Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: P0gT1mpFrTevGTAJWU/o++niVuf3uRMRyT/OIIKAQO8=
Subject key identifier: D3:6D:0E:A3:E0:D0:93:0E:31:A0:56:DD:38:60:0E:D7:2D:E8:63:86
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019EB7A10A79098FF195AE2A2299CF547828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0B08
Signing time: Thu 11 Jun 2026 17:00:44 +0000
Manifest this update: Thu 11 Jun 2026 17:00:44 +0000
Manifest next update: Fri 12 Jun 2026 17:00:44 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: UcmMb8HvXRlVLWM8Zl511gWOlziGQjwCLtZIQL5KrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:0a:79:09:8f:f1:95:ae:2a:22:99:cf:54:78:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jun 11 17:00:44 2026 GMT
Not After : Jun 12 17:00:44 2026 GMT
Subject: CN=d36d0ea3e0d0930e31a056dd38600ed72de86386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:99:bf:cb:a6:32:3e:1a:22:6e:87:66:9f:
a2:f9:dc:f8:98:57:bb:c3:c5:b4:c4:05:9a:1b:86:
a1:12:0c:f6:75:b4:36:4e:45:02:d9:5f:86:e2:33:
66:89:7c:d8:4b:68:8c:3d:05:7a:e7:49:91:da:34:
23:04:31:04:9d:17:6b:42:4a:d0:3c:24:0c:e8:29:
85:bb:b0:b7:ef:3d:9e:02:b5:aa:8c:5a:58:f6:9f:
bf:e2:93:a7:ef:d3:3d:52:25:3b:9a:1e:4f:86:b6:
66:71:8d:3d:60:21:30:d6:01:ee:b8:a0:ab:28:a4:
e6:42:0b:0e:4c:72:36:10:1a:27:ef:50:75:f6:0e:
a7:17:e4:77:cc:8c:09:af:2f:8a:b8:b7:05:28:6b:
a5:ab:fc:be:80:89:32:de:77:a5:59:92:94:d6:b2:
47:c3:e0:fb:8c:9a:d0:fb:2d:d6:07:82:de:be:67:
72:e8:50:b6:80:0d:c0:02:49:95:46:46:93:d6:8e:
be:8e:5f:58:35:14:1a:1b:5f:b2:8f:08:b9:8d:58:
81:e8:e9:97:f7:3d:27:46:73:39:bc:ae:90:fe:1d:
16:83:49:1d:d1:20:58:25:8c:dd:85:28:fe:c9:11:
62:dd:ea:9b:d0:9c:b6:8d:70:fb:79:e7:03:4d:cd:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:0E:A3:E0:D0:93:0E:31:A0:56:DD:38:60:0E:D7:2D:E8:63:86
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:04:1c:0b:b7:cb:9d:8a:76:87:8f:8d:8a:10:3a:b6:57:62:
2f:15:28:7d:2c:79:2a:a5:a3:72:56:ce:5e:a0:50:18:7c:9c:
ad:d5:04:80:be:72:94:a5:94:af:d5:a1:ee:79:09:e8:a1:4c:
07:b8:05:28:63:98:48:90:ff:1d:41:87:76:a6:d1:96:ad:47:
38:a2:53:02:3c:7e:86:46:c4:04:5f:58:9e:45:f4:90:d9:23:
28:05:6d:48:bc:e2:f7:ef:83:f4:73:36:ce:66:bf:19:03:c6:
dc:09:ad:24:ae:6d:d8:b9:b1:b6:b5:4e:a1:be:58:46:b5:e7:
cd:61:8a:e1:74:5d:9b:50:ea:dd:5e:5f:67:17:53:ea:cc:cd:
27:37:66:08:df:6d:2a:00:9d:da:ed:72:e3:bb:e6:e3:bd:7e:
ec:79:fe:37:31:4f:22:6b:47:42:f2:c6:91:7c:ce:75:7e:2c:
21:a7:26:c8:f0:15:71:05:f9:5b:8c:83:26:2a:99:9f:09:5b:
bd:14:dd:2f:56:bc:73:d5:27:78:73:a5:26:c4:67:de:da:18:
39:83:89:00:fb:5a:60:29:5e:70:86:cb:0f:0e:45:81:65:8b:
40:20:f5:aa:6a:86:50:25:d3:cf:c4:16:11:5c:fb:66:40:f0:
cc:3d:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:58 2026 by rpki-client