Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: yzNHCQOu5avDm3bamDrQQLkGHvdw6I5VxzP1KjRCSDs=
Subject key identifier: C0:17:F4:1E:08:0D:95:FF:A9:B4:D7:9C:3F:B2:E8:87:09:71:41:01
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019F11530B58117D767414071AE5B5234A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 03:01:22 +0000
Manifest this update: Mon 29 Jun 2026 03:01:22 +0000
Manifest next update: Tue 30 Jun 2026 03:01:22 +0000
Files and hashes: 1: IPShWGUXlOQysmlHN59ggxp79no.roa (hash: h66cPY9mKXXd6y+2DIeK9BUX2MMAhCZtqkFLMLMhdLk=)
2: UUFYP2GnG27gknclmWjbFXee-5c.asa (hash: vtuGXz4SCbN+csRPRpu2i0eRfkh5mJ/Z4XlVSXzxMy4=)
3: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: Lq3JFt9cGX+LLyLE7rR4At/TfwjrcPu3h1WK4/SYoOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:0b:58:11:7d:76:74:14:07:1a:e5:b5:23:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jun 29 03:01:22 2026 GMT
Not After : Jun 30 03:01:22 2026 GMT
Subject: CN=c017f41e080d95ffa9b4d79c3fb2e88709714101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cd:28:19:90:fc:f6:64:ab:c2:99:b1:69:ce:
7c:c9:94:98:11:4d:f0:fb:60:00:cd:ee:3f:ca:3e:
72:92:1a:ba:1c:19:20:36:b2:d1:61:aa:0b:f3:ba:
f6:12:52:93:83:68:93:e5:f3:7f:67:e9:95:c7:5f:
b1:47:72:b0:fe:61:2e:4d:b5:82:0e:db:0e:a1:6f:
e5:cb:91:6c:4c:d9:ce:e6:ec:12:aa:0f:6c:d0:67:
d1:f0:0d:4b:ba:ec:62:c6:ff:78:12:c1:cf:c6:20:
68:be:e8:67:56:9e:7b:cb:43:1b:4b:d9:a2:0e:30:
c1:12:a1:8f:f4:42:4e:c1:46:95:ad:02:2e:e9:e3:
34:a5:fb:6b:91:cb:d0:16:f5:46:18:77:1f:d6:3d:
89:31:81:1f:08:b8:f8:9b:6c:91:c1:94:8c:af:86:
4f:d9:94:d8:32:16:a3:b0:52:97:81:17:bf:fd:3b:
21:1e:25:fa:e7:60:3a:6a:bf:a5:ab:7e:88:f3:de:
7d:17:8c:b9:70:c3:f1:5a:ea:cc:9b:3e:54:b7:ae:
f2:40:4d:3d:93:1d:01:41:27:6e:29:c2:96:82:c2:
b0:f9:72:25:2b:b7:63:6d:b2:28:43:83:37:29:b8:
a3:da:95:3c:9d:62:e8:1c:c9:5e:4d:82:09:26:e5:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:F4:1E:08:0D:95:FF:A9:B4:D7:9C:3F:B2:E8:87:09:71:41:01
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f5:a6:38:a7:af:b0:b3:ac:9b:0d:ca:af:3b:46:59:e3:de:
77:2b:84:b2:37:cd:49:f3:fb:2e:ae:9c:46:fe:82:c0:d3:8f:
c6:90:51:73:cd:54:91:d1:14:2d:03:9f:9a:8f:1a:49:cb:58:
b9:9f:a7:59:ad:11:be:99:42:bd:dd:85:dc:be:21:32:3b:62:
b4:f2:12:55:dc:34:c6:b9:11:4d:bf:47:f3:2b:6c:43:57:1a:
aa:99:ab:72:5c:78:43:ab:2a:98:46:6e:a2:2f:d1:9f:13:50:
ed:8d:1d:6a:05:2a:97:eb:87:2b:0e:1f:43:bd:49:f1:06:b1:
ac:7e:c2:00:96:91:89:2d:ff:74:73:49:9d:89:6e:42:17:2b:
1b:5c:c0:41:d6:fd:28:98:b4:ac:20:0e:36:6a:fc:3e:89:12:
04:fa:c7:e5:b5:9a:5f:a2:43:17:bb:98:f7:cc:86:af:aa:4d:
71:a2:ce:78:22:1d:ba:33:ce:5a:6d:7d:1f:3b:59:8b:01:68:
40:e4:e8:8a:c2:a9:89:8d:46:58:3b:04:18:3b:2f:10:10:70:
d8:21:fc:09:65:0a:5b:ca:de:06:86:cc:a4:b4:b3:f6:4c:db:
f5:ca:f8:9c:d6:48:ea:b9:62:bc:80:b7:e7:8d:50:d3:c9:15:
c0:ae:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:10 2026 by rpki-client