
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: jf8O3fEVXL6SVBfMBXELaeFDOoegoUj8AbEDkvPqEsM=
Subject key identifier: 23:3F:62:FE:33:D0:36:16:B5:7A:BF:C5:64:6C:F1:3C:30:FD:EF:64
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 019F94DBBADFE72AF2E17F0F13CD2CD430FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 0A54
Signing time: Fri 24 Jul 2026 16:00:55 +0000
Manifest this update: Fri 24 Jul 2026 16:00:55 +0000
Manifest next update: Sat 25 Jul 2026 16:00:55 +0000
Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: qqi87tsqvQFRu0NqQMXv6+mkgLFIUsLTrTUyIW+RxYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ba:df:e7:2a:f2:e1:7f:0f:13:cd:2c:d4:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Jul 24 16:00:55 2026 GMT
Not After : Jul 25 16:00:55 2026 GMT
Subject: CN=233f62fe33d03616b57abfc5646cf13c30fdef64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:16:39:d7:99:bb:9d:52:07:11:da:17:86:
46:bd:0b:2e:8d:73:1d:0e:89:c0:6c:36:72:42:cc:
c8:10:57:1e:cb:c5:19:86:18:99:6d:cf:9a:2a:c4:
30:a9:88:e4:04:49:97:36:e0:62:3f:0f:37:be:98:
da:85:1a:92:b3:91:07:14:2a:25:d8:a4:b7:6a:4f:
2b:58:7e:6d:11:8e:54:5d:82:8f:79:d5:f9:69:e3:
8c:e9:b8:d1:6a:85:25:b2:58:e9:af:d2:5c:79:74:
80:b2:0e:d3:c8:45:8f:d3:d3:6c:0f:99:7e:fe:84:
db:07:67:fb:da:df:90:c4:98:de:3d:2f:f9:82:bd:
e7:20:bc:89:3b:e6:04:77:0d:b4:b7:48:cb:8c:e2:
75:e6:4c:3d:98:6a:5d:03:37:76:16:28:50:91:7e:
62:11:60:04:8c:e5:c5:72:83:cb:9f:4e:8b:17:bd:
0f:42:76:71:c7:d7:5a:39:ba:18:08:cf:a4:3a:71:
70:80:68:08:e7:9f:34:12:de:24:7a:6e:53:62:9e:
72:b0:44:e7:51:1c:a3:75:e9:06:ff:cf:91:39:15:
8c:ee:bd:68:4b:58:a9:31:7c:ea:21:3c:5c:a6:54:
33:54:c5:a9:2e:cb:fa:85:d8:4a:c1:2d:ae:03:a7:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:62:FE:33:D0:36:16:B5:7A:BF:C5:64:6C:F1:3C:30:FD:EF:64
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5c:ee:bf:02:67:5c:f6:94:96:5f:cc:68:fc:fc:bf:c7:32:
72:71:cd:2d:e4:65:43:d2:74:65:10:47:65:2b:48:00:10:2c:
c4:72:c2:46:36:7b:f9:95:00:40:c7:6d:c5:c9:a4:45:e9:6e:
b7:18:b8:39:73:64:55:62:df:4d:bc:50:84:67:c9:71:99:cc:
51:f0:32:1a:ff:48:a2:34:3b:93:d0:c9:06:25:7d:86:db:88:
b9:a7:bb:8c:71:25:57:6c:98:e4:d5:70:04:db:9f:c2:6b:4f:
20:8d:e3:66:27:90:11:bc:6e:38:ef:c0:33:ea:4c:bc:60:fc:
88:93:d2:31:33:6c:55:ac:c0:aa:4a:82:52:08:05:c7:7c:2f:
70:33:1d:4a:42:00:ea:3c:d8:c9:85:dd:08:e0:89:d1:ac:91:
22:94:a6:32:c4:9d:3f:4c:cd:8d:61:dc:60:9f:b2:f9:b9:85:
f8:c9:2a:1a:c6:69:5d:89:83:46:7b:38:2b:99:86:bd:a5:18:
07:d8:f5:fd:13:0c:61:74:56:7b:29:27:f2:4b:e8:98:84:e1:
e6:b9:74:ef:ff:b7:5c:af:6f:57:d7:32:5c:67:fe:61:2a:83:
d6:59:84:07:a4:9a:18:3a:44:46:c5:db:d1:12:bf:62:bb:30:
72:cc:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:58 2026 by rpki-client