Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: tUgOCPCrxraZi8ctHAj0h3LH2qVAZwt8UYDFx19HmjI=
Subject key identifier: 6C:50:C0:84:5D:34:B6:05:FD:40:5F:D3:45:2B:F7:D6:6F:BB:B4:94
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019F1A563527E3B71248EA7E09DF9F97F7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 101E
Signing time: Tue 30 Jun 2026 21:01:24 +0000
Manifest this update: Tue 30 Jun 2026 21:01:24 +0000
Manifest next update: Wed 01 Jul 2026 21:01:24 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: DyldTiTzfWbg9xCmkZi+eGjuOgv6uAf34DCBDGHE/80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:35:27:e3:b7:12:48:ea:7e:09:df:9f:97:f7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jun 30 21:01:24 2026 GMT
Not After : Jul 1 21:01:24 2026 GMT
Subject: CN=6c50c0845d34b605fd405fd3452bf7d66fbbb494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:cd:b6:de:93:62:34:32:de:51:74:67:0f:
66:34:1b:ba:7c:8d:0c:57:0d:2f:be:09:ac:9a:29:
9b:99:c3:c2:b4:14:8b:7f:de:2a:8e:e1:86:5b:19:
22:b2:0b:2c:34:89:04:2d:c2:99:c9:86:9b:1b:25:
45:b3:a5:4e:07:9b:c3:b0:4e:e0:fd:01:68:b8:49:
ec:f2:0f:4b:71:fe:df:e7:d5:bc:44:07:c3:4e:cc:
13:81:60:d6:88:f2:14:85:e5:0b:fd:77:95:43:c6:
65:af:30:99:30:ec:1c:17:2a:02:eb:10:b9:b6:96:
9d:76:05:c2:b7:80:4b:2c:32:98:b4:f7:b0:e4:65:
77:f4:b6:5a:b6:57:50:19:26:27:31:9d:b8:25:8f:
27:1e:67:09:e7:a5:95:7e:f0:68:22:c8:74:ae:15:
47:4c:7d:68:30:23:e0:40:33:11:a7:a9:d5:74:21:
a0:be:43:29:6a:a3:d6:21:2b:ff:c0:35:2b:db:ee:
ef:ca:3c:b8:ac:6a:1b:1a:6c:8c:42:9a:5d:18:da:
b0:6b:ec:ed:db:97:a4:b7:e4:b9:91:5e:83:76:df:
f9:a5:a8:25:c8:d8:bc:87:33:15:3f:db:06:1a:cd:
df:fa:5f:99:d4:31:2a:4b:91:e2:9f:77:c9:11:e2:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:C0:84:5D:34:B6:05:FD:40:5F:D3:45:2B:F7:D6:6F:BB:B4:94
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:33:18:83:23:92:3c:5d:ee:de:ad:5e:ea:c8:c4:dc:ee:ab:
c4:a9:51:1c:3e:d3:5c:f0:e2:ce:3b:9d:6a:79:d3:02:be:25:
69:de:1c:ed:3b:18:80:5b:0d:69:1e:7c:d7:ca:d6:54:51:25:
6c:53:fb:4a:f8:da:be:27:f2:f1:44:60:d9:b1:fc:63:4c:86:
4c:fb:ce:8e:be:de:92:c2:d0:cd:f2:10:fa:02:ad:e3:d6:6b:
89:bd:14:a6:48:fb:22:f4:d6:e0:68:28:ef:2c:3a:9e:cc:f9:
07:8d:6e:7b:84:66:16:ca:eb:40:84:80:1c:5a:79:6c:81:62:
2a:8c:25:3d:28:c8:0b:2f:ae:e6:5a:eb:a0:a0:26:61:f6:e5:
f2:ec:2e:4f:aa:13:88:44:1a:54:e6:db:08:1f:60:a1:84:b8:
e5:36:6f:39:40:e0:19:42:75:ae:ae:47:71:9b:44:5e:9c:77:
66:1e:19:d3:5b:34:8c:87:bd:69:bd:fa:65:f9:47:ff:89:23:
f0:31:49:23:55:38:2d:8e:d3:83:6e:be:81:9a:b8:43:cf:b6:
db:cb:35:da:82:21:a0:fa:d1:5e:3c:94:cd:9c:ff:14:ff:7a:
3e:8a:82:f6:02:87:78:fb:94:d4:f8:67:89:6e:97:56:d9:09:
67:15:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:42 2026 by rpki-client