Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: jfeiYsynBEOro6q0DvtC5OA3tRM01lC1XcesrEJfizw=
Subject key identifier: 15:A3:F5:8C:A0:08:10:F1:E4:B7:5D:C4:08:87:3C:9D:49:26:AB:C1
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 019E921397C5582FD75ED6B064F1A3147DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 012F
Signing time: Thu 04 Jun 2026 10:00:17 +0000
Manifest this update: Thu 04 Jun 2026 10:00:17 +0000
Manifest next update: Fri 05 Jun 2026 10:00:17 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: iXwIqUiT0fi3kOOqvadwN8IJaPRbIE0CKGER6TNa6tM=)
2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:97:c5:58:2f:d7:5e:d6:b0:64:f1:a3:14:7d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Jun 4 10:00:17 2026 GMT
Not After : Jun 5 10:00:17 2026 GMT
Subject: CN=15a3f58ca00810f1e4b75dc408873c9d4926abc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:22:b0:cd:05:c8:53:42:b8:b9:a6:db:f5:
28:f4:8c:ba:f1:52:73:79:3c:db:43:47:c3:89:36:
8c:29:4b:97:f7:52:21:53:ba:81:3e:57:38:3c:66:
b3:f8:e2:92:ab:22:5a:eb:91:e9:5e:42:dd:99:d3:
04:a0:27:93:20:60:ae:56:13:31:06:5d:87:1b:b1:
18:62:56:fe:14:ec:d6:98:ce:d5:c9:ef:4a:20:a9:
f1:07:96:4f:ac:ab:07:b5:69:0f:d2:ad:78:09:25:
cf:b4:b5:0f:b5:da:d6:77:35:36:ed:11:25:e1:d8:
f3:00:5d:64:8d:3d:30:35:af:f8:57:2c:7f:95:9c:
0a:39:06:ee:f4:4c:c2:18:a9:37:d0:66:bb:3f:04:
a1:0c:94:12:c8:39:f3:21:41:1d:ce:ed:40:7a:34:
60:29:35:17:06:13:32:dc:05:77:91:04:f2:8d:e6:
80:d5:ba:70:24:53:74:cb:fe:9f:bf:09:20:1a:f2:
84:8c:c2:ca:33:7c:94:0b:6f:d7:d1:e4:93:7f:98:
d7:c9:d8:fe:d2:cf:08:d6:50:8a:d4:a9:5b:63:83:
52:ad:19:eb:1b:9b:59:1d:0f:b3:dd:47:a6:46:ed:
1c:35:1a:19:4e:b3:9a:28:5d:3b:15:d5:c2:65:b8:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:F5:8C:A0:08:10:F1:E4:B7:5D:C4:08:87:3C:9D:49:26:AB:C1
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e9:97:b6:cc:26:eb:e4:40:ee:f9:df:ec:d5:aa:d8:2c:f9:
1f:c8:fc:34:97:13:9a:49:e9:ee:66:0a:5d:e6:23:a7:89:8a:
44:ff:bf:b7:49:ec:61:69:61:63:ce:8c:24:9e:50:5d:94:c7:
94:b1:18:d0:bf:2a:58:e7:9a:cd:0f:6d:8e:4e:e4:a4:39:61:
86:30:df:6f:5c:b7:00:5e:73:71:bf:ea:4a:ac:63:e7:19:8c:
0f:fa:a6:74:21:67:39:8d:be:9c:7e:af:3b:94:03:a9:8b:54:
5b:54:19:e2:ad:a8:6c:77:e4:2f:ca:12:2d:c2:52:3c:29:97:
9b:f0:98:50:66:ba:22:fc:41:71:60:ad:eb:5f:4d:8e:8f:7f:
fc:7c:56:4e:76:f1:5c:c4:1f:7a:a5:96:57:b7:04:2b:83:31:
c4:51:47:88:59:1c:31:4f:16:d6:07:13:38:06:02:77:6b:75:
be:d9:73:02:8d:26:da:5a:ca:f9:ad:85:9a:84:93:0e:17:83:
27:16:be:22:de:1a:ff:d8:07:a2:db:a3:b2:3b:43:01:51:62:
10:84:be:51:24:16:9f:72:13:08:02:30:14:94:83:c9:fd:d9:
bd:38:20:3f:fd:8a:12:90:a9:88:66:35:d0:ea:fd:09:b8:be:
bb:2f:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:17 2026 by rpki-client