Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: z+ed8J4Hs70GoZVUNO8vkcLBdctFzRShc9c9sj0+HzU=
Subject key identifier: 87:57:6A:82:FE:2C:D0:B3:2F:B0:D7:A3:44:BB:87:8A:4E:B8:2C:D4
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019EC224B92E35BDB5E16E47B585C2E341B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 18FF
Signing time: Sat 13 Jun 2026 18:00:47 +0000
Manifest this update: Sat 13 Jun 2026 18:00:47 +0000
Manifest next update: Sun 14 Jun 2026 18:00:47 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: glItHD94zAXYazZank0XX2lhaCXFjuYcU3iPnca4Wk8=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:b9:2e:35:bd:b5:e1:6e:47:b5:85:c2:e3:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jun 13 18:00:47 2026 GMT
Not After : Jun 14 18:00:47 2026 GMT
Subject: CN=87576a82fe2cd0b32fb0d7a344bb878a4eb82cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:8d:d9:c7:17:43:44:c4:d9:17:4f:56:6a:
1b:bd:b1:32:4c:a7:26:39:ee:dc:32:d7:90:09:cc:
7a:ca:34:d7:ba:53:0f:4e:35:9f:58:24:52:e5:3f:
60:d4:fa:38:2e:c0:f5:03:45:06:98:b9:4d:80:12:
a1:05:4e:58:b6:a8:82:c7:3a:57:4d:e4:4b:21:52:
2b:b0:f7:37:75:90:79:cd:0e:2b:e1:22:54:f2:62:
4c:13:fc:6b:ef:f1:de:60:e1:9e:f0:ee:53:a5:74:
bd:39:12:cf:3e:f1:1b:9b:3e:ac:dc:a3:db:b7:9b:
91:3c:8a:f8:29:5e:71:32:fa:31:09:09:99:42:47:
eb:5d:e2:dc:de:98:9f:72:8b:6d:dd:e5:97:b2:7c:
65:8b:30:08:ac:ff:a9:7c:c3:ad:a8:d8:b8:11:89:
b6:b8:4c:38:5c:60:fe:3c:6e:eb:8a:d7:db:5c:ee:
4d:ca:ec:14:0d:42:e8:ab:6e:fc:9b:50:54:80:2c:
a1:72:73:9d:6e:4d:f2:31:51:42:94:a9:3d:82:a6:
1f:34:05:87:96:cd:c3:40:b4:2c:f0:8a:f7:fe:7b:
03:2f:1a:82:35:d5:1a:d0:16:0e:61:a6:83:fb:c1:
ad:ad:21:ae:00:33:d2:e3:c0:61:69:70:08:5e:5a:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:6A:82:FE:2C:D0:B3:2F:B0:D7:A3:44:BB:87:8A:4E:B8:2C:D4
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8b:42:30:42:be:f6:05:05:8f:25:aa:57:0b:4a:eb:1c:6c:
d2:79:40:a1:ef:1c:c7:68:cb:dc:46:65:5e:62:12:4a:57:6b:
e2:1f:95:2c:59:b4:eb:29:41:37:af:dd:6c:1b:4f:0d:b6:17:
68:0f:1a:83:8b:65:bc:8d:09:a8:6f:a3:ee:d6:48:8d:db:7c:
d1:35:9a:04:30:cf:f1:88:3a:59:d9:ec:22:44:ce:07:a8:67:
d6:72:8b:1f:11:7a:18:ce:3f:5c:1d:f5:a0:52:a9:34:35:7e:
93:71:e0:98:5e:b7:8b:39:96:b5:6e:5f:65:b3:58:d3:c8:0f:
d1:3d:eb:a1:62:d8:e8:8a:5e:63:4e:76:0b:99:65:12:d5:9d:
2a:a1:48:2f:4b:12:05:99:a5:00:48:fa:a0:db:d7:e7:70:c8:
3a:c7:99:50:15:ea:d2:78:6d:f6:f6:f7:17:3c:a3:b3:bf:1d:
3d:25:a6:30:7c:fc:0a:ea:d7:97:3c:b5:9f:9e:70:a0:90:81:
2b:3f:c6:0d:a2:36:bc:55:51:b9:b4:b4:71:9c:54:75:92:18:
ee:92:ca:8d:44:e5:32:c9:c6:1f:c3:e9:09:0c:c4:03:91:f4:
9a:da:cc:f1:e0:39:3f:2a:12:8a:af:71:be:63:b6:28:af:4a:
b9:eb:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:13 2026 by rpki-client