
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
File: qI2nDOKKiJJzJtuLYipmwp-sUjw.mft (raw, json)
Hash identifier: zb7x6uH/i7tCWbHFBVwTgEVjTBnL33b6bNrVBMHHq4I=
Subject key identifier: CE:5F:CE:FD:7C:CC:77:9D:EE:53:AA:6F:19:03:4D:48:22:9F:D6:E7
Authority key identifier: A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
Certificate issuer: /CN=a88da70ce28a88927326db8b622a66c29fac523c
Certificate serial: 019EB6C5B89E875D376B6A9E4C36E8FD549B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
Manifest number: 50
Signing time: Thu 11 Jun 2026 13:01:11 +0000
Manifest this update: Thu 11 Jun 2026 13:01:11 +0000
Manifest next update: Fri 12 Jun 2026 13:01:11 +0000
Files and hashes: 1: Agdkr7pow-AzSTl7UhxIjtbuif8.roa (hash: XwEU2q/BPbK/EoWe/rSsRkIbMCNqHp48BI3sTIZFcTs=)
2: qI2nDOKKiJJzJtuLYipmwp-sUjw.crl (hash: GS2eCDYJhg2EzEXV9wCK9UwosC/lSfuMqlzwDUz+CfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:b8:9e:87:5d:37:6b:6a:9e:4c:36:e8:fd:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88da70ce28a88927326db8b622a66c29fac523c
Validity
Not Before: Jun 11 13:01:11 2026 GMT
Not After : Jun 12 13:01:11 2026 GMT
Subject: CN=ce5fcefd7ccc779dee53aa6f19034d48229fd6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:76:ca:dc:4b:21:ff:5e:34:86:fe:13:05:
3a:8e:bc:64:df:c4:85:1e:07:0c:75:a6:e7:be:2e:
e2:4b:1c:6f:73:51:99:c9:08:92:f3:2a:25:49:b8:
55:b3:ff:f2:de:91:34:2b:f9:3a:f3:4d:42:2b:9a:
ef:7d:7f:a7:f3:e3:43:68:f4:48:d2:8a:1d:cc:a8:
d7:fb:29:cb:84:18:ea:c2:11:4f:99:32:78:0f:0b:
7e:8b:5d:59:0d:a5:ee:da:bb:f6:e9:fe:2e:12:88:
d9:32:77:a7:5e:b6:12:3f:f4:11:66:65:61:c3:57:
6e:78:c7:a0:e4:64:17:a3:a7:ac:43:39:6f:0b:dd:
8c:c2:88:df:01:2f:e4:28:11:92:bb:1a:3b:9f:34:
9b:cf:b0:62:da:0e:dd:e6:3f:cf:bd:2c:3c:9d:b7:
43:0e:03:94:9b:b5:82:10:44:34:60:f6:ab:24:ee:
e9:69:00:bb:46:75:8a:b6:79:3e:d2:20:68:ac:f4:
6a:b3:45:b7:99:52:d1:02:02:c3:14:5e:93:cd:51:
19:05:10:3d:d9:e9:56:76:7d:da:74:33:74:1b:f8:
58:bd:cc:dc:34:e6:15:3d:ca:2b:f2:79:3e:45:a9:
cc:cb:e7:00:ec:aa:b5:d8:36:b0:cb:2a:68:25:57:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:CE:FD:7C:CC:77:9D:EE:53:AA:6F:19:03:4D:48:22:9F:D6:E7
X509v3 Authority Key Identifier:
keyid:A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:93:2e:7e:bc:8e:e2:bf:a8:71:ad:b0:fe:d9:ea:c5:6f:b0:
1f:e9:64:54:33:19:72:ac:07:cd:20:7b:fe:0d:f2:59:31:52:
47:50:bd:77:8f:dc:73:c8:0f:87:51:53:70:ba:d6:d6:0c:ff:
33:50:74:7d:14:66:98:86:9d:6b:13:f4:f0:f0:26:e3:ad:88:
e0:07:63:23:f1:c8:eb:4f:d4:c5:d6:69:a4:d7:ef:80:d0:6f:
ab:25:25:39:ff:ef:b4:80:34:89:86:9b:da:51:c1:7f:b1:a4:
28:02:af:01:c1:50:d4:0d:e6:76:65:3c:78:d3:86:95:76:d5:
44:2d:ed:ad:09:19:5a:4c:cb:80:d9:01:00:d3:b3:28:b3:98:
05:37:cc:cb:2f:6f:0b:f3:cc:74:6b:58:2f:0b:96:fb:c8:fd:
af:1a:69:fe:2a:aa:61:ba:fe:6a:4e:b7:24:19:2d:0e:68:b8:
22:5d:2b:02:dc:51:ef:43:a2:62:39:e7:f8:ef:da:ad:37:45:
7b:ce:cf:d5:bb:7f:fd:04:5f:f1:e8:13:f5:db:f6:ab:0f:05:
b2:a4:0d:e0:b9:67:6c:4a:e4:d0:f8:ed:07:a5:33:a5:55:5a:
15:bf:1f:8f:28:55:86:ad:c0:d9:9e:78:4c:19:be:d1:81:f9:
6e:e2:9e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xbieh103a2qeTDbo/VSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGRhNzBjZTI4YTg4OTI3MzI2ZGI4YjYyMmE2NmMyOWZh
YzUyM2MwHhcNMjYwNjExMTMwMTExWhcNMjYwNjEyMTMwMTExWjAzMTEwLwYDVQQD
EyhjZTVmY2VmZDdjY2M3NzlkZWU1M2FhNmYxOTAzNGQ0ODIyOWZkNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNN2ytxLIf9eNIb+EwU6jrxk38SF
HgcMdabnvi7iSxxvc1GZyQiS8yolSbhVs//y3pE0K/k6801CK5rvfX+n8+NDaPRI
0oodzKjX+ynLhBjqwhFPmTJ4Dwt+i11ZDaXu2rv26f4uEojZMnenXrYSP/QRZmVh
w1dueMeg5GQXo6esQzlvC92MwojfAS/kKBGSuxo7nzSbz7Bi2g7d5j/PvSw8nbdD
DgOUm7WCEEQ0YParJO7paQC7RnWKtnk+0iBorPRqs0W3mVLRAgLDFF6TzVEZBRA9
2elWdn3adDN0G/hYvczcNOYVPcor8nk+RanMy+cA7Kq12DawyypoJVeT7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5fzv18zHed7lOqbxkDTUgin9bnMB8GA1UdIwQY
MBaAFKiNpwziioiScybbi2IqZsKfrFI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUkybkRPS0tpSkp6SnR1TFlpcG13cC1zVWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY4NzktNjdjMC00Nzg1LWI4NzAt
YWUzYjllMzRkMjdmLzEvcUkybkRPS0tpSkp6SnR1TFlpcG13cC1zVWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYWY4NzktNjdjMC00Nzg1LWI4NzAtYWUzYjllMzRkMjdm
LzEvcUkybkRPS0tpSkp6SnR1TFlpcG13cC1zVWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJMufryO
4r+oca2w/tnqxW+wH+lkVDMZcqwHzSB7/g3yWTFSR1C9d4/cc8gPh1FTcLrW1gz/
M1B0fRRmmIadaxP08PAm462I4AdjI/HI60/UxdZppNfvgNBvqyUlOf/vtIA0iYab
2lHBf7GkKAKvAcFQ1A3mdmU8eNOGlXbVRC3trQkZWkzLgNkBANOzKLOYBTfMyy9v
C/PMdGtYLwuW+8j9rxpp/iqqYbr+ak63JBktDmi4Il0rAtxR70OiYjnn+O/arTdF
e87P1bt//QRf8egT9dv2qw8FsqQN4LlnbErk0PjtB6UzpVVaFb8fjyhVhq3A2Z54
TBm+0YH5buKesQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 15:39:02 2026 by rpki-client