Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: S6zKvqRPg+yud6cAdD102uNIiPkGkZ8KLWeWjmldbdA=
Subject key identifier: 7C:17:47:EC:34:27:3C:02:03:6D:D6:E0:B0:57:CB:75:27:37:02:88
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019E9C2978A1E702F469A394F1099BB7EC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 194A
Signing time: Sat 06 Jun 2026 09:00:24 +0000
Manifest this update: Sat 06 Jun 2026 09:00:24 +0000
Manifest next update: Sun 07 Jun 2026 09:00:24 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: I0hvDzA9awbM8YD9asbXep83wkjusP+gXnIqIaWzbTY=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:78:a1:e7:02:f4:69:a3:94:f1:09:9b:b7:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jun 6 09:00:24 2026 GMT
Not After : Jun 7 09:00:24 2026 GMT
Subject: CN=7c1747ec34273c02036dd6e0b057cb7527370288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:a3:ce:c3:73:24:76:8a:ad:95:79:ad:16:
39:e3:ab:cf:a5:63:d7:6b:88:2c:bb:55:e1:47:a0:
07:3b:e5:67:3e:4c:a8:94:87:b5:63:71:03:7a:d5:
54:7c:ce:ad:6c:ca:56:e9:16:88:99:ee:dd:d8:fa:
8a:47:dc:af:7d:61:46:e8:62:61:08:52:38:1a:74:
13:66:19:71:55:62:03:05:db:38:3b:5a:38:0a:dd:
5a:c7:9a:d8:99:c4:c5:64:35:90:fe:b5:65:86:6a:
b1:37:d4:6f:51:ba:e5:10:f2:75:70:5c:ef:ca:3b:
c9:13:df:d5:30:9f:3c:a3:d6:a0:4a:04:b2:8d:29:
7f:27:e8:c5:1b:89:59:13:bd:b8:8c:51:c7:15:11:
92:3d:7a:d6:a5:54:eb:6c:b8:2a:30:5b:be:d7:bd:
83:61:71:fa:11:c2:26:8c:87:ec:96:1c:aa:43:f4:
32:2e:b1:51:8b:fd:3d:1e:0b:fb:db:c5:f2:08:32:
4b:ec:d1:c3:f7:9f:d2:ab:eb:8b:1b:1b:49:5d:4b:
a1:1b:79:3e:77:9e:df:04:71:77:71:ab:05:e2:93:
4b:5a:dd:f4:e1:63:e4:2c:f8:dc:bf:b5:6c:c5:9f:
4b:09:f2:ce:15:e2:04:46:22:b5:e8:a4:a0:f3:27:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:47:EC:34:27:3C:02:03:6D:D6:E0:B0:57:CB:75:27:37:02:88
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:14:30:0d:c3:22:82:47:82:85:ce:e6:8d:95:b9:97:87:c3:
6a:d9:b3:1d:b6:69:22:43:f0:c3:46:33:fe:b7:1e:6d:73:39:
26:c8:b1:bb:b6:51:fe:87:97:5c:c4:97:fd:5b:96:cb:c4:29:
90:7e:b1:76:3a:1c:5e:ee:e7:b8:e4:e5:ba:f1:ea:ae:51:27:
e0:57:3a:b4:c9:ff:7f:2d:cb:f1:ab:dd:f0:fc:7b:e9:61:b8:
4d:75:8f:27:72:92:dc:56:8c:4d:cf:23:80:da:12:73:da:90:
64:4f:a3:c8:91:c9:e9:d9:a1:9a:cc:ec:97:7f:2f:15:08:44:
b3:cf:83:80:0e:eb:31:bb:4f:22:97:33:10:9b:f6:f3:a6:d9:
82:e1:e9:4e:7e:25:c5:bb:18:c5:f8:85:d5:1a:b0:3d:e2:28:
5f:f8:a6:2e:da:ce:43:ef:82:8c:30:6f:ce:4c:6b:60:e4:b8:
15:ff:05:44:c8:d1:04:b7:93:d1:3d:5f:39:cb:a3:98:48:83:
4b:c4:cd:26:8f:d5:b3:96:87:65:2b:e8:18:ed:d7:b0:40:f4:
f5:f0:c6:31:0d:a4:8c:7e:18:65:8d:b1:e5:c6:c4:89:58:93:
c4:29:f1:ca:d7:59:4a:01:7b:f9:00:9a:56:ee:fd:36:e7:53:
ce:dd:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:46:04 2026 by rpki-client