Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
File: QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json)
Hash identifier: aXpJkRy3cKu0eVHJIbG3wvCtGhJc8ZVfK44JU4xY758=
Subject key identifier: 23:62:4B:26:46:F8:31:2C:73:E0:85:2C:BF:92:34:8F:FC:B0:A4:AB
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 019EB9223C67F8B8D107AA5466252EE507FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
Manifest number: 08
Signing time: Fri 12 Jun 2026 00:01:28 +0000
Manifest this update: Fri 12 Jun 2026 00:01:28 +0000
Manifest next update: Sat 13 Jun 2026 00:01:28 +0000
Files and hashes: 1: 49AtseKwgF1TYNJ7YUIzOjEVKQQ.roa (hash: oDbQjDzQ2W8I/Ksa6ElvgTUMBjB1apXXhJi+nN+/QlQ=)
2: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=)
3: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: m89W3GoFAeVFc+BTSJg6DyEBL7oyEJk6CPBEob0p5+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:3c:67:f8:b8:d1:07:aa:54:66:25:2e:e5:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Jun 12 00:01:28 2026 GMT
Not After : Jun 13 00:01:28 2026 GMT
Subject: CN=23624b2646f8312c73e0852cbf92348ffcb0a4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:6c:c8:56:d9:be:5c:b2:a4:fd:3d:a6:8b:
06:44:39:3f:e3:17:04:4e:b0:0c:8e:c8:75:bc:ca:
04:9d:d0:fb:58:5b:0c:7b:4a:09:42:ed:94:48:d8:
7a:e7:d2:b5:72:36:ff:32:40:b0:b0:e8:b9:16:a2:
a7:21:28:be:f8:51:fc:08:4d:cb:0c:ad:91:ca:e4:
db:70:7a:6a:34:5a:37:60:be:db:fd:1e:e2:d5:81:
1f:fd:91:f0:2e:5a:11:b2:66:ba:53:33:4c:d5:92:
05:2f:c1:34:f5:44:94:63:24:e2:5a:a7:bc:3f:50:
97:60:11:47:aa:9d:86:c8:db:d0:f3:b9:72:54:ba:
7e:19:bd:62:f4:58:3b:77:ca:15:d1:41:8b:ef:36:
9e:f6:11:2d:cf:ba:87:9d:e5:ed:bd:d9:f7:70:b1:
e5:05:16:ef:76:90:99:c7:df:03:d3:f9:5a:69:42:
fd:b0:ee:bf:7e:f0:e2:08:54:0e:f7:3e:6b:b8:9f:
69:3c:5c:49:c8:74:d5:bf:ba:ed:2a:0a:5a:bf:78:
cf:29:e7:a0:08:73:ae:3c:1d:8e:5f:f4:63:3e:26:
bf:18:2c:02:cc:94:24:95:e2:fd:98:ff:7c:6c:36:
1b:ea:ea:b4:9d:44:f3:fb:11:3b:17:9b:ed:23:28:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:62:4B:26:46:F8:31:2C:73:E0:85:2C:BF:92:34:8F:FC:B0:A4:AB
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:44:37:a3:b7:56:2e:8d:1c:11:43:3e:f1:61:a7:69:ec:
25:b0:fb:51:0b:6a:3b:e5:05:ca:26:0c:56:77:2d:3c:8c:89:
5b:e6:2c:35:a4:ad:c2:3a:50:18:9b:0f:69:9e:7e:61:55:bb:
4a:1b:43:98:3c:5c:72:76:e1:0e:d1:d5:64:38:ed:f5:2c:11:
e2:b9:40:a8:3d:f3:7c:e4:5b:ce:5d:a8:ea:b3:0c:ee:fd:3b:
a5:a8:cc:00:7e:d8:27:1f:cd:4c:4e:cd:69:55:9e:4a:1c:3a:
e2:c5:06:1d:de:38:2a:33:eb:2d:c4:3f:05:85:ae:09:43:3c:
81:5e:40:83:1b:51:6e:4c:fa:94:21:e7:12:8c:c3:fb:39:5d:
67:36:49:1a:9e:95:9b:96:18:af:e0:67:3e:3c:15:8e:bc:55:
62:e4:65:94:4e:46:05:42:ed:43:a7:9f:0f:ba:cc:2e:5c:27:
ca:3b:27:54:80:79:70:b8:4e:3e:f3:d1:00:5d:68:cf:28:09:
aa:03:a1:3a:2b:66:ba:16:0d:26:14:cc:94:2e:21:0e:ef:94:
d3:9a:8b:11:ff:52:5f:4e:53:ed:e0:2b:9c:54:e5:5f:92:37:
88:f6:7d:50:f3:32:11:49:58:47:be:5b:9b:1b:fa:1f:96:fb:
a2:51:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:22 2026 by rpki-client