Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: hUyTsAmLA7q4thd504UUqqWnpsXcMRy0oHoSgMrmaw4=
Subject key identifier: A2:2D:4B:8A:72:FE:2C:F1:22:7D:03:1A:D7:7E:3B:88:BB:E4:63:63
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019E99CD277A796D4EC2F68A2C3621F5B7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 09DF
Signing time: Fri 05 Jun 2026 22:00:19 +0000
Manifest this update: Fri 05 Jun 2026 22:00:19 +0000
Manifest next update: Sat 06 Jun 2026 22:00:19 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: sph0BzdK4KBwB0ldVAE7b04D/RrYwSNvJ45AvGeKiD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:cd:27:7a:79:6d:4e:c2:f6:8a:2c:36:21:f5:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jun 5 22:00:19 2026 GMT
Not After : Jun 6 22:00:19 2026 GMT
Subject: CN=a22d4b8a72fe2cf1227d031ad77e3b88bbe46363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:9c:06:f9:46:84:78:1c:68:bd:87:eb:68:
00:c6:c0:83:19:c4:bd:bd:8f:d0:42:74:69:2d:7a:
18:ed:94:56:17:ba:0f:8f:39:64:9a:09:20:ed:2c:
03:ae:c9:81:b3:7b:de:16:ad:6e:7b:ed:1f:b2:4f:
c8:0a:74:bd:43:fa:61:1a:df:a8:c4:49:18:0f:43:
76:cd:2d:fa:98:74:ce:b6:be:1a:2c:18:9a:80:a8:
64:24:71:06:5d:3a:88:3a:f9:73:d3:31:69:d8:d3:
ed:02:a5:d5:d8:5d:9b:d3:cf:85:9b:3a:a9:3a:a8:
c5:58:05:37:a0:99:41:f2:10:d5:8e:74:2c:b9:47:
d7:70:e7:4c:6d:db:12:bb:ca:03:6b:d1:24:d8:eb:
68:4a:c8:14:2d:43:33:86:29:91:bb:79:1c:a0:f7:
6d:60:ed:ed:cb:38:db:4d:1a:c5:4e:5c:14:c5:f8:
0f:80:da:bb:56:17:b1:35:e9:c3:63:23:b1:1f:b7:
4f:38:d0:a4:17:d6:56:85:df:81:4a:b9:88:7d:29:
32:bd:75:70:1b:22:65:c3:07:cb:36:4b:9d:e3:e6:
b1:83:09:86:c6:f3:e1:5a:c3:ff:dc:34:19:0b:78:
f9:37:f7:68:61:fe:ef:e4:42:6a:de:f3:39:34:d4:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2D:4B:8A:72:FE:2C:F1:22:7D:03:1A:D7:7E:3B:88:BB:E4:63:63
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:6d:c0:56:50:82:d4:d0:af:d8:18:45:40:48:35:28:29:
50:dc:d0:c7:71:f6:3b:77:75:0e:55:c5:09:1e:d3:d8:1b:06:
76:f6:a0:3a:7a:ec:0a:bc:87:65:39:88:42:3b:43:cc:45:20:
9f:d1:02:75:07:be:83:69:ee:d5:1e:55:0d:2b:7f:db:61:19:
d5:e3:7f:55:88:bf:cd:ae:81:e0:9b:90:fb:35:9c:4c:9a:0e:
0c:32:45:ed:5a:d4:54:23:46:84:a6:f5:1f:73:f2:4e:e6:b5:
ed:28:f7:7b:10:ed:44:ed:14:c5:b4:b8:af:55:db:7e:c1:ad:
7e:a5:55:2a:7e:16:06:23:47:73:0c:90:7d:49:e5:dc:b9:fe:
e3:78:3b:b1:6e:57:3c:ee:ba:fa:9d:b2:57:19:cd:f1:de:2a:
c6:0d:fb:d8:17:42:8a:58:03:ea:e3:69:92:76:5c:02:15:67:
70:47:7e:77:41:14:f8:18:80:f2:cf:fa:91:33:ef:a5:06:d8:
e3:a9:70:1d:07:bb:c1:b8:65:0e:b7:b3:2c:b4:c0:72:12:f6:
8e:e7:9b:b8:a6:5b:8b:f5:7e:78:88:8b:5b:65:02:9b:ae:9c:
91:13:e7:ad:68:19:18:a7:f1:58:17:d6:d3:bb:a5:92:8e:32:
4f:89:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:53:36 2026 by rpki-client