Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: R0PQam1Ob4RV/wTsW4Y2+Uc1igczWnUogM0pCUb/HE4=
Subject key identifier: 10:2E:08:2E:14:94:6D:01:9A:18:4D:0F:4F:C7:C1:EF:21:FE:15:DE
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019EC300342D3E8144909AF834F94F847CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 22:00:30 +0000
Manifest this update: Sat 13 Jun 2026 22:00:30 +0000
Manifest next update: Sun 14 Jun 2026 22:00:30 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: Zkc9F0A7emDJ/CKJ36FtpSunCVe4RR9Y3nVwyseYJDc=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:34:2d:3e:81:44:90:9a:f8:34:f9:4f:84:7c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Jun 13 22:00:30 2026 GMT
Not After : Jun 14 22:00:30 2026 GMT
Subject: CN=102e082e14946d019a184d0f4fc7c1ef21fe15de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:d9:8d:d4:79:fd:d2:40:5f:82:aa:31:6a:
59:ef:8c:f8:15:34:d1:26:05:4d:d0:0f:ed:e0:40:
b4:b3:b3:ad:7a:12:b7:1e:2a:7b:1e:f9:80:e1:9b:
a9:42:be:68:c6:9b:0d:f5:a1:31:37:6a:3b:d1:93:
54:9e:78:47:29:14:2d:29:81:38:80:39:c3:96:7f:
7f:00:2e:2e:32:5f:87:a3:73:18:cd:85:80:e6:97:
83:55:68:99:53:7b:76:5f:00:05:ec:f3:5e:8b:20:
4e:88:54:7e:71:e1:d3:50:1e:45:22:dd:6e:b8:f5:
30:c4:8e:7a:aa:c6:bc:d7:70:85:f4:ea:b2:17:23:
01:95:87:ef:af:73:e0:a1:a0:bd:f1:aa:78:1e:72:
c6:cb:52:54:e6:86:ad:57:41:30:db:38:89:5a:c1:
bb:85:5a:a1:56:f2:1a:48:00:1a:ff:d3:88:72:d5:
0f:cc:27:50:e7:fc:70:88:ef:f2:ae:59:64:08:95:
9e:9b:ba:0c:c8:f3:9c:ab:cb:f8:f5:2a:68:4a:8c:
5d:70:9c:26:70:ab:f7:46:12:c3:42:3a:64:5b:94:
4d:aa:08:25:7b:72:71:70:ec:a0:75:4e:9a:14:7d:
a0:d4:c9:e4:89:f2:6c:4b:cd:83:f2:e4:3e:65:57:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:08:2E:14:94:6D:01:9A:18:4D:0F:4F:C7:C1:EF:21:FE:15:DE
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b4:0f:18:ee:6e:7b:2d:29:a4:f1:da:86:4f:a3:7a:75:db:
79:2e:71:82:df:fa:59:d4:a6:d1:20:6b:02:48:5d:08:68:b6:
f1:70:1a:de:79:dd:bb:41:f7:38:3d:8a:b1:33:90:6e:56:10:
bf:07:69:47:ea:f6:eb:17:d5:54:32:58:35:52:0d:2b:be:c2:
dc:84:2a:fa:7f:b7:27:c2:12:53:bd:f3:dd:c3:0d:6a:0c:24:
3c:65:0d:e1:1c:c7:3c:2e:d5:44:36:e9:b8:6d:3a:3e:3a:08:
5c:78:ae:82:74:40:fa:15:e9:01:4e:75:8e:e6:53:7e:fe:d7:
74:6a:7d:e3:f4:2a:c4:2d:89:b7:de:cc:65:21:cd:9c:ab:5a:
8f:ae:f1:4e:41:d5:ea:2a:6d:96:cc:06:6b:f4:49:c8:72:dd:
a8:ab:af:7a:ce:50:c7:9e:f1:94:74:e3:43:9a:f1:28:92:33:
53:23:cf:ad:11:94:14:ae:66:fb:1e:a2:40:b9:c5:d5:ab:7e:
98:4e:db:e6:0d:70:34:b1:67:46:21:63:7a:fd:30:1b:10:9b:
26:0a:0d:e1:1b:4a:1b:a0:10:ee:f8:69:58:7a:20:77:2a:e7:
56:70:59:37:c8:27:01:0d:16:0f:e2:ed:0a:29:a3:ec:1d:55:
b2:64:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:38 2026 by rpki-client