Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: RN3pKjMX2N+D9vNfUBWbKtlGVYM5F+JlY+jmRgDDJKw=
Subject key identifier: BD:A3:CC:76:39:80:2B:2F:AF:02:A2:ED:4B:B4:5A:3B:1E:7B:1C:6A
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019EBF5AF360295807B9ADAAD1D8DF24B8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 05:01:09 +0000
Manifest this update: Sat 13 Jun 2026 05:01:09 +0000
Manifest next update: Sun 14 Jun 2026 05:01:09 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: sg8gI+q3w1ocO1kQoXoGiDtD1giEUQdQWSUCTPVQlf0=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f3:60:29:58:07:b9:ad:aa:d1:d8:df:24:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jun 13 05:01:09 2026 GMT
Not After : Jun 14 05:01:09 2026 GMT
Subject: CN=bda3cc7639802b2faf02a2ed4bb45a3b1e7b1c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:25:4f:53:02:28:ae:b9:dc:3c:cc:d0:cd:
05:36:29:f7:44:3e:3a:44:69:37:3a:03:65:15:b8:
b0:8c:ee:76:a0:e7:e2:64:a9:54:6a:3f:20:b1:72:
89:76:97:82:0e:d8:ca:75:3b:0b:87:2d:51:75:3f:
20:bf:82:65:e4:36:6d:e5:72:80:fc:5d:ce:df:77:
a4:c5:fd:0c:1c:fd:08:81:7c:75:87:f6:5d:a9:46:
18:48:d0:2f:db:7e:6d:ed:79:93:67:ad:06:79:a4:
73:48:75:d2:0c:10:fa:d1:8f:27:e6:81:6d:27:44:
ca:e8:21:c6:56:8b:15:76:14:6f:1c:fc:9b:08:16:
f5:95:9f:a6:8c:4c:13:2b:ce:09:1b:9d:7f:09:d2:
f9:08:e8:97:25:68:c9:1b:79:3d:8f:1e:bb:a0:08:
02:17:6d:83:a1:7d:b9:22:17:b0:a7:5b:7b:4f:e7:
cd:71:ee:72:a5:31:47:b0:6a:08:ab:57:c4:84:43:
6f:00:3d:f8:d8:e9:ea:04:ea:7e:c9:a8:a1:90:b7:
0d:28:66:14:42:68:d9:66:44:f5:f5:eb:29:64:1d:
7a:1f:a3:de:26:16:e2:31:b3:91:cd:ee:5b:91:71:
6e:8d:16:ce:48:97:de:ff:42:a2:b7:d7:7f:7c:99:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:CC:76:39:80:2B:2F:AF:02:A2:ED:4B:B4:5A:3B:1E:7B:1C:6A
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:a1:5a:66:08:d7:7a:92:d4:a2:ee:d4:23:29:7d:35:03:
9d:4d:62:4a:10:02:e9:a5:69:4b:44:dd:18:c3:e6:19:7f:97:
d6:b2:f2:c4:f8:03:f1:99:a8:92:f1:1f:97:af:05:a7:63:94:
7f:f0:8e:34:de:6e:dd:c8:1f:59:4c:f3:48:f7:0e:40:52:02:
fc:e6:18:d2:81:57:d4:76:31:c2:72:41:c9:d9:3c:dd:e4:6e:
5c:4b:40:3e:10:f2:e3:e0:d1:d4:58:d9:e7:74:a4:be:e3:39:
67:9b:28:81:2c:4f:a5:a6:b9:7d:39:20:ea:8b:16:39:fd:bc:
67:b9:97:6d:34:7d:43:76:7a:9f:28:97:7f:63:bc:ed:cc:92:
ce:89:e5:17:80:a5:22:d0:b9:a7:dc:c1:22:82:f2:e5:77:9c:
4b:0c:fb:1f:c3:ec:7e:af:5e:8f:8c:e9:42:c3:61:10:00:62:
da:3d:7c:b5:22:4c:0c:48:2c:a5:20:46:e3:7c:cc:0a:6f:89:
41:71:51:57:8a:d7:6d:b1:8c:b9:86:99:17:f3:6c:25:98:94:
52:32:a0:90:17:2e:9b:ed:22:53:e6:e2:54:4d:29:40:50:2a:
03:9d:96:34:35:48:d4:26:74:3e:05:d7:36:27:ae:d1:f1:42:
3c:a4:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:23 2026 by rpki-client