Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File: qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier: orH/g8tQvAal/yFSjuA73xOhtKymNdH8RxVQpzs5f6E=
Subject key identifier: 28:9A:CA:00:21:0E:07:EB:8D:39:D5:BD:7C:B9:33:B6:88:3A:79:21
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer: /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial: 019F11C076C9B9ECF90E7393A15B376DB1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number: 2E
Signing time: Mon 29 Jun 2026 05:00:53 +0000
Manifest this update: Mon 29 Jun 2026 05:00:53 +0000
Manifest next update: Tue 30 Jun 2026 05:00:53 +0000
Files and hashes: 1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: O08+aksOpn1jtsETVug2PYCBjWGrSoTwLgHCpZieqhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:76:c9:b9:ec:f9:0e:73:93:a1:5b:37:6d:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Validity
Not Before: Jun 29 05:00:53 2026 GMT
Not After : Jun 30 05:00:53 2026 GMT
Subject: CN=289aca00210e07eb8d39d5bd7cb933b6883a7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:a3:94:a7:56:68:4d:81:60:01:34:7d:54:
30:67:0a:b0:57:03:1c:2a:45:fb:fa:02:e5:e3:07:
3f:9c:b2:50:cf:39:09:ba:f5:aa:33:40:e7:91:2e:
88:1e:b3:67:aa:e8:2c:54:e8:76:5b:5a:fa:72:2e:
47:fc:f0:88:a0:3e:37:32:09:82:e5:9f:0e:40:1f:
3e:a4:2a:20:86:3b:a5:d6:44:09:60:e6:56:c6:cb:
95:7a:3e:cb:f5:af:6e:6b:b8:80:21:38:af:d0:72:
9a:32:53:f5:6c:21:e6:b8:7a:e7:fb:99:43:b1:3f:
38:bd:12:6e:cf:c7:12:2d:cd:ce:25:95:29:24:5d:
be:07:00:82:41:aa:f4:47:db:60:a2:4b:2b:71:34:
11:f0:39:30:b8:82:dc:89:15:08:02:45:c5:e8:69:
09:8c:44:90:8f:9f:b5:1e:37:66:da:36:3c:f6:1d:
53:15:fa:a8:e1:2e:7a:3e:a4:d4:09:4e:26:4d:33:
e3:f6:81:47:6c:9f:6b:33:93:99:c4:4d:46:0a:d5:
49:18:cf:d3:97:e0:76:a1:2c:d2:8e:83:7a:bc:68:
d0:85:4e:61:91:4d:0c:98:0d:99:ba:c1:33:09:e6:
0c:fb:68:14:54:1f:4c:5e:66:ad:47:69:4b:de:47:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:CA:00:21:0E:07:EB:8D:39:D5:BD:7C:B9:33:B6:88:3A:79:21
X509v3 Authority Key Identifier:
keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:ac:0b:14:99:e3:cc:e6:40:7b:b1:6a:04:07:d3:9e:49:
dc:81:72:44:2a:9c:ef:0f:b9:a1:47:dd:a4:e9:50:f2:f7:a5:
99:f1:26:c6:a2:96:1e:4a:d5:3d:23:d2:58:77:02:d3:f4:43:
b8:6e:ab:d9:0e:82:f2:18:a6:2f:9d:36:97:a0:3e:ce:4c:2c:
1b:5e:5d:2b:21:02:f4:55:7c:02:9a:2a:3a:ca:50:07:83:c5:
aa:fd:a1:4d:01:63:76:ab:85:b2:e2:79:76:0e:1d:cc:fa:6e:
3e:12:7d:76:93:4e:e4:fa:a0:82:cc:08:c7:f1:55:21:16:31:
da:f4:f8:5a:6d:cc:ab:ed:10:9b:82:4a:4d:59:a6:33:08:3c:
3b:dc:e9:55:1d:45:5e:99:b8:69:41:42:8c:8b:44:76:43:55:
aa:48:d4:10:01:19:f4:e8:6e:f8:46:a7:65:7a:fb:f1:d6:a7:
d5:b2:72:21:cf:4b:00:86:16:95:c1:e1:01:9d:ba:ba:e3:6f:
2d:a3:c0:3b:9a:fa:13:27:32:20:a2:f5:38:a7:e5:7f:90:2c:
78:bc:57:23:fc:12:0a:1d:a8:3f:2c:d0:19:1f:cf:ba:5c:ef:
ef:8c:3f:cb:a9:08:26:e6:9f:31:47:3e:85:98:c2:51:01:a1:
cd:d1:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:31:29 2026 by rpki-client