Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: Y9RWIrNbeZcaSNguSG7kFrzXq1boa9zxl4V9u7BCzFQ=
Subject key identifier: F8:4E:E5:B8:79:26:34:8A:F7:1C:61:1D:26:0C:50:50:8B:3E:B6:70
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019EB733526EC892EB05671DC7438FA8B409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 15:00:54 +0000
Manifest this update: Thu 11 Jun 2026 15:00:54 +0000
Manifest next update: Fri 12 Jun 2026 15:00:54 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: yGLhxOEgBKO9Q2qlFkTAj9X7dWVyGfgLrhgqOGpYCbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:52:6e:c8:92:eb:05:67:1d:c7:43:8f:a8:b4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Jun 11 15:00:54 2026 GMT
Not After : Jun 12 15:00:54 2026 GMT
Subject: CN=f84ee5b87926348af71c611d260c50508b3eb670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:31:fa:f6:a8:98:3c:bc:29:63:56:4c:41:
2d:a7:ba:54:5e:1f:a1:72:14:bb:7e:00:a4:39:0f:
23:d5:a1:36:b3:56:cb:36:2f:23:ff:1b:fe:80:e7:
c0:25:b6:d4:3d:13:05:60:b2:d3:06:0a:21:7c:ef:
f5:31:75:63:d3:c0:ab:82:e6:a9:b4:56:d9:23:d7:
22:f9:80:c8:6b:61:7b:cd:08:b3:07:40:98:0b:f6:
39:ca:78:3e:29:e4:14:ed:59:3b:3c:d7:48:6a:8e:
f1:a6:b7:66:6d:20:1f:6c:cd:7e:91:1c:85:ee:b1:
c3:65:89:54:61:d3:cc:d7:8e:e8:84:be:42:bc:12:
5b:0b:70:29:f4:1f:3f:0f:bb:e6:24:65:0d:6c:1e:
68:7e:dc:20:f0:52:d6:9f:6c:30:04:d1:f2:6f:a4:
c9:76:92:40:fa:be:6b:73:f1:1f:4f:d8:80:43:06:
d1:b3:19:06:2a:63:d8:21:ac:ef:b9:71:a9:19:5d:
8e:23:7d:22:6a:fc:1a:02:27:4d:fd:61:15:5a:6c:
01:f8:4b:79:cd:f1:30:4a:81:b0:b5:bc:f0:e9:92:
f5:69:58:9f:84:2a:ce:4c:91:d2:04:42:b6:30:9b:
bf:9a:9e:99:50:02:0b:0f:41:74:e2:c1:4e:25:7c:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:E5:B8:79:26:34:8A:F7:1C:61:1D:26:0C:50:50:8B:3E:B6:70
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:96:25:9b:c9:65:9a:b1:26:61:06:dc:76:d1:2e:76:8f:1f:
f5:46:dc:0f:d9:e3:03:9a:db:99:99:07:6f:d5:f1:49:f5:18:
28:91:4f:38:b9:98:b3:c4:37:01:fb:57:50:37:98:61:12:c7:
31:3c:19:3b:af:03:f5:17:00:a3:c7:3d:5d:3c:50:67:9e:8b:
f8:81:1b:44:f2:f7:be:78:80:ec:10:e1:c2:f9:57:9f:37:2d:
be:8b:9a:06:92:de:3e:33:d7:09:98:b6:3a:e4:a7:08:01:4c:
e6:52:86:92:c6:b7:9d:1b:a9:7d:25:f3:49:86:f3:b5:f7:a6:
a1:b4:49:f2:85:de:d7:83:76:7a:fa:30:79:cb:52:11:d1:cf:
9a:55:f1:ef:dd:5d:7b:45:f7:77:6c:70:4c:15:40:9b:16:a7:
60:5f:24:e9:4c:c9:04:18:2e:60:87:dd:03:9e:2f:d3:4c:c4:
26:e6:0d:a1:4e:6c:b3:1c:12:de:26:fe:1e:be:4e:7b:c6:ae:
fe:96:d3:f2:71:4b:3b:2f:c1:54:1b:4e:85:38:2e:cf:18:60:
3d:cc:f6:d9:41:3b:45:0a:07:c8:da:eb:04:f4:cf:8e:c1:3f:
f4:31:94:98:02:e8:e8:b7:d8:c7:ab:21:35:96:76:06:3a:95:
91:4b:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:24 2026 by rpki-client