Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: 8eB/NyzCVfHoAmg5JkOqFGsKSDrWP4RyWKVyyUH7kvQ=
Subject key identifier: F5:B9:98:DD:F0:BA:83:F8:EA:FF:74:06:9E:90:29:CB:F7:3C:91:0D
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019EFC8368DE5AFF8E283C60D066BC079B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 02F0
Signing time: Thu 25 Jun 2026 02:02:10 +0000
Manifest this update: Thu 25 Jun 2026 02:02:10 +0000
Manifest next update: Fri 26 Jun 2026 02:02:10 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: PDhvY6KSK88NboQ6j5OdX+7IaCU/hpSNqVrK8NGtYaw=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:68:de:5a:ff:8e:28:3c:60:d0:66:bc:07:9b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Jun 25 02:02:10 2026 GMT
Not After : Jun 26 02:02:10 2026 GMT
Subject: CN=f5b998ddf0ba83f8eaff74069e9029cbf73c910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:c4:d6:b6:26:11:ef:63:12:9b:30:f3:75:
66:8e:3d:1f:45:a6:06:04:28:65:1d:e0:db:c6:a4:
b3:cc:46:73:e1:1f:bf:a9:0e:85:dd:d3:4b:43:0f:
d7:f1:d8:6a:c3:cd:d2:56:77:13:6f:a8:83:2f:8a:
f7:f6:c2:ea:1f:e9:5c:ef:40:a4:7e:09:84:04:75:
85:98:f1:65:f2:dd:e6:de:20:10:7f:03:6b:17:40:
a3:07:a8:26:5b:51:f5:68:67:5b:5b:e4:35:a0:f1:
a9:b4:1a:48:83:59:35:2f:69:73:a9:fe:4d:19:cd:
76:73:7b:0e:6f:70:56:b3:e5:4c:74:1b:8d:8d:f0:
d7:ea:4f:5f:b9:6b:9c:97:dd:01:9c:88:34:8d:c0:
ef:19:cc:ff:1d:9c:04:62:1f:2c:5d:fb:1b:a3:40:
7a:04:4e:b5:f3:f4:4d:45:bd:d2:15:df:a1:ec:4c:
85:a3:f7:39:28:41:b7:e6:58:9f:dc:1e:71:9e:a4:
dc:be:18:92:7f:9e:03:ff:cf:9e:26:11:8d:fa:37:
f2:3d:9b:db:d2:ff:4e:a3:48:84:99:ad:6a:d4:8e:
db:88:d2:40:d0:24:43:c3:6e:35:df:99:d6:76:94:
4b:7c:ad:91:de:08:63:b8:55:31:54:dd:30:40:2f:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:98:DD:F0:BA:83:F8:EA:FF:74:06:9E:90:29:CB:F7:3C:91:0D
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a1:bb:c7:de:8a:1c:26:a1:c6:fa:da:c3:cf:e3:a0:4f:8d:
a9:05:ec:86:6d:61:8f:f9:95:1d:52:54:ab:6b:99:56:cb:83:
3f:61:b5:62:cd:d7:92:8c:50:0c:d7:e0:d7:02:12:52:19:38:
be:f3:a2:69:62:7c:4b:2d:42:85:ca:27:85:ec:36:d2:84:80:
06:f8:13:1c:57:0e:4c:1e:8e:cf:98:e4:ce:b2:70:66:e1:9d:
cd:84:24:12:e5:7b:e9:92:be:a3:3e:1c:72:cd:18:fa:e8:a3:
ed:52:b1:dd:61:99:87:8e:f8:3a:d2:ec:08:e5:25:e7:5e:64:
0c:91:c2:c2:4c:37:c2:89:fd:98:0e:c3:50:88:8b:e1:36:df:
d1:16:24:06:22:05:db:5a:0d:bc:42:c9:ff:80:23:49:03:17:
a8:09:93:92:e5:a3:20:56:6f:d7:66:ad:07:40:06:e9:50:ca:
2f:c4:8a:03:02:dd:4d:c8:a3:7b:a3:33:bf:3e:58:99:d8:0d:
6e:50:7f:8e:1b:3b:19:4e:9b:47:77:ae:ed:95:f9:dc:0c:6c:
a7:25:30:01:7e:04:d0:79:2f:59:bc:58:84:5d:23:c5:bd:9e:
57:37:b4:85:4e:32:8f:9d:28:6d:d8:2c:03:90:d2:59:5a:36:
4e:f3:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:21 2026 by rpki-client