Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: yhhJ9/nASOHWTnJ2D8vVi9xg3YqBgsX05EoIaCsrTAk=
Subject key identifier: 1C:72:ED:DE:AA:24:3F:1D:D8:B7:6A:7B:89:50:3A:2D:EB:8D:A9:D5
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019EC25BF7E1D245BEFD3E13865484B5D52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 0111
Signing time: Sat 13 Jun 2026 19:01:07 +0000
Manifest this update: Sat 13 Jun 2026 19:01:07 +0000
Manifest next update: Sun 14 Jun 2026 19:01:07 +0000
Files and hashes: 1: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: LW/60QqEwC6kNlPIdih2EW0cYG7wchTmmtkcXEq9tkk=)
2: UznnCCmWb2U_DwOypllLo7Xxwe8.asa (hash: bm5GW+O8Moz8CwmexqQ5gD2dh8tQCMzUBqUj6Yad+rU=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:f7:e1:d2:45:be:fd:3e:13:86:54:84:b5:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Jun 13 19:01:07 2026 GMT
Not After : Jun 14 19:01:07 2026 GMT
Subject: CN=1c72eddeaa243f1dd8b76a7b89503a2deb8da9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:7a:48:8a:c9:3b:4d:b9:37:36:7f:f1:24:
d6:eb:21:df:b4:c0:64:31:c6:01:b9:3f:d5:03:d0:
8e:ae:be:b9:35:42:a2:61:70:25:02:6a:0a:66:d2:
31:61:a7:04:da:d1:49:73:9f:4f:11:d3:8a:c3:81:
69:22:d1:b0:e9:29:87:41:dd:a3:6c:55:b9:77:8c:
63:9a:1e:78:bd:af:98:fd:18:41:b6:b1:a5:8d:4b:
84:05:6f:61:56:46:b5:93:43:f5:38:4a:bd:8e:a3:
a3:6e:1d:a8:ed:86:86:10:6a:c0:d5:e2:93:c4:34:
87:3f:f5:5f:84:ec:11:7e:59:26:d1:19:4c:0c:41:
8a:f6:5d:c9:e1:52:bf:be:c7:66:f6:f4:7f:4c:c6:
2a:02:9e:cc:0d:4c:4b:0c:e3:0c:19:d4:5e:10:2c:
76:5e:61:ce:2a:9a:d1:19:51:59:e5:95:93:70:40:
05:e4:97:64:4e:7b:48:f4:18:9c:72:c2:3c:ac:0e:
5b:0f:f5:aa:87:e4:88:10:36:cb:5b:c1:28:70:b2:
1a:b8:3e:e0:58:77:02:7d:38:26:9d:61:3d:cf:06:
12:40:01:9a:62:0a:bc:1d:d7:81:39:b3:8f:16:c0:
7e:92:2b:7d:10:c3:26:e9:e5:90:c6:6d:88:97:28:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:ED:DE:AA:24:3F:1D:D8:B7:6A:7B:89:50:3A:2D:EB:8D:A9:D5
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:86:91:3e:21:5c:f3:ad:65:42:31:91:aa:58:2c:18:08:b6:
5f:6d:f0:22:2d:5c:13:10:00:0f:45:2c:0b:d9:14:7b:5a:ed:
c4:dd:fa:a3:ff:ae:59:3a:3f:ab:bc:f4:5e:1a:84:93:28:09:
d6:44:17:50:8e:d6:7b:6d:44:a0:4b:3e:41:30:ba:85:8b:46:
aa:65:26:0e:98:f0:fa:bf:31:e3:19:34:62:3d:7b:e4:67:7c:
74:b8:1e:a2:a7:39:97:32:7b:52:02:9f:fb:57:06:21:42:13:
d5:8f:4f:d8:aa:e8:e7:3d:87:ba:c6:fd:44:fc:14:10:2d:3f:
45:22:d7:35:af:76:bd:ad:ed:cb:04:fd:e7:a4:c8:b5:02:2f:
97:b6:f9:7f:0a:3c:3b:fd:ae:07:20:41:7c:71:c8:4f:a8:ad:
5a:cb:55:23:85:e4:88:6b:c1:aa:c4:4c:09:af:cc:75:0f:e1:
55:e3:b1:ff:87:86:bd:b3:01:14:05:9f:ff:f8:55:bd:4d:a3:
f6:c2:5f:a8:68:4e:fa:08:6c:8f:75:67:99:1a:29:1a:71:16:
3c:3e:7f:b9:81:c9:6c:40:8e:d8:29:aa:85:76:a5:48:d2:45:
69:c4:f0:32:fb:de:7e:bf:a4:d2:5d:bd:96:f8:79:6d:23:ef:
46:33:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:08:18 2026 by rpki-client