Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: gJ1zZbEbrG9cYlVRG4n6N3uTwoLS19BuCvUNzJhBAII=
Subject key identifier: BC:68:D5:21:70:C9:44:A7:DE:F2:B9:71:22:37:80:2C:96:04:28:D4
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 019EB6C5A7469ADE56C8781B01FC2EC397BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 040A
Signing time: Thu 11 Jun 2026 13:01:07 +0000
Manifest this update: Thu 11 Jun 2026 13:01:07 +0000
Manifest next update: Fri 12 Jun 2026 13:01:07 +0000
Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: 3EmmJIZ0q79Cs/bUmKj1mLE+LOrzjDoLFHnvk7U7REo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:a7:46:9a:de:56:c8:78:1b:01:fc:2e:c3:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Jun 11 13:01:07 2026 GMT
Not After : Jun 12 13:01:07 2026 GMT
Subject: CN=bc68d52170c944a7def2b9712237802c960428d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:ec:16:7e:f9:07:3a:c9:1b:89:f7:7e:70:
90:4a:9e:4a:31:97:69:b2:1f:f4:fa:37:a8:0c:8b:
12:32:99:21:54:5d:49:0a:03:bb:51:8c:4e:b5:06:
02:36:d4:d0:b0:c1:da:8b:83:77:5f:f6:59:7a:bf:
20:ea:ee:85:09:87:00:2d:24:4f:58:55:79:23:99:
f8:fd:92:ac:49:54:fd:ba:1b:59:22:82:d6:aa:82:
23:f0:ac:75:e8:90:50:00:05:83:72:fc:50:4d:b2:
fd:81:9c:6c:2f:ce:4c:53:cd:c2:2d:47:10:0f:5a:
f5:90:c6:a7:ab:f8:9d:2f:6c:f9:38:ce:6a:d0:ff:
06:61:74:c6:80:91:5f:72:c0:6c:f2:99:76:98:13:
39:0a:54:c1:70:39:b8:5a:de:e4:22:51:90:e9:54:
00:a8:26:55:bd:5f:af:14:1f:b7:71:84:52:b5:67:
95:2f:70:a6:8c:0e:16:b7:da:7e:65:a1:bf:8f:1a:
2a:b2:52:50:b8:67:73:9c:c7:c8:a5:b3:e2:95:c0:
8c:d1:bc:6d:a2:93:fb:fb:c4:48:b7:a9:22:dc:0d:
fe:a0:87:c1:9d:bb:70:cb:d0:1b:8a:1f:7d:2a:c2:
32:c4:a8:b5:3e:ed:60:29:1e:5b:10:9e:b7:93:31:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:D5:21:70:C9:44:A7:DE:F2:B9:71:22:37:80:2C:96:04:28:D4
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:62:42:65:33:ba:e4:c5:31:7b:54:c1:6f:af:57:d9:45:b6:
a3:9e:e4:c4:dd:e8:9f:a4:ea:28:2e:62:ce:01:bb:32:ce:38:
55:e1:32:5d:2e:bc:c0:d8:58:d1:2f:ef:f0:5d:c8:1f:9e:85:
10:10:6f:f9:50:83:6a:37:b1:45:f6:01:95:0f:4f:42:10:ba:
10:54:6b:43:b2:74:42:86:44:2f:7e:19:3d:e2:b6:08:db:fa:
62:5f:fa:7a:ad:4a:55:e6:f0:73:40:cb:22:50:77:c9:43:45:
eb:02:20:e3:0b:42:dd:12:0e:8e:cd:d3:22:ed:e9:ad:2f:6a:
35:e6:0b:65:a8:c8:bb:cc:f7:e7:22:17:60:08:8d:2b:e1:ed:
b1:b9:9c:e2:26:06:64:34:7e:7c:cd:94:8e:a2:7a:76:a8:03:
f4:34:ea:b3:64:ed:02:26:d6:f0:56:6f:4d:d4:9c:c2:f7:d6:
92:a1:bf:b9:7e:64:eb:ab:eb:ce:72:1b:73:00:9f:1e:f5:63:
5f:61:ec:ad:7c:81:ba:64:c1:21:87:31:8f:78:94:3e:18:61:
7f:83:47:42:4e:75:aa:74:1e:78:41:31:90:51:ae:b4:f9:78:
74:34:0e:15:ef:9f:5d:40:75:7d:47:80:5c:a9:05:cc:f7:81:
38:3f:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:13 2026 by rpki-client