Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: 3opg8fU6AfzWXBmY0LnSP8BJ3BmvYAAOGWGDwBoE84o=
Subject key identifier: 6A:22:8F:CA:89:B2:F0:11:9C:30:25:E0:85:28:58:6A:3F:67:59:BC
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 019E91381C9BA848E6175EB1CA750902E0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 1260
Signing time: Thu 04 Jun 2026 06:00:34 +0000
Manifest this update: Thu 04 Jun 2026 06:00:34 +0000
Manifest next update: Fri 05 Jun 2026 06:00:34 +0000
Files and hashes: 1: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: Zo5KFfVtOAr7acvFxLWYE2jG/vGmAJ7Dq9uJJ8uxQYA=)
2: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (hash: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4=)
3: tPolntRW3EVoA5WCEpAsWda33Aw.roa (hash: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:1c:9b:a8:48:e6:17:5e:b1:ca:75:09:02:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jun 4 06:00:34 2026 GMT
Not After : Jun 5 06:00:34 2026 GMT
Subject: CN=6a228fca89b2f0119c3025e08528586a3f6759bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:fa:02:e9:32:c7:fd:28:01:0e:6a:f7:c8:
e3:d1:dc:66:46:6d:f9:0e:a8:6d:c8:0b:75:69:91:
8a:7a:6e:b0:62:5e:3b:e9:4a:98:87:09:6e:13:9b:
9c:3e:31:b5:0b:a2:51:37:9c:00:d1:d5:c8:bc:0d:
f0:b5:2d:dc:ad:d4:13:f6:0c:31:91:ff:3a:b7:7c:
ad:ff:b0:62:51:83:ba:9d:37:80:eb:79:d9:aa:59:
6a:3c:82:bd:f8:8d:4e:eb:25:64:10:f5:c8:50:9f:
39:fe:91:90:ed:93:7c:bb:7f:eb:3f:07:6f:70:11:
28:d6:7d:c9:fd:d5:03:b1:ca:f4:7a:54:39:b5:59:
4a:ba:27:24:18:29:2d:c8:e1:38:6d:a3:cd:1d:9f:
91:d6:d2:8a:e4:f0:99:21:ec:b4:79:2c:6b:0b:73:
e9:41:2e:c0:ce:8a:18:20:90:55:31:b5:84:91:2d:
3f:0e:50:da:d4:98:06:cb:92:a1:2d:56:bd:12:31:
31:1e:17:04:17:5d:9d:22:ec:de:d5:46:ae:c9:9c:
e5:0e:42:24:9f:e6:d5:5e:ea:13:42:8a:87:db:4f:
41:7f:d4:c6:ae:27:19:2f:c9:64:3d:8d:59:9b:76:
8d:c9:f7:33:cd:97:8b:32:2c:87:2f:d5:b0:72:46:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:22:8F:CA:89:B2:F0:11:9C:30:25:E0:85:28:58:6A:3F:67:59:BC
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0f:ba:7b:c0:e0:9e:6d:b7:c7:81:cc:4a:3f:55:34:00:7b:
65:14:34:92:d5:8d:cc:c5:ad:3f:8b:06:0e:2e:18:43:ec:65:
49:41:49:f1:06:dd:e3:a5:a0:d6:2d:52:2d:81:89:d1:bd:17:
de:8a:72:0f:c4:4e:30:17:6b:43:93:48:0e:42:c6:52:2c:67:
09:9d:8b:d4:32:45:99:6e:dd:13:df:1b:2e:33:44:e1:66:b7:
a4:77:26:54:83:f3:55:96:42:a2:06:06:56:66:4a:11:20:9b:
11:a0:00:08:73:9a:a6:d2:ed:db:2c:e9:7d:3b:6a:ee:fb:e2:
f8:64:b1:10:3d:5c:3b:31:24:a9:e6:e4:a3:60:ae:3e:dc:cb:
b3:b6:ee:d2:1d:03:2e:e0:bd:98:0c:61:94:e6:77:5a:e9:ee:
0c:3d:af:fb:b6:1a:76:99:1e:3f:9a:62:8c:32:77:e9:a4:5a:
5a:ae:9e:49:99:98:b8:e0:0c:25:2b:59:be:54:c6:f5:42:6b:
2c:dc:36:be:ef:85:5c:58:a4:d9:39:82:a1:76:ca:9a:2c:a0:
38:a1:83:52:bb:78:9a:0f:a6:6f:27:15:b0:da:97:96:b0:61:
ba:67:b4:80:60:36:62:4e:08:1a:c5:47:82:70:a9:0e:a6:fa:
0c:b5:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:35 2026 by rpki-client