Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: NU+bXR2xt+aeF428QX7SK4z2jHEfo3Jo+YNcZ2huVOg=
Subject key identifier: F3:2F:8B:7A:04:66:93:2F:40:F5:74:96:92:94:69:97:3F:FF:05:71
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019EE1AFB2F437A5074E59B142316F8F9D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0A2D
Signing time: Fri 19 Jun 2026 21:00:48 +0000
Manifest this update: Fri 19 Jun 2026 21:00:48 +0000
Manifest next update: Sat 20 Jun 2026 21:00:48 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: fp8FN/RxxUy8gHabnZImuWlg8bbfYvB62oGyqhM+eLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:af:b2:f4:37:a5:07:4e:59:b1:42:31:6f:8f:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jun 19 21:00:48 2026 GMT
Not After : Jun 20 21:00:48 2026 GMT
Subject: CN=f32f8b7a0466932f40f57496929469973fff0571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:5a:f2:45:02:4d:70:23:e7:e7:51:fd:e0:
7e:a3:02:b6:ba:c5:d9:2f:0a:2e:2a:72:53:67:f4:
78:67:49:96:74:f6:fe:4f:90:0b:43:5d:24:4c:5e:
93:ae:57:bb:aa:5c:f4:de:43:50:17:9b:72:c5:48:
9d:df:91:c0:53:8a:f3:69:a2:7a:bb:20:04:69:21:
70:3e:1b:09:24:2f:fb:1e:32:b1:e2:40:48:e8:4e:
47:ad:89:f7:bc:17:a9:46:3f:e3:17:66:77:11:16:
df:90:bd:60:8d:f3:f4:35:4e:2e:ca:4f:e8:af:c7:
13:66:de:c1:27:5b:0b:a0:6e:9a:e9:26:31:cf:58:
ba:8e:e9:51:41:8f:1b:cd:0c:72:1d:e4:93:07:37:
bb:68:f3:da:b1:34:af:0c:2d:cb:f0:2e:be:68:72:
67:22:08:13:3b:c3:95:99:74:33:18:fd:3f:7a:df:
14:30:3c:53:ba:c5:b4:2e:92:3c:f4:51:71:e0:e8:
0c:5d:89:29:9e:f5:1e:03:8e:fa:c7:05:7c:b1:be:
f6:9b:e8:dd:86:76:99:1e:4e:c7:e5:a7:6a:28:22:
f5:21:1b:09:f4:bd:f2:81:cf:ea:0d:f4:70:39:d4:
7f:69:8b:62:cd:b9:c5:a1:e0:24:bb:a3:f3:4f:57:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:8B:7A:04:66:93:2F:40:F5:74:96:92:94:69:97:3F:FF:05:71
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:30:bb:b3:5b:8b:03:a8:2e:85:6a:39:13:4c:ff:d5:8f:f6:
df:2e:7e:ea:3d:3e:07:82:b3:f6:0b:b9:0e:7a:f8:90:d4:18:
bb:8c:ad:82:9a:84:65:fd:08:dd:f3:d5:a3:dd:6d:c6:4f:b1:
42:9c:f7:2a:db:47:fb:54:a2:e7:dd:e0:58:66:63:b6:4d:70:
6e:54:07:f9:a4:e6:14:a6:85:97:0a:01:4b:3f:8a:30:30:2f:
e1:de:ab:67:72:a5:c7:2f:04:58:ce:04:54:1c:e9:46:9c:fb:
75:f2:06:6a:34:4f:96:10:1c:a3:cb:e7:39:94:27:a0:f6:ec:
95:e2:b6:c5:a9:02:b9:7f:26:22:72:de:f4:be:ba:eb:df:a0:
b9:c8:6b:52:13:84:b1:9c:a9:20:ba:39:d7:fa:59:63:2a:bb:
f1:ae:bc:59:02:02:c5:bd:76:90:95:fd:f7:c7:56:03:9d:b5:
6e:56:fa:1b:64:49:1b:3a:0a:8f:cb:2a:76:54:a4:d2:6e:cb:
7b:26:fb:39:33:2c:95:90:aa:db:47:13:30:97:0c:71:f4:6d:
7a:d1:9d:f4:15:b8:5b:79:2b:d0:02:24:26:25:c5:20:23:89:
5e:d8:c3:5c:9b:46:3c:e2:ef:7f:67:31:9b:6d:23:98:9a:e5:
fe:10:d8:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7hr7L0N6UHTlmxQjFvj50nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjYwNjE5MjEwMDQ4WhcNMjYwNjIwMjEwMDQ4WjAzMTEwLwYDVQQD
EyhmMzJmOGI3YTA0NjY5MzJmNDBmNTc0OTY5Mjk0Njk5NzNmZmYwNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAVa8kUCTXAj5+dR/eB+owK2usXZ
LwouKnJTZ/R4Z0mWdPb+T5ALQ10kTF6Trle7qlz03kNQF5tyxUid35HAU4rzaaJ6
uyAEaSFwPhsJJC/7HjKx4kBI6E5HrYn3vBepRj/jF2Z3ERbfkL1gjfP0NU4uyk/o
r8cTZt7BJ1sLoG6a6SYxz1i6julRQY8bzQxyHeSTBze7aPPasTSvDC3L8C6+aHJn
IggTO8OVmXQzGP0/et8UMDxTusW0LpI89FFx4OgMXYkpnvUeA476xwV8sb72m+jd
hnaZHk7H5adqKCL1IRsJ9L3ygc/qDfRwOdR/aYtizbnFoeAku6PzT1ewswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMvi3oEZpMvQPV0lpKUaZc//wVxMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDC7s1uL
A6guhWo5E0z/1Y/23y5+6j0+B4Kz9gu5Dnr4kNQYu4ytgpqEZf0I3fPVo91txk+x
Qpz3KttH+1Si593gWGZjtk1wblQH+aTmFKaFlwoBSz+KMDAv4d6rZ3Klxy8EWM4E
VBzpRpz7dfIGajRPlhAco8vnOZQnoPbsleK2xakCuX8mInLe9L6669+guchrUhOE
sZypILo51/pZYyq78a68WQICxb12kJX998dWA521blb6G2RJGzoKj8sqdlSk0m7L
eyb7OTMslZCq20cTMJcMcfRtetGd9BW4W3kr0AIkJiXFICOJXtjDXJtGPOLvf2cx
m20jmJrl/hDYEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:26:27 2026 by rpki-client