Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: TBPTND+1LTnfAmgMAcE2AWfe/pCXWPrQ6dVcjieyhnw=
Subject key identifier: B9:A1:32:51:38:B8:CF:51:2E:32:6B:6E:35:C6:17:B9:3D:BD:E0:FA
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 019EB87C5C80A261A55D27B912C6AA6E67EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 21:00:18 +0000
Manifest this update: Thu 11 Jun 2026 21:00:18 +0000
Manifest next update: Fri 12 Jun 2026 21:00:18 +0000
Files and hashes: 1: 9p7dGXDhhIMjMpnYQ1dR4KNOndM.roa (hash: v32tTh04pVTtA27giNDJzrAPLcEj/C1fD9RHh94I4MU=)
2: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: uXrn3+iGR6sAuk5S+syV2O5/finNUP4/q03g47lcW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:5c:80:a2:61:a5:5d:27:b9:12:c6:aa:6e:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Jun 11 21:00:18 2026 GMT
Not After : Jun 12 21:00:18 2026 GMT
Subject: CN=b9a1325138b8cf512e326b6e35c617b93dbde0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:39:2e:39:15:67:ea:c5:cf:fc:0b:fd:20:
5d:f6:86:cc:c6:33:f6:ed:1d:d6:71:ad:9c:cb:b7:
ea:7f:82:d5:8c:a7:e2:a5:4c:bc:17:13:66:fe:ca:
f1:de:c6:f7:c8:66:ed:5c:25:f6:cd:b5:b2:d4:dd:
02:f1:53:f3:11:7a:84:5b:1e:f2:34:b0:88:34:6b:
f1:f1:f9:15:92:3f:71:6c:ac:14:7a:d8:ae:c1:a1:
7d:9f:93:bd:22:b5:af:83:d7:e4:25:fa:43:dc:79:
2e:b3:cb:7b:12:16:0b:a5:91:cc:94:f0:27:7e:0f:
dd:cf:a1:bf:b7:d6:38:fe:73:8a:0a:db:1c:a1:54:
d2:a3:85:59:97:66:60:d6:5e:3e:e6:9a:b6:01:91:
30:dd:ee:62:a4:e2:c1:6d:11:4b:7b:10:ef:4a:4c:
06:37:3f:96:4d:7e:21:ee:9c:6b:1e:c0:3b:97:f9:
60:99:51:fe:bf:4c:d4:d8:3f:fa:45:df:6d:b4:27:
87:c2:9c:fa:52:65:a1:c6:f2:5e:36:5f:7b:45:45:
68:f8:db:d8:ff:d7:15:95:b0:81:ce:a6:22:92:0f:
61:02:5a:37:15:ee:f1:07:50:28:d1:6f:28:74:58:
14:24:a7:50:2b:6d:f8:5e:13:a7:bc:7c:5c:d2:64:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:32:51:38:B8:CF:51:2E:32:6B:6E:35:C6:17:B9:3D:BD:E0:FA
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:27:c0:9e:b6:26:2e:9a:83:85:5f:51:fc:04:f0:bc:1d:
45:ad:e5:1c:df:21:36:1d:e3:48:1c:06:0c:d0:c7:57:f2:ed:
1e:37:a9:0e:02:4e:62:8f:14:af:f9:21:ed:62:2e:93:1a:74:
0d:f9:76:f5:03:e8:2e:64:2f:5f:d0:d9:07:63:6d:85:64:a9:
22:62:3a:4b:54:83:89:4b:74:1d:6d:30:b5:8a:a6:d7:83:72:
20:87:af:f0:2c:77:98:78:21:c5:7c:a1:04:9d:da:b7:ec:43:
aa:5f:7d:73:20:26:9d:b9:fd:39:a3:d4:5e:50:32:9e:ff:60:
f1:3f:3d:20:dc:a8:6c:6e:cf:d0:31:ff:cd:c7:f6:e0:a0:9b:
74:0f:17:09:70:a9:f8:9d:f4:67:d9:97:81:ab:df:6b:40:33:
c1:26:43:d7:77:36:08:69:36:73:dd:8c:d0:c9:30:ca:bd:d6:
3b:16:f0:dc:51:13:43:26:15:62:9a:b1:5d:94:52:5d:06:3a:
e2:d4:e1:45:d4:6e:ca:ac:88:64:cb:4a:72:49:3e:8e:7a:a8:
8b:e0:30:20:32:64:14:0a:2f:5b:fb:af:c9:4f:ae:cb:49:bb:
d7:d0:7a:71:79:c8:a7:20:49:02:9b:54:f6:d0:c0:0c:78:26:
75:6f:50:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fFyAomGlXSe5EsaqbmfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGU4Mjg4Mjk4NDZmNjM0NjVhMzc0NDdlY2UzYTc0NmE0
OGRkNmMwHhcNMjYwNjExMjEwMDE4WhcNMjYwNjEyMjEwMDE4WjAzMTEwLwYDVQQD
EyhiOWExMzI1MTM4YjhjZjUxMmUzMjZiNmUzNWM2MTdiOTNkYmRlMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoY5LjkVZ+rFz/wL/SBd9obMxjP2
7R3Wca2cy7fqf4LVjKfipUy8FxNm/srx3sb3yGbtXCX2zbWy1N0C8VPzEXqEWx7y
NLCINGvx8fkVkj9xbKwUetiuwaF9n5O9IrWvg9fkJfpD3Hkus8t7EhYLpZHMlPAn
fg/dz6G/t9Y4/nOKCtscoVTSo4VZl2Zg1l4+5pq2AZEw3e5ipOLBbRFLexDvSkwG
Nz+WTX4h7pxrHsA7l/lgmVH+v0zU2D/6Rd9ttCeHwpz6UmWhxvJeNl97RUVo+NvY
/9cVlbCBzqYikg9hAlo3Fe7xB1Ao0W8odFgUJKdQK234XhOnvHxc0mTEjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmhMlE4uM9RLjJrbjXGF7k9veD6MB8GA1UdIwQY
MBaAFEKOgogphG9jRlo3RH7OOnRqSN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMt
YTJmNjdmMmJmOTUwLzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMtYTJmNjdmMmJmOTUw
LzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozQnwJ62
Ji6ag4VfUfwE8LwdRa3lHN8hNh3jSBwGDNDHV/LtHjepDgJOYo8Ur/kh7WIukxp0
Dfl29QPoLmQvX9DZB2NthWSpImI6S1SDiUt0HW0wtYqm14NyIIev8Cx3mHghxXyh
BJ3at+xDql99cyAmnbn9OaPUXlAynv9g8T89INyobG7P0DH/zcf24KCbdA8XCXCp
+J30Z9mXgavfa0AzwSZD13c2CGk2c92M0Mkwyr3WOxbw3FETQyYVYpqxXZRSXQY6
4tThRdRuyqyIZMtKckk+jnqoi+AwIDJkFAovW/uvyU+uy0m719B6cXnIpyBJAptU
9tDADHgmdW9QZA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:15:54 2026 by rpki-client