Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: BaqEsNgf4cD9mJja3X5WmnDUC0eaaIEmbqY+/cN+gxw=
Subject key identifier: 60:78:66:7B:7F:14:3B:E6:26:03:7E:8D:7F:3E:39:EC:6A:7F:53:60
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019EBF916E7F7308C694DF7DBCE503AED60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:39 +0000
Manifest this update: Sat 13 Jun 2026 06:00:39 +0000
Manifest next update: Sun 14 Jun 2026 06:00:39 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: hfc+a8HVMFO70h3Pcm94azCI1XCF20S3HjgbddOwPd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:6e:7f:73:08:c6:94:df:7d:bc:e5:03:ae:d6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Jun 13 06:00:39 2026 GMT
Not After : Jun 14 06:00:39 2026 GMT
Subject: CN=6078667b7f143be626037e8d7f3e39ec6a7f5360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:44:4a:28:2a:15:c3:08:69:26:de:63:28:
3f:ef:9d:b4:9b:ba:43:e3:5f:03:9b:2a:95:94:23:
34:e6:98:05:25:c4:09:c2:aa:ee:99:71:96:40:b0:
98:98:e0:c9:6c:86:4c:ab:1c:ff:c1:39:db:fc:c3:
58:de:8f:b4:9c:d5:d1:31:1d:ac:74:60:e6:f0:c0:
c7:b9:34:a3:8f:a7:01:a4:cf:5a:b4:a8:fe:cc:58:
1c:78:4f:4b:6e:a1:09:1e:20:91:5b:5e:8e:2d:86:
fd:9f:ac:99:3c:46:2d:52:5c:79:47:b9:73:c6:29:
5c:82:b9:76:b8:f2:98:56:dd:9e:0b:af:cc:d4:87:
7b:f5:12:96:bd:50:98:bc:19:c4:a5:b1:50:34:37:
44:48:db:98:fc:f6:1a:3a:34:06:48:fe:cc:bb:90:
51:15:39:10:f4:96:49:b6:e6:8b:91:53:25:f4:de:
93:39:34:06:02:aa:81:c4:ce:c8:bc:be:bf:7f:fb:
e2:c0:99:49:a3:9a:6e:89:87:a4:a3:14:cc:47:9d:
89:2b:4c:0d:d0:c1:90:47:bc:f3:fe:09:4e:f2:f0:
7f:3e:05:64:76:65:1c:c7:81:55:b3:d7:61:ef:f4:
8f:e9:ba:1c:42:9d:12:ea:8f:a0:d5:85:35:f5:f3:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:78:66:7B:7F:14:3B:E6:26:03:7E:8D:7F:3E:39:EC:6A:7F:53:60
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2d:dd:54:fb:66:cf:95:61:10:49:be:54:6c:71:0d:73:ab:
83:af:06:76:87:0d:f2:75:23:c7:e9:b9:c6:5a:4a:e2:9d:42:
ba:f5:1a:d2:b8:3a:cf:4a:ae:9c:21:c7:c1:69:a7:ff:5b:c7:
cd:d8:27:11:c0:47:de:ad:ce:b8:39:e7:88:82:49:41:89:13:
8a:dd:80:f7:2d:c8:91:ff:15:ed:9c:4e:21:91:7a:9d:ce:8a:
07:98:5a:b8:4f:f5:e9:23:25:2b:32:27:21:62:0c:9b:fa:d2:
f6:80:49:87:12:4e:48:70:85:9d:57:56:6c:36:97:6c:59:39:
f1:75:84:02:58:af:3d:29:98:9b:5e:f2:54:d4:f7:d3:d0:ad:
ca:84:c8:2a:bd:db:b2:32:b1:39:4e:e9:50:e2:9e:32:8c:12:
ad:cf:a4:b7:06:ba:86:d8:16:30:fc:ee:a0:da:5e:70:68:73:
6c:e8:27:9a:67:3c:bd:ff:51:1a:f6:ca:17:30:36:37:14:79:
21:af:c9:d2:27:35:64:53:df:4b:64:c8:e5:aa:d9:93:51:b9:
d2:12:87:c3:d1:c5:a1:cf:99:89:47:91:fc:a5:6c:ea:96:88:
e1:c4:3c:6d:1a:94:e7:dc:4e:bd:e5:25:a3:b1:a0:eb:fb:25:
42:d0:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:02 2026 by rpki-client