Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: GWZP5eVpUSXDAMdq5NdLiHH751IW7WcUEo+o4UCPCE0=
Subject key identifier: 06:38:6B:BC:AD:93:7C:8B:E1:02:D3:94:32:38:BA:93:23:C1:F3:2B
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019F1AC55952F4D8CBD2BB8A5191D0448F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 1514
Signing time: Tue 30 Jun 2026 23:02:48 +0000
Manifest this update: Tue 30 Jun 2026 23:02:48 +0000
Manifest next update: Wed 01 Jul 2026 23:02:48 +0000
Files and hashes: 1: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
2: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: BT5b2nHbsLF8wJRG198CRrIrGL1Lz/uf1sMO5g+tjR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:c5:59:52:f4:d8:cb:d2:bb:8a:51:91:d0:44:8f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Jun 30 23:02:48 2026 GMT
Not After : Jul 1 23:02:48 2026 GMT
Subject: CN=06386bbcad937c8be102d3943238ba9323c1f32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:17:ce:52:21:23:ff:ac:f6:f7:61:d1:48:
4c:7e:25:8e:6a:e2:24:61:fb:94:37:87:b4:ec:e1:
04:28:2f:d5:c6:74:73:da:ae:14:17:6b:fa:5d:9e:
80:82:33:aa:c0:62:96:69:c1:14:36:0e:a6:24:1c:
1c:66:d1:09:c3:a8:ca:02:80:03:98:85:e6:8e:86:
c4:1b:69:96:79:ea:c7:e5:63:79:54:fd:1c:7c:a1:
25:95:e1:cf:6d:e9:62:50:af:79:fc:93:9b:e1:a6:
8e:7d:a1:50:d0:82:42:2e:0b:6a:a5:19:53:8a:49:
05:11:6d:b6:2b:18:24:9c:aa:37:e9:22:ad:54:aa:
45:a0:bb:40:05:b4:47:9d:d9:bc:5e:8d:69:25:33:
61:d4:45:52:a1:0a:39:ca:db:7e:d2:ef:fb:32:4f:
26:ff:34:a6:91:19:5e:3f:15:6d:5a:b9:03:fe:b7:
c6:53:db:9c:94:4e:7d:22:f0:34:e5:30:f5:af:aa:
01:d3:75:79:8a:2c:e7:3f:da:47:48:26:2b:01:d5:
f4:66:c3:c4:5a:96:78:56:6b:e8:48:fe:39:76:7c:
98:36:eb:24:3a:42:f3:21:35:fc:9d:34:6b:2e:c1:
ac:43:fc:a7:fe:da:df:c4:00:a9:e2:bc:b8:51:cf:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:38:6B:BC:AD:93:7C:8B:E1:02:D3:94:32:38:BA:93:23:C1:F3:2B
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a3:79:c7:c9:a0:ba:44:de:26:1d:47:71:cc:94:0a:fc:02:
db:6a:f4:ed:c2:f3:8a:b0:e8:be:96:e3:d1:46:57:d4:40:1b:
5a:03:0b:bc:8a:f1:44:fb:3a:fa:67:c1:43:c2:b7:05:af:46:
47:79:eb:c0:50:a1:ce:82:e8:49:48:a4:f6:4d:0f:96:a8:96:
bc:5d:ea:59:b7:05:f9:4c:c9:51:aa:e2:13:86:ae:11:97:ea:
f4:7a:36:32:10:46:44:5b:08:33:8c:55:99:7d:03:6a:78:cd:
d5:59:3c:b0:5c:71:bc:41:c7:9c:2d:fa:e7:75:00:c7:74:5d:
8e:8d:d5:03:6c:24:b3:40:c1:8f:50:88:41:21:90:72:42:5d:
b9:f2:99:36:d8:e7:30:50:a5:f2:d5:cb:32:2d:9c:7a:ce:6f:
f3:ee:a0:86:7c:9a:5d:b9:c4:ea:d7:28:2c:86:45:1c:05:7a:
ce:05:3f:6a:9a:33:45:53:69:77:79:06:32:0b:64:bd:7c:52:
04:a7:65:12:2c:80:d9:cf:5f:7b:7d:fb:8e:8c:06:fc:3c:69:
4e:47:a6:cb:0d:5b:bd:e2:0a:b5:98:e0:4a:ef:16:78:3e:2e:
40:2a:2b:27:db:87:bd:b4:ce:c0:fe:92:93:56:38:e3:7a:06:
56:06:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:34 2026 by rpki-client