Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: oe06rRT1ER6dj2FBXlGUnqLEztpSSwTLHDc8HsXo814=
Subject key identifier: 28:F3:1B:4C:93:B6:1A:E4:5E:F6:7A:82:4D:D1:EB:53:41:FE:24:88
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019EC25C6E2BC20FB1CF6DA6C17928C920AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 19:01:37 +0000
Manifest this update: Sat 13 Jun 2026 19:01:37 +0000
Manifest next update: Sun 14 Jun 2026 19:01:37 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: iWt3UltUd3LKKR+36M4uSz06u/DJ7FwBApxfRZ5XWfQ=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:6e:2b:c2:0f:b1:cf:6d:a6:c1:79:28:c9:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jun 13 19:01:37 2026 GMT
Not After : Jun 14 19:01:37 2026 GMT
Subject: CN=28f31b4c93b61ae45ef67a824dd1eb5341fe2488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:55:b8:93:93:80:6c:8e:f7:12:a1:9a:d4:
8f:09:76:99:36:81:a2:7d:fc:8e:cf:44:79:7a:eb:
f5:40:24:d5:b0:ae:3b:3e:99:61:69:a6:c7:b6:10:
f5:e6:ba:31:43:d2:98:c1:0f:4d:c9:a2:86:e7:ed:
a5:8a:b7:2f:7e:23:73:b2:ea:d2:78:d4:ac:73:42:
86:f7:5a:0e:7e:e4:45:80:46:ce:4d:62:98:07:b5:
a8:fb:74:bb:08:dc:f9:38:5f:56:71:ba:25:a0:3c:
c4:54:7e:86:d4:83:09:f6:bd:d9:9b:92:8e:7b:1a:
fc:82:03:56:5b:59:07:ea:9f:85:f1:fe:d4:24:ef:
90:f5:86:1d:79:33:0a:8a:89:46:89:6b:06:f7:08:
bc:14:dd:41:60:04:c9:08:37:15:27:a3:98:e2:2c:
d7:8f:ee:b9:05:23:c3:19:23:ab:61:bc:20:e3:62:
d9:a3:ea:97:90:66:88:86:f7:69:8d:6e:a5:f3:45:
42:96:6f:cc:86:c1:63:e2:27:b1:e4:5d:07:65:b7:
bc:c8:98:e0:8e:cf:26:e4:29:50:c3:19:f0:20:66:
43:0d:35:37:7c:89:64:56:e2:3d:6c:ec:ba:61:c4:
2b:fe:fa:66:90:a8:2b:79:47:23:2f:40:a9:e0:11:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:1B:4C:93:B6:1A:E4:5E:F6:7A:82:4D:D1:EB:53:41:FE:24:88
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a1:d3:c5:d8:10:3d:4d:5c:00:d0:0c:8e:db:20:21:57:2f:
e8:bb:fd:b6:54:87:e8:0c:5f:e4:62:d5:f4:c8:ef:b6:55:31:
9f:f2:16:63:86:ac:55:e9:18:6f:43:ea:ba:5d:e1:22:46:c6:
62:e3:39:a5:73:fb:c2:f0:42:0e:d6:6f:49:4f:bf:d0:b8:ad:
7c:ae:42:5f:e8:ec:1d:52:27:cb:eb:5c:af:4e:02:ef:82:96:
c8:2a:b7:05:c1:72:be:df:0f:90:c0:93:72:d8:52:c4:7e:2b:
80:f4:d0:db:1a:a8:ea:eb:07:82:cb:63:e2:71:5e:71:26:48:
99:fc:89:3c:3e:91:4f:de:d0:95:80:fd:2a:23:29:7b:27:d2:
cc:4b:90:b8:95:a6:38:e2:55:eb:51:79:e0:73:3e:bd:85:06:
28:1a:c1:ab:1f:be:ea:ea:5a:9d:c9:9f:62:44:2b:d5:95:81:
13:01:8f:2a:f9:2c:03:60:cf:55:7b:99:91:b3:5b:27:5c:1a:
ad:14:2c:e3:d3:41:cc:3f:fe:f8:d6:3a:c1:af:60:3c:7a:46:
4d:5c:8a:3f:ca:94:f8:de:7e:17:07:0f:d6:75:1c:2d:3a:2d:
88:a2:5f:28:c3:66:fe:be:0d:c7:4a:19:82:ff:26:73:cc:6f:
50:11:4e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CXG4rwg+xz22mwXkoySCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjYwNjEzMTkwMTM3WhcNMjYwNjE0MTkwMTM3WjAzMTEwLwYDVQQD
EygyOGYzMWI0YzkzYjYxYWU0NWVmNjdhODI0ZGQxZWI1MzQxZmUyNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGxVuJOTgGyO9xKhmtSPCXaZNoGi
ffyOz0R5euv1QCTVsK47PplhaabHthD15roxQ9KYwQ9NyaKG5+2lircvfiNzsurS
eNSsc0KG91oOfuRFgEbOTWKYB7Wo+3S7CNz5OF9WcboloDzEVH6G1IMJ9r3Zm5KO
exr8ggNWW1kH6p+F8f7UJO+Q9YYdeTMKiolGiWsG9wi8FN1BYATJCDcVJ6OY4izX
j+65BSPDGSOrYbwg42LZo+qXkGaIhvdpjW6l80VClm/MhsFj4iex5F0HZbe8yJjg
js8m5ClQwxnwIGZDDTU3fIlkVuI9bOy6YcQr/vpmkKgreUcjL0Cp4BEiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjzG0yTthrkXvZ6gk3R61NB/iSIMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKHTxdgQ
PU1cANAMjtsgIVcv6Lv9tlSH6Axf5GLV9MjvtlUxn/IWY4asVekYb0Pqul3hIkbG
YuM5pXP7wvBCDtZvSU+/0LitfK5CX+jsHVIny+tcr04C74KWyCq3BcFyvt8PkMCT
cthSxH4rgPTQ2xqo6usHgstj4nFecSZImfyJPD6RT97QlYD9KiMpeyfSzEuQuJWm
OOJV61F54HM+vYUGKBrBqx++6upancmfYkQr1ZWBEwGPKvksA2DPVXuZkbNbJ1wa
rRQs49NBzD/++NY6wa9gPHpGTVyKP8qU+N5+FwcP1nUcLTotiKJfKMNm/r4Nx0oZ
gv8mc8xvUBFOsA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:23 2026 by rpki-client