Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: BWn/UlmTzZD5FjPt7YAE1KN+FZFR7QLFP/SDBoukK4E=
Subject key identifier: A0:D5:E4:1A:09:B2:8A:53:CC:61:11:1B:86:EA:96:98:E7:A5:3F:20
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019EB7A16107F69AA32C57FF0E8132D6E8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 164B
Signing time: Thu 11 Jun 2026 17:01:07 +0000
Manifest this update: Thu 11 Jun 2026 17:01:07 +0000
Manifest next update: Fri 12 Jun 2026 17:01:07 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: QisKcexvfCGZqTqORmmY7xLsqglujm663eXfcFb7sHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:61:07:f6:9a:a3:2c:57:ff:0e:81:32:d6:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jun 11 17:01:07 2026 GMT
Not After : Jun 12 17:01:07 2026 GMT
Subject: CN=a0d5e41a09b28a53cc61111b86ea9698e7a53f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:96:14:9c:ed:86:18:d7:cb:bc:25:73:ab:
cb:d4:d4:72:58:11:1a:28:b3:32:97:6e:f6:29:c3:
18:04:35:d1:e7:1f:0d:b8:ee:75:96:79:1c:70:2e:
d2:c2:dd:32:2d:07:39:6f:f0:79:71:70:f2:87:3a:
5a:9f:26:5f:24:c8:d7:b5:93:6d:6e:b0:fd:9c:6f:
84:5a:bc:6d:10:a1:1a:c8:54:95:e8:8e:82:dc:b7:
de:6c:20:de:6e:52:bb:17:6a:d0:e0:eb:8d:4b:da:
52:b8:c5:f0:c8:1f:ec:38:b3:c5:10:29:1e:c4:78:
08:fd:34:4c:7a:5f:83:e1:35:2f:da:3a:ff:6b:4b:
94:da:81:09:5b:2f:5b:46:57:e1:90:e7:82:32:c5:
bc:19:23:9f:2d:51:8b:6e:21:cf:1a:33:87:8b:cf:
6c:ca:42:2d:fe:2a:3d:9c:26:84:39:95:10:f0:e4:
68:60:90:a8:fc:9f:76:7c:8f:b3:e7:42:8b:29:fe:
ad:ba:d1:d1:65:2e:e4:66:c6:94:e0:b7:f7:d5:b6:
49:f3:18:78:b1:ee:59:09:2b:7a:c1:cb:7e:03:76:
59:43:25:1d:ed:6f:4f:57:df:9f:5b:08:b8:81:5f:
15:94:0a:54:c2:3f:c6:9e:b8:8e:38:c0:33:9f:23:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D5:E4:1A:09:B2:8A:53:CC:61:11:1B:86:EA:96:98:E7:A5:3F:20
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:54:a5:f5:5f:a2:1a:3c:e7:0c:79:0c:87:ea:d4:50:02:e7:
c4:69:d3:48:03:3d:8a:ad:6e:ff:c2:f0:d3:91:b5:a8:2a:02:
fc:22:33:be:86:b7:d1:34:ee:3e:6f:6a:13:66:20:8f:46:57:
3c:78:64:de:ef:f3:52:41:a5:9d:ce:26:06:59:4b:4c:12:f3:
31:a6:dc:aa:4d:43:4d:ba:1b:d1:31:45:2f:44:f6:0d:06:0d:
25:8e:f6:09:a6:e8:ef:68:b3:e2:5d:6b:ff:72:21:7d:ad:a6:
9c:3d:be:c4:25:fa:f2:1a:7d:37:1a:56:02:92:e1:f1:1a:8c:
3b:5c:62:d9:b0:68:f7:9d:a3:a2:f5:63:a5:08:ba:31:7f:ad:
24:ec:ba:14:8c:f5:ca:a4:a4:4f:55:36:87:63:d3:21:56:85:
47:af:0a:6f:f8:bb:87:bd:92:2b:93:fc:60:4b:1c:6b:48:bc:
7c:92:37:c4:a5:82:71:95:b1:ad:1a:d8:53:65:4d:42:0e:4d:
8e:28:bb:c2:b0:0c:f8:27:fe:ee:0d:d1:70:19:c0:5b:5c:fc:
4f:d3:8c:57:3c:3e:5f:70:ce:09:dd:d1:fc:34:4a:7c:19:3c:
98:f6:1b:41:5a:ef:54:02:4c:d1:22:91:2c:af:39:88:fc:17:
f8:f3:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:30:20 2026 by rpki-client