Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: bApYyToOQG0uWvJJ0er6LaMIkayuGrtm2hLs9MoHSj4=
Subject key identifier: 72:D0:A8:7A:27:9A:0B:7F:73:54:E8:60:44:89:04:B1:FB:B5:D6:9E
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019EB9C62C9DC015319788FB918DA1C7207E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 195E
Signing time: Fri 12 Jun 2026 03:00:32 +0000
Manifest this update: Fri 12 Jun 2026 03:00:32 +0000
Manifest next update: Sat 13 Jun 2026 03:00:32 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: P7mIbD3FpgkWTVIO5p8i9UEXlwFKRERtlmVWQSBudto=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:2c:9d:c0:15:31:97:88:fb:91:8d:a1:c7:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jun 12 03:00:32 2026 GMT
Not After : Jun 13 03:00:32 2026 GMT
Subject: CN=72d0a87a279a0b7f7354e860448904b1fbb5d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:20:7b:7b:0a:68:d6:b7:59:da:1f:e5:84:
fe:b1:58:60:4c:76:40:55:f1:cf:ee:b5:76:d1:bb:
7d:8a:c3:0e:cd:4a:b6:9d:68:6c:c6:fb:5a:f4:af:
c5:1d:7c:17:a2:ee:4a:bf:6e:15:8d:39:1c:10:9e:
c0:b9:40:7a:97:e7:fd:71:a0:4c:dd:64:74:3c:c6:
6d:ce:ab:dc:b8:40:00:47:15:80:fc:60:b1:1a:25:
5d:3a:d8:7e:3f:6c:75:61:48:5c:64:04:52:5c:b1:
5d:b1:e0:82:9b:85:6f:5d:7f:df:03:6c:5a:f0:9c:
6f:61:ac:26:f7:40:1e:bb:2b:5c:24:b9:47:40:3e:
70:72:4a:8e:eb:e1:2e:73:6c:81:42:8b:73:bf:4e:
8e:7a:ab:3f:43:92:78:9d:a3:02:c9:30:a0:63:0a:
3e:0e:c3:91:a6:5f:2b:86:0c:4d:56:0e:5f:65:93:
38:7a:ed:ab:c1:a3:36:8c:2f:d2:92:a2:19:d4:66:
83:e7:84:60:ee:56:95:d7:6d:cf:16:5f:50:13:3c:
73:df:1d:e3:07:da:46:0b:91:ca:6d:da:e5:48:34:
65:da:dc:c8:52:36:8e:53:4c:0b:22:c1:bf:a8:83:
ac:0a:69:d5:2d:95:59:85:07:7e:4b:6a:aa:05:fa:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D0:A8:7A:27:9A:0B:7F:73:54:E8:60:44:89:04:B1:FB:B5:D6:9E
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:02:92:75:db:2e:74:97:16:29:14:f6:f0:39:6c:1c:68:a4:
94:e9:9e:74:f8:26:c1:ef:df:1a:5d:b5:aa:b6:35:aa:ef:89:
c0:2d:d2:a2:3c:a2:cf:aa:24:f7:fb:98:86:c9:41:93:a2:c2:
ef:7a:21:58:84:20:67:34:b1:07:20:f1:95:f9:27:b6:af:99:
22:70:80:af:8d:79:7d:38:e4:6f:fb:72:32:11:ad:97:2e:7f:
1d:cf:64:15:90:2e:1f:e2:6f:af:98:65:d7:84:42:17:39:8a:
32:66:e2:6e:f0:d7:22:68:79:cb:11:e8:1e:11:c6:51:64:e6:
bf:71:ac:71:79:1c:99:ab:70:db:76:44:e5:a3:7b:43:b4:68:
41:ad:29:21:9a:b6:eb:a4:5c:b9:ae:b3:1f:ba:66:25:1a:a4:
74:55:01:81:40:a2:af:ec:3e:f5:fc:75:3c:77:d6:87:93:23:
b9:ac:f3:15:cf:eb:a5:7c:8a:4a:65:40:26:e3:73:34:07:b4:
47:a6:f5:9a:6e:4e:d4:68:a0:c6:72:f9:0b:3e:0b:0e:20:11:
35:9f:50:30:5f:35:f5:6c:64:a5:97:1b:84:ab:7d:16:af:e7:
87:8b:e1:08:95:29:8f:f0:36:5f:e1:07:4b:44:6c:48:89:7f:
85:d3:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:51:02 2026 by rpki-client