Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: jkqAxeSBd29ue4Dx1mIjfvZOUbEGxb4nbwS3l6B6eOU=
Subject key identifier: 4A:6C:89:5F:E1:B7:B9:3B:F5:68:93:AB:FE:D4:ED:0A:CD:0C:40:0C
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019EB6FC1F5C19C3DBE654711083936B72A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0204
Signing time: Thu 11 Jun 2026 14:00:36 +0000
Manifest this update: Thu 11 Jun 2026 14:00:36 +0000
Manifest next update: Fri 12 Jun 2026 14:00:36 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: Q4iSIbo5xMAZ1uhYnU5Hw4Gu87pRk31fLNhqGY9QaH0=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:1f:5c:19:c3:db:e6:54:71:10:83:93:6b:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Jun 11 14:00:36 2026 GMT
Not After : Jun 12 14:00:36 2026 GMT
Subject: CN=4a6c895fe1b7b93bf56893abfed4ed0acd0c400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:77:a3:96:b8:82:f0:97:b3:7f:68:19:73:
d1:a9:cb:df:51:0d:80:cf:6b:c3:e3:99:0f:a3:a2:
dd:9a:e0:ef:60:68:c5:63:cf:15:ae:ab:44:e0:cb:
a5:32:ac:66:fc:0e:d9:d7:b2:76:e8:ab:08:cc:c3:
68:d0:3f:4c:60:48:91:97:a7:63:9a:b4:70:11:a7:
1c:28:b3:97:21:1c:40:95:2f:ff:1f:2e:bc:5d:29:
2c:55:08:20:76:0d:bc:db:b2:b8:74:63:0d:c8:aa:
61:32:11:94:c8:68:3f:0c:6d:d9:d2:37:b6:a3:87:
ca:89:cc:d1:b6:5c:54:b0:55:ee:d0:4b:d6:33:e1:
a9:b7:39:04:4e:19:d2:0d:05:bd:b7:ee:48:5e:90:
d0:12:59:1c:eb:48:25:ce:fe:92:cd:f4:57:3a:75:
45:f9:fc:0b:ef:74:27:40:f5:81:2d:a4:c8:85:94:
23:9e:5b:0b:1d:b7:b9:a2:e9:8f:71:08:78:cf:da:
13:d5:68:3c:91:ec:8c:03:0f:7f:8f:fc:f8:f5:94:
ef:81:ba:b4:83:42:90:95:f8:48:b2:98:e7:6a:2d:
6b:db:24:b4:d8:6d:0d:21:f7:f8:cb:9f:a8:75:fb:
a3:d7:fd:79:1c:f0:b4:1f:fb:56:d6:d6:a8:9b:7e:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:89:5F:E1:B7:B9:3B:F5:68:93:AB:FE:D4:ED:0A:CD:0C:40:0C
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:09:0e:44:60:45:5b:f7:1f:60:4c:19:77:21:9e:6c:8e:a7:
c4:fd:ac:1b:12:11:ae:65:5c:a9:b4:1f:59:73:a3:5a:de:c9:
63:4b:5e:3e:9b:e2:6e:92:95:c1:c4:27:14:bb:7b:ff:64:39:
3d:29:0a:5c:53:c6:76:5c:3e:8e:dd:0b:e3:75:e9:a2:15:2e:
46:5a:90:9a:d7:14:b7:ba:6f:70:ca:91:72:60:ac:e4:5e:7e:
91:af:22:94:af:b0:3f:42:69:4d:ff:92:23:4d:3a:e6:6a:1d:
9f:40:ae:02:22:15:28:52:81:bd:b6:87:53:2b:b8:9e:82:b1:
25:78:ca:34:ad:e3:29:a2:7c:8a:f0:32:9d:ff:cf:b3:48:a4:
06:b7:16:77:3b:24:fd:be:3a:85:8c:d4:9c:a4:ae:8a:f4:96:
57:24:e1:4b:25:57:fc:ac:97:87:56:4a:63:e5:f6:86:71:ef:
b0:a6:2e:6c:b8:50:f6:ad:7f:36:24:8d:bd:43:94:88:25:4e:
40:27:cd:43:c8:15:01:08:0d:c9:73:6d:aa:76:54:cb:1f:e5:
3a:01:a3:1a:58:90:4c:ba:07:20:21:5d:fc:11:ec:b1:d9:f0:
a4:19:c2:01:e5:07:a9:39:6f:55:33:1a:0a:b1:de:e1:65:d4:
5c:d9:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:43 2026 by rpki-client