Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: LZbma+qtYzy6YCDQaOHYQgcW9DuVX4LKTHr4BH/bKaI=
Subject key identifier: 0C:ED:11:B6:20:62:6E:A7:C3:9F:FE:A0:BC:D8:47:4F:67:96:75:A8
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 019F19B0F842F6E1B60EC92951F330EEE7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1793
Signing time: Tue 30 Jun 2026 18:00:55 +0000
Manifest this update: Tue 30 Jun 2026 18:00:55 +0000
Manifest next update: Wed 01 Jul 2026 18:00:55 +0000
Files and hashes: 1: OFCs67DffEHin03fXSzbafPRilM.roa (hash: 6ap5zRRwDa5G9tEhkbImTGroNfBqTJcGLaIQpF4U370=)
2: ev65uGpdeskGU8rxMwP9DGzY7yo.roa (hash: mm84YFZH+EnFHVYRA5O2XqnvCrusjCtnVPoVlpbhPxc=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: M43nY9l6AcmKukbTjj3Urr+3j2MNt7kC7izJMebnypU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b0:f8:42:f6:e1:b6:0e:c9:29:51:f3:30:ee:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 30 18:00:55 2026 GMT
Not After : Jul 1 18:00:55 2026 GMT
Subject: CN=0ced11b620626ea7c39ffea0bcd8474f679675a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:e8:35:67:66:bc:bb:16:0f:06:2a:cf:e6:
ec:b5:2d:04:15:3b:bc:d4:01:c3:47:26:32:55:63:
36:bf:18:65:a2:82:61:4c:a6:d1:51:d8:36:4c:02:
8e:ab:df:9c:2a:96:0e:f7:c4:78:50:77:bb:3d:40:
ba:0e:a2:ef:bd:28:cf:52:51:f5:fe:1d:5a:af:67:
3d:47:f3:44:6a:a8:86:20:83:87:c4:e9:81:23:d2:
56:9f:03:9d:64:e4:4e:9c:3d:a0:b4:a9:ee:27:cc:
f9:ba:03:d5:69:52:e5:01:7b:e5:f2:2e:e7:67:8f:
05:50:d7:f0:f4:dd:2c:78:36:14:f1:41:20:08:2d:
bb:c8:55:8a:42:66:70:a1:e1:df:b1:46:98:2a:9b:
8c:fc:1a:22:19:c8:b8:1d:14:8d:ad:49:42:ab:32:
b1:1e:93:49:c6:51:9b:bf:ad:31:c4:c1:8d:bf:2d:
a9:f6:09:f3:d4:a0:bd:30:f2:25:60:1f:1f:a7:d7:
45:31:02:ab:89:b4:c4:b9:3e:f4:ad:51:74:6a:28:
d5:03:a6:1a:32:10:a3:ab:21:8b:5c:2c:1b:eb:8d:
94:56:59:a6:5a:f2:80:8b:bd:db:ff:7b:46:bc:31:
8c:80:fb:6d:08:c3:15:c6:54:67:a7:88:15:c0:15:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:11:B6:20:62:6E:A7:C3:9F:FE:A0:BC:D8:47:4F:67:96:75:A8
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:e7:2c:3b:8f:d8:a1:0a:9c:2b:94:a6:29:cd:5a:d8:f9:
55:56:31:91:38:57:e8:f7:e1:2a:84:b1:b0:93:c0:59:ae:0d:
57:02:2d:ce:b6:ee:33:33:d6:a2:07:5b:1d:3c:d5:c3:6b:c3:
25:fe:30:4f:f6:6f:9f:4d:5d:72:c7:d1:08:c8:6a:98:6e:74:
8b:a6:0c:e0:cb:b1:4d:9d:94:00:cd:c0:26:fd:8b:a7:64:72:
10:c4:ab:d7:9b:0f:b7:65:9a:8f:e0:cc:19:a8:29:30:6d:51:
7a:bd:c2:ac:8e:59:54:c0:ec:68:7f:90:88:d5:12:ca:06:59:
ca:47:95:11:97:b8:78:53:de:7b:5d:16:20:1a:0c:b3:d5:ad:
09:40:72:8d:7c:66:11:a5:99:12:64:ca:c8:90:87:03:07:0c:
6f:57:bf:34:56:c6:62:a7:0a:c0:79:91:72:50:d7:0d:c3:3c:
de:59:25:c7:08:e8:28:1c:5e:28:16:6f:11:91:da:7a:46:e5:
de:3a:24:a3:07:cc:8d:0c:6f:49:49:c8:db:4c:83:dd:50:64:
ad:e6:e6:d8:61:65:4a:16:65:56:3c:00:7b:8a:95:7d:82:04:
61:a8:fe:58:0b:54:fe:07:5e:c2:af:5e:64:b3:f7:e2:1b:6e:
01:ac:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:17 2026 by rpki-client