Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: LtT5Cw9T9RaXWzl44SJeDPEtIz/Qdh6LioGP71IUMDg=
Subject key identifier: 6C:E0:DA:51:11:47:3D:8B:2C:7A:2C:7A:9F:09:78:35:BB:4D:53:8A
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019EB5B2F6F0B95CFEA59FD724F5EB9F996B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0D86
Signing time: Thu 11 Jun 2026 08:01:05 +0000
Manifest this update: Thu 11 Jun 2026 08:01:05 +0000
Manifest next update: Fri 12 Jun 2026 08:01:05 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: BeZstuttOH7k9nIVHHlIu1yRXdGpvaoTmTI9wiH3v1g=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:f6:f0:b9:5c:fe:a5:9f:d7:24:f5:eb:9f:99:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jun 11 08:01:05 2026 GMT
Not After : Jun 12 08:01:05 2026 GMT
Subject: CN=6ce0da5111473d8b2c7a2c7a9f097835bb4d538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:46:d2:0a:ff:02:0b:b0:e5:22:33:07:a9:
04:32:d6:c8:2f:06:40:78:00:c0:1d:27:3f:46:89:
a4:dc:ed:1f:0a:f0:25:2e:1e:69:6d:cd:20:87:94:
57:99:ce:97:ff:5d:72:41:2e:45:f9:2c:72:6c:10:
77:ea:ee:a8:73:c1:27:db:7b:3e:ad:86:1f:e0:63:
39:1b:5f:de:4f:2b:0d:a3:90:97:6a:81:50:8b:3f:
8d:7a:15:79:14:d7:d6:52:b1:48:12:92:2d:e4:3b:
06:83:aa:16:3b:75:64:41:45:68:c1:56:8a:e3:1a:
0e:fb:87:68:3c:40:56:11:83:bb:bc:ba:27:9b:c2:
2f:4f:b3:25:2d:ab:84:ca:19:46:02:92:ae:f8:9d:
e6:d3:17:38:41:db:95:0c:0a:3d:3d:04:1d:05:81:
d5:81:a3:1b:bf:67:cd:04:ab:17:b8:45:0b:39:05:
4c:53:6d:69:ed:66:2f:97:88:16:65:7d:ed:4d:65:
4b:01:43:bd:b1:be:ad:e5:35:22:3d:a1:92:9b:eb:
03:71:c1:dc:0d:f4:9e:72:6b:99:e0:00:e6:97:e6:
29:e6:2d:65:31:b2:76:12:6a:62:10:b8:6f:ca:ff:
9d:b1:fa:ac:22:e4:27:f4:90:dd:c9:e4:df:78:4a:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:DA:51:11:47:3D:8B:2C:7A:2C:7A:9F:09:78:35:BB:4D:53:8A
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:1d:bd:b7:2e:4a:65:51:53:e2:53:66:25:5e:81:00:b6:
ed:1e:a0:5e:59:d9:91:6c:cd:fe:30:20:43:7a:18:34:36:7f:
ea:6c:a6:a3:58:9b:4d:57:48:09:b4:df:a3:ef:95:71:4e:b1:
ca:77:ea:84:0a:11:fe:4f:d6:64:25:35:00:3f:42:ae:63:43:
56:7c:0b:89:08:c0:94:4c:d9:24:4a:64:0f:48:af:29:0d:51:
33:db:74:2a:32:ee:72:f2:a5:3b:7c:cd:97:9f:94:47:ea:a2:
da:97:8c:a9:ce:5f:22:f1:02:0e:33:9f:9c:b9:3d:d1:05:b1:
f9:c4:fb:fd:2d:fc:b2:33:33:a1:f2:de:53:2b:e4:66:44:dd:
a7:6a:3a:15:7b:ba:30:fa:bd:4a:a8:f8:a2:f9:ac:76:88:69:
57:1a:a1:77:fd:d0:d3:46:24:da:ca:5d:64:09:c5:f4:e9:22:
4a:ba:e6:1b:0d:26:59:31:b5:7d:ea:3c:e6:cf:f4:dc:67:c7:
47:41:a3:7d:8a:f9:25:fa:fa:eb:98:51:fd:cd:6e:0c:99:ef:
15:c7:f4:14:69:c1:c3:d5:c3:74:08:40:95:a1:aa:fa:10:e9:
dd:07:c4:2c:ca:80:68:0e:05:03:7d:14:c8:f4:d2:2b:a8:42:
b9:89:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:22:17 2026 by rpki-client