Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: 69QnRq/CaMzibe0M6q4UgDDgj2NELxYq4A7GMIfgkPY=
Subject key identifier: 0A:DB:CE:81:56:F4:22:87:05:CD:36:F2:61:C5:AF:DE:C8:53:6D:9C
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019F19B103708ECC4A152FBE6A189DA607C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0356
Signing time: Tue 30 Jun 2026 18:00:58 +0000
Manifest this update: Tue 30 Jun 2026 18:00:58 +0000
Manifest next update: Wed 01 Jul 2026 18:00:58 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: 02kGjU8OPcFKqAkIor7NgbLDIuCAj9dXJSr4WUJZ/Zg=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:03:70:8e:cc:4a:15:2f:be:6a:18:9d:a6:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Jun 30 18:00:58 2026 GMT
Not After : Jul 1 18:00:58 2026 GMT
Subject: CN=0adbce8156f4228705cd36f261c5afdec8536d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:6a:50:c1:d1:8f:e1:1b:eb:ce:c2:0e:02:
85:20:a2:7c:fa:ac:54:ff:6d:ef:fc:14:0a:7f:ae:
d9:21:86:c5:fa:3a:45:07:3f:07:69:87:ec:11:a4:
1c:83:f8:f8:53:bf:98:be:d2:df:1c:59:56:e4:65:
07:01:41:82:b1:d6:35:7b:ee:92:98:e0:b9:58:f0:
98:e1:1e:27:15:7c:56:87:89:b9:5f:25:40:0d:a1:
fa:ce:fb:cd:ff:e5:c2:5c:8b:b7:6f:a9:20:85:ca:
a7:d3:c8:04:25:9b:7c:0e:2c:1b:51:92:e2:7f:0a:
fc:1d:41:28:c2:1b:71:13:87:d7:0c:49:04:f9:08:
f0:17:48:1e:a1:1a:0b:8b:2f:18:df:83:b1:ae:06:
10:d9:28:e8:7e:16:d6:77:21:8c:b4:54:98:f0:db:
8b:aa:03:0f:50:69:88:77:28:f8:72:d8:6e:70:cc:
c6:c4:8a:3c:91:a4:bc:01:c9:2a:2f:27:77:d3:c2:
c5:12:79:dc:25:4f:ac:e5:f7:7e:ab:4c:da:78:e2:
50:6b:0d:5c:50:e6:bf:8a:14:79:2f:d8:01:40:6b:
8c:fe:06:fb:f3:0b:09:c9:04:87:30:4e:73:9d:51:
40:65:94:5c:99:55:b7:55:b7:d7:2f:96:02:93:80:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:CE:81:56:F4:22:87:05:CD:36:F2:61:C5:AF:DE:C8:53:6D:9C
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:02:fb:f8:84:5e:d0:f1:58:27:75:f8:22:8a:17:9e:83:76:
d5:ea:bd:bc:c2:79:c9:7f:28:34:ac:e4:ac:46:57:fc:57:aa:
7b:8c:a5:12:b1:fe:24:a1:3c:a8:f6:e4:df:bc:5a:16:f6:1b:
14:bd:fa:15:11:90:2c:dd:fd:e1:19:b9:b6:fd:cc:e1:c2:59:
e3:fd:e3:d1:5b:30:03:93:22:62:86:03:0f:44:63:28:f5:d5:
47:d0:84:bc:1d:7c:09:3e:5a:56:89:61:12:31:60:d5:b2:f6:
ef:37:6c:bd:ce:d6:89:6c:00:2c:65:94:c4:12:c3:ba:03:b7:
25:d1:9f:c1:23:b5:59:48:df:d4:f2:97:03:83:ee:d5:83:6d:
5d:8e:fd:8b:cb:16:fd:89:2b:c3:e0:49:6b:aa:e1:cd:be:d2:
df:96:68:6a:01:21:d4:bd:f3:18:55:57:c9:3a:67:f7:32:df:
d5:c5:5b:b0:03:8e:14:95:48:b4:a6:cc:00:4a:8c:b5:92:ee:
5a:e8:03:fb:02:33:39:89:bf:10:e9:59:9e:09:e4:b9:45:66:
bf:07:2f:62:c2:2a:cc:ab:11:7c:7c:af:4b:c8:4b:ef:34:15:
22:04:2d:65:10:a8:5a:f2:bc:80:26:8e:27:e1:8c:22:c8:62:
8a:57:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:49 2026 by rpki-client