Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: HEdxrhwRErtkVG3ggd/JqqFq4sr1omM7DLhyVnWJ/h4=
Subject key identifier: B7:07:A4:E2:52:4A:04:FD:1E:B8:45:20:1B:07:04:BA:01:30:35:1E
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 019EC36E8029253988EF85D8DB360771E5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 00:00:59 +0000
Manifest this update: Sun 14 Jun 2026 00:00:59 +0000
Manifest next update: Mon 15 Jun 2026 00:00:59 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: cd/CmoY4navq4QDeUquekbmrQi+mQfJf3SPleLdiSgU=)
2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:80:29:25:39:88:ef:85:d8:db:36:07:71:e5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Jun 14 00:00:59 2026 GMT
Not After : Jun 15 00:00:59 2026 GMT
Subject: CN=b707a4e2524a04fd1eb845201b0704ba0130351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:6e:63:26:b6:47:6d:d0:48:b2:d7:ce:86:
2e:15:c5:b3:e6:40:f9:0a:51:59:6f:86:f1:34:9d:
1e:67:cb:7e:86:f7:a6:65:52:09:04:97:2b:54:de:
54:37:05:87:14:7a:78:d6:26:68:cc:aa:9a:84:ed:
6c:18:54:f2:42:4b:e6:e5:d0:34:53:35:57:bd:92:
55:1b:ee:9d:e9:79:8d:16:5f:59:a5:6a:68:df:18:
41:e8:90:96:00:5b:fd:4f:52:2f:12:8b:2c:32:74:
69:bc:09:3d:93:72:74:02:67:f1:e4:86:e2:80:1e:
b6:59:16:38:37:3a:e1:45:cf:3c:51:35:46:b5:d7:
4d:94:e6:7b:b7:11:6a:81:6f:c4:5c:3e:d2:5b:d0:
e5:ac:86:03:28:2b:71:e9:69:de:6b:b6:3b:f2:1f:
87:69:3f:ed:d5:da:70:93:33:66:6a:14:f1:00:12:
9e:f7:db:35:9c:c3:60:4b:16:e7:36:64:d5:35:f9:
a1:eb:bf:69:84:56:f4:e3:76:6b:18:fb:0a:e2:6a:
b7:f8:96:56:6a:b0:c1:db:8b:7f:15:ca:04:cf:c4:
dc:3c:4c:18:9e:a9:e2:73:d9:38:99:95:98:5c:aa:
29:51:18:12:2f:f2:17:2a:5f:4a:e9:dc:8a:d6:6e:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:A4:E2:52:4A:04:FD:1E:B8:45:20:1B:07:04:BA:01:30:35:1E
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b7:bd:36:89:88:3a:94:73:2d:b6:98:6c:b9:4e:b0:b2:da:
f3:f1:3c:34:ae:fb:f0:f7:d0:36:cc:43:7d:64:b5:90:8b:c0:
b7:55:3a:24:e6:9a:ab:a7:ce:e2:ce:4c:85:fd:df:33:71:4b:
69:b2:bf:aa:8c:cc:2f:d5:17:15:d0:4a:cf:40:32:fb:2b:d1:
6b:2e:f3:07:95:5f:83:07:d4:d4:c6:cf:b7:9b:3d:ee:2f:05:
1b:0e:d0:f2:1d:31:27:1c:73:48:78:09:60:32:dc:9b:e9:df:
e5:70:b0:63:b3:46:5d:d7:be:f3:36:65:14:f9:2a:fb:ca:16:
61:3a:89:58:88:61:d9:cc:31:fd:7b:d2:3a:0c:a5:18:35:11:
ba:b7:8b:9d:03:56:08:ed:7b:25:27:25:e9:a4:64:3b:e9:ec:
9b:16:0e:25:60:a0:cd:80:aa:ae:6b:77:3c:8e:5e:3c:86:02:
fb:35:ea:38:37:40:3f:ed:47:e9:64:39:6a:fb:ef:c5:3f:8f:
c6:de:2d:80:4c:65:e9:35:79:c8:e0:65:50:60:82:b4:41:72:
4a:9c:85:1c:c8:0d:49:ac:00:4d:6b:20:c2:ef:2e:f6:a6:03:
6b:f6:1c:13:db:51:e5:23:12:06:43:6a:b1:d0:d6:f0:d4:0b:
da:2b:0b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DboApJTmI74XY2zYHceWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzYxZTZkMTZlYmYxN2U1NzFjNmJmNzdlYzA2YmRmN2Fi
NjhhZjgwHhcNMjYwNjE0MDAwMDU5WhcNMjYwNjE1MDAwMDU5WjAzMTEwLwYDVQQD
EyhiNzA3YTRlMjUyNGEwNGZkMWViODQ1MjAxYjA3MDRiYTAxMzAzNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsduYya2R23QSLLXzoYuFcWz5kD5
ClFZb4bxNJ0eZ8t+hvemZVIJBJcrVN5UNwWHFHp41iZozKqahO1sGFTyQkvm5dA0
UzVXvZJVG+6d6XmNFl9ZpWpo3xhB6JCWAFv9T1IvEossMnRpvAk9k3J0Amfx5Ibi
gB62WRY4NzrhRc88UTVGtddNlOZ7txFqgW/EXD7SW9DlrIYDKCtx6Wnea7Y78h+H
aT/t1dpwkzNmahTxABKe99s1nMNgSxbnNmTVNfmh679phFb043ZrGPsK4mq3+JZW
arDB24t/FcoEz8TcPEwYnqnic9k4mZWYXKopURgSL/IXKl9K6dyK1m48nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcHpOJSSgT9HrhFIBsHBLoBMDUeMB8GA1UdIwQY
MBaAFEF2Hm0W6/F+Vxxr937Aa996tor4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUt
YTg3OWRmNDZlYjk5LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUtYTg3OWRmNDZlYjk5
LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7e9NomI
OpRzLbaYbLlOsLLa8/E8NK778PfQNsxDfWS1kIvAt1U6JOaaq6fO4s5Mhf3fM3FL
abK/qozML9UXFdBKz0Ay+yvRay7zB5VfgwfU1MbPt5s97i8FGw7Q8h0xJxxzSHgJ
YDLcm+nf5XCwY7NGXde+8zZlFPkq+8oWYTqJWIhh2cwx/XvSOgylGDURureLnQNW
CO17JScl6aRkO+nsmxYOJWCgzYCqrmt3PI5ePIYC+zXqODdAP+1H6WQ5avvvxT+P
xt4tgExl6TV5yOBlUGCCtEFySpyFHMgNSawATWsgwu8u9qYDa/YcE9tR5SMSBkNq
sdDW8NQL2isLTQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:26 2026 by rpki-client