Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: bTub786/U4a4L7z4GY3dl+j4pkkciqhtrjQ6pFCvtzI=
Subject key identifier: A6:87:4C:A8:D4:E7:AB:68:C6:87:24:97:D2:BA:21:C3:4A:3A:6B:A6
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019E91DD675E00EC6678B990A337B87891A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 12D8
Signing time: Thu 04 Jun 2026 09:01:06 +0000
Manifest this update: Thu 04 Jun 2026 09:01:06 +0000
Manifest next update: Fri 05 Jun 2026 09:01:06 +0000
Files and hashes: 1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: G+r2i6nLixJGZrW+gV305fX4i3Y9NnLbyv7Oai8y8+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dd:67:5e:00:ec:66:78:b9:90:a3:37:b8:78:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jun 4 09:01:06 2026 GMT
Not After : Jun 5 09:01:06 2026 GMT
Subject: CN=a6874ca8d4e7ab68c6872497d2ba21c34a3a6ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:ff:7f:f6:c6:57:e3:7c:89:2a:b0:85:66:
28:5c:c7:21:dd:44:c6:8c:67:6b:e0:d5:6f:44:ab:
22:8f:36:95:1d:69:f7:5f:4b:51:4f:fa:ea:ad:01:
52:16:45:57:c0:7b:5f:64:94:4d:4d:44:27:0b:17:
02:5f:85:7b:ed:cd:f6:45:9f:55:98:d3:55:87:99:
20:8f:de:96:61:13:2c:7a:a0:2e:cf:bd:df:f9:11:
6b:df:53:73:74:23:1a:07:3e:07:79:86:f8:22:8b:
43:c1:21:00:1b:df:23:33:4b:f9:86:4b:ed:81:73:
3d:35:d7:1b:61:ff:48:83:a9:fa:62:7a:4c:9f:7c:
44:2e:ea:a3:fd:ed:17:3c:c6:cd:e4:60:86:73:24:
81:1a:a1:3a:1e:d6:66:58:6a:8e:da:d1:51:fa:99:
0a:a2:58:0d:d7:e5:0a:50:84:c6:dc:91:5e:23:48:
ae:d3:04:16:79:79:66:46:5a:09:b2:76:8e:5f:95:
85:93:c4:66:a0:26:76:87:66:07:ec:89:a0:7f:37:
7e:66:e3:28:66:6f:60:9f:c9:84:b2:19:e8:13:dd:
a6:6c:b6:5e:d2:5e:9e:64:aa:c0:93:26:2d:30:91:
3c:26:b1:87:15:15:1b:64:f3:f7:98:0b:fa:5c:f6:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:87:4C:A8:D4:E7:AB:68:C6:87:24:97:D2:BA:21:C3:4A:3A:6B:A6
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:8d:56:4c:0e:7f:48:9c:ea:77:d6:0d:34:7d:3c:44:a1:
19:24:da:70:fb:9f:0c:05:af:fa:e1:93:73:df:9d:c0:f7:59:
5b:bc:63:83:79:33:78:06:4c:f9:8e:96:01:b0:8e:fc:40:d5:
08:aa:33:10:3e:99:90:08:59:35:2f:53:42:7d:fb:4f:00:7f:
55:db:b0:19:de:9d:2a:ca:0c:be:32:d4:ef:77:5b:c9:7f:b5:
e8:31:7f:3a:81:e5:bf:29:8a:9b:43:3f:39:7a:c1:4c:ae:b0:
fb:25:43:ef:d7:5a:98:19:2a:0d:29:e4:3e:d3:46:0f:5d:63:
c8:03:56:6c:3c:2c:1b:7f:18:46:56:af:74:02:39:51:4e:e6:
3e:52:cf:b8:89:54:d8:1a:f9:98:d7:b6:c3:c4:cc:ed:7c:52:
3b:41:40:6b:af:a5:84:8d:96:ba:ce:0f:22:c5:f7:ed:96:88:
b5:10:8c:64:51:89:a9:42:62:82:5a:b2:f6:58:3f:0a:03:5b:
e4:87:9f:77:0c:a7:a7:94:93:cc:20:65:c5:76:d7:cb:84:d3:
01:02:52:3e:ae:3b:25:fb:46:dc:ae:cc:2a:d0:32:c4:b5:14:
b7:b3:fc:6c:47:e4:8b:0b:dc:2b:dd:94:53:3e:64:1b:9b:c8:
83:a6:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:07 2026 by rpki-client