3f:44:ff:58:09:c3:cb:
1b:d4:5b:61:48:46:b4:ff:af:8a:9f:7a:58:ce:d6:e7:62:a4:
2b:08:b8:88:0c:e3:0d:fe:53:71:d1:c7:ed:cf:73:10:73:4b:
26:94:fd:51:23:31:1b:4d:ab:97:55:ad:f3:d9:20:a7:06:3d:
8a:14:8a:e4:74:f2:43:f0:02:8b:0a:0c:91:6b:85:3d:6d:8c:
06:89:4e:f1:ef:b5:7f:d9:28:ec:6d:3a:80:5e:c5:ed:54:ba:
29:b0:50:4f:09:5b:78:55:49:f7:bc:cc:f3:a8:d9:d6:41:95:
1f:b3:94:91:5b:57:26:d5:21:5d:71:66:03:24:b7:c0:19:a4:
12:a3:47:08:9f:5d:12:65:1d:d8:e5:56:4b:21:6b:a8:b8:69:
99:5b:c3:d7:02:02:c6:b5:28:f2:77:a8:ea:4c:bb:06:6a:86:
39:47:d1:52:5e:f5:ef:03:db:fb:76:db:b9:94:8c:85:09:d4:
c5:4a:87:1d:17:cc:aa:fa:3a:0b:c2:b2:51:ac:c0:0c:6e:26:
ef:a4:26:81:fc:4d:23:95:3f:f3:ab:89:c5:0d:ea:cb:1e:3e:
72:9f:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:29:07 2026 by rpki-client