Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: Ied4f5JnBpe7ueAEG9ENKYZ+Oswwble1f6XN5TpGFZo=
Subject key identifier: 99:14:84:8B:C2:82:3E:45:68:7E:58:C1:18:16:5C:F4:B2:CC:0A:DF
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 019EB6FC5CB8E091C1FFA718EAA4AC864113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 14:00:52 +0000
Manifest this update: Thu 11 Jun 2026 14:00:52 +0000
Manifest next update: Fri 12 Jun 2026 14:00:52 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: BW5flD9cfko2KJZfisvAHngeso6JhXx121Zh+ptXizk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:5c:b8:e0:91:c1:ff:a7:18:ea:a4:ac:86:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Jun 11 14:00:52 2026 GMT
Not After : Jun 12 14:00:52 2026 GMT
Subject: CN=9914848bc2823e45687e58c118165cf4b2cc0adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:22:6f:bc:15:44:a0:52:84:79:65:ec:7a:
7a:f6:7d:78:34:3b:bd:d3:8f:b1:1e:6e:40:32:64:
5d:cd:fc:20:e7:3c:12:a8:dc:58:9d:6d:51:13:f3:
de:bb:0d:f1:90:bd:d2:3b:d7:19:5d:10:16:f1:bc:
53:67:bb:a6:8a:0d:1a:29:7a:4e:5f:5e:ad:47:bb:
e8:56:a3:3d:5b:2b:21:84:f5:40:76:cc:b1:a1:d9:
f6:29:bd:a0:0a:1a:9a:5c:3a:4c:1e:13:56:43:f8:
1c:d3:5f:e5:03:fb:f8:15:88:1d:76:22:5c:65:50:
91:29:a7:dc:5e:14:73:7e:33:23:9e:58:c2:c6:63:
66:e7:47:c5:5e:3e:98:05:9b:71:a4:de:37:83:49:
1e:1e:a4:5b:79:c8:b1:4e:cc:74:4d:57:20:6f:5c:
92:2b:a9:84:eb:08:77:22:e0:f3:42:ca:11:0d:a3:
a4:da:04:2f:67:c4:7b:b5:58:c1:dc:bb:12:53:30:
d6:28:6c:e8:64:3b:4b:0b:a3:b7:e0:e9:32:c2:f2:
a8:b6:49:a2:50:b0:93:3c:63:f5:16:7d:e6:ba:ff:
ff:95:94:d7:43:7c:dd:56:56:50:95:12:b7:56:56:
bc:a8:47:7f:99:e9:dc:62:d5:20:18:da:a8:07:b2:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:14:84:8B:C2:82:3E:45:68:7E:58:C1:18:16:5C:F4:B2:CC:0A:DF
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b9:70:f5:e3:60:3f:77:2a:63:b4:97:4c:01:23:66:8a:9d:
46:45:e5:2d:8a:74:a2:b4:0f:d1:65:d2:d1:33:70:a0:73:32:
1a:25:cf:d2:f6:e8:83:9d:61:55:10:32:9c:aa:ad:bb:d5:7f:
4b:e2:8c:09:e3:ca:b2:32:35:e5:46:8a:3c:d2:e0:6f:87:76:
2e:70:28:40:3c:a2:37:a2:07:db:7e:0a:f1:71:6d:6b:1f:e7:
02:34:7f:b8:4f:71:04:68:6d:2c:0e:e3:0f:28:2a:f4:8a:95:
c9:c8:36:cc:f3:b8:81:26:cb:fb:37:a6:1c:e0:c0:5b:cc:87:
ce:00:53:7e:46:fc:90:59:b4:37:46:e7:1c:ab:14:fe:1d:cc:
cd:94:de:b7:6a:99:21:a9:a9:57:a3:3d:9f:66:05:a4:cd:ba:
2e:83:6a:1f:6e:83:ec:29:93:9b:63:bd:f5:93:51:e6:04:6e:
27:1a:77:8c:59:48:cd:52:92:0c:52:d3:1b:6b:91:14:15:38:
13:65:d9:e1:de:01:3d:1c:9e:58:79:d7:0f:11:7a:80:40:7c:
7b:7c:10:fb:19:5a:8d:1d:6e:54:8a:26:c7:d2:c2:60:1f:2b:
51:fd:45:05:19:0a:80:7f:31:06:cb:05:ee:03:3f:8f:7a:bd:
d0:06:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:50 2026 by rpki-client