Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: qQkaMki0l/3nRp0bm0iy6X2afSJ5H6ZxWhswL3o+Vf0=
Subject key identifier: 58:27:98:8F:9F:D6:68:91:03:63:F4:D0:4C:FA:C0:F3:ED:2B:9B:DB
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019EC3006BDB6B0A303DE9782A5416C2DFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 22:00:45 +0000
Manifest this update: Sat 13 Jun 2026 22:00:45 +0000
Manifest next update: Sun 14 Jun 2026 22:00:45 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: tpjXfyiITcCLhW4fbnew7AjGzf0fQ8kCS/eH76lKd4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:6b:db:6b:0a:30:3d:e9:78:2a:54:16:c2:df:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Jun 13 22:00:45 2026 GMT
Not After : Jun 14 22:00:45 2026 GMT
Subject: CN=5827988f9fd668910363f4d04cfac0f3ed2b9bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:c9:05:6f:d5:5d:d0:b4:03:43:8d:84:8e:
5e:9f:bb:83:c2:f4:ac:43:5d:b8:43:e2:a6:c9:9a:
a3:6b:66:a0:96:c1:58:ca:7c:61:22:3e:bc:79:7f:
dd:83:50:27:bf:15:dd:37:32:9f:a6:c7:66:59:99:
b5:ba:4a:f9:ca:41:f9:22:0e:17:96:2c:28:ab:73:
7c:31:b3:c9:92:83:62:49:b6:13:35:9d:04:1c:89:
fe:eb:a0:f0:9d:ea:85:45:8a:72:0f:8b:ea:f3:c6:
91:84:01:0a:e1:79:6e:7f:a8:76:4f:05:09:85:55:
6c:a1:38:90:eb:b4:ad:6d:22:ce:d2:69:6d:6f:c7:
13:c0:e8:bd:19:bf:b7:cb:bc:88:df:22:c3:37:70:
c6:54:c7:f9:68:56:65:ef:4d:7c:3a:e1:f1:f3:c4:
04:95:c4:1d:bc:fa:b2:ec:2b:c1:d6:ab:67:b2:8f:
38:7c:8f:95:89:02:97:8d:6f:f6:7d:74:4d:ca:0b:
19:90:65:7e:34:0b:5b:23:93:00:63:b9:b1:3b:4a:
15:1f:5d:24:7c:40:67:9e:36:94:66:bb:b1:a2:4c:
88:3d:22:e7:60:7a:24:68:ec:60:53:a8:2e:f9:50:
5d:fa:4d:2d:03:e1:69:86:5d:3c:3b:34:05:de:6f:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:98:8F:9F:D6:68:91:03:63:F4:D0:4C:FA:C0:F3:ED:2B:9B:DB
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:a9:23:0a:b9:a6:2f:24:18:fd:37:a4:f1:03:5a:5e:6d:
6a:1e:49:6a:a9:00:60:c2:74:c9:74:5d:84:12:67:f1:a2:8d:
76:f4:e0:41:3d:37:b2:49:35:75:58:22:72:9d:83:62:bc:6a:
d5:2c:19:38:a4:49:66:88:8a:de:50:74:de:87:41:21:59:61:
0d:4e:00:cf:9b:ac:f8:07:e1:67:f3:79:c8:95:9e:29:b3:bc:
17:3a:52:cb:c3:8a:e0:be:90:89:95:f8:eb:f8:87:64:92:90:
25:c3:84:eb:ae:d0:71:36:c2:e5:06:3a:5a:0c:9c:42:72:5c:
d5:5a:98:ef:e4:6c:0a:4d:58:e4:85:68:24:cd:c6:6b:fb:09:
3f:af:28:c6:68:89:4f:cc:04:32:75:35:40:79:0a:55:53:10:
e6:0e:83:21:ed:d6:25:1b:82:5d:10:d5:5d:99:ef:ba:43:13:
55:31:89:c3:e4:75:98:f3:50:e5:44:20:cc:6f:76:11:69:0a:
3b:d0:13:69:66:0f:fc:ee:21:84:8f:82:7f:36:13:26:34:31:
29:ba:c8:b8:24:c6:d5:18:ae:54:a3:7e:3b:f2:72:09:1f:42:
01:b8:12:ac:9d:b5:49:ee:c1:e9:76:3a:93:61:29:8f:4f:d6:
58:75:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:38 2026 by rpki-client