
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: ynGc9ueWKBJxiIfbDLkfz0KTFLCXOPRODwQTarBL5TQ=
Subject key identifier: B3:FB:33:65:B6:EC:5F:D7:19:98:29:44:C5:AE:EE:5F:FE:88:6D:59
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019FA9E2DF2E497DC905BD391E1F482E3059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 16AE
Signing time: Tue 28 Jul 2026 18:00:45 +0000
Manifest this update: Tue 28 Jul 2026 18:00:45 +0000
Manifest next update: Wed 29 Jul 2026 18:00:45 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: oxvNg81W+We6hv/HqClHfiZEXKBcRpkB5EUmI9Mpyyc=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:df:2e:49:7d:c9:05:bd:39:1e:1f:48:2e:30:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jul 28 18:00:45 2026 GMT
Not After : Jul 29 18:00:45 2026 GMT
Subject: CN=b3fb3365b6ec5fd719982944c5aeee5ffe886d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:ab:58:eb:f9:29:81:07:3a:6b:a2:26:10:
c1:9d:04:b3:32:f3:3d:5a:63:a7:8c:9d:ec:3f:c6:
4d:eb:4c:5e:5c:1d:34:dd:2c:f8:29:8a:b1:6f:5b:
4a:94:99:e2:72:e1:7c:33:7b:59:e4:e1:62:f2:c2:
e7:b8:b8:8f:0c:9d:1a:ae:ad:64:6d:0f:8e:0d:8a:
70:75:b4:e2:ad:3a:57:ee:db:e1:ae:1b:42:61:a2:
14:67:c8:9e:75:f7:72:91:e1:0a:e9:03:bf:d6:e3:
37:dd:89:9a:54:95:b1:f3:9a:89:44:a8:0d:2a:60:
0f:f5:7f:52:36:fb:ac:6c:ad:16:b4:ad:b5:55:f5:
16:3e:a4:ec:05:23:ce:37:14:79:6b:aa:48:d6:81:
90:1c:9c:11:ee:ec:00:9d:6b:58:94:74:ba:56:09:
8a:8a:a6:81:db:f4:e1:23:1d:03:61:08:b7:34:18:
a3:c5:2f:1b:6c:1f:30:87:a5:25:ae:03:a0:c5:e9:
cf:1b:79:10:c6:6a:c2:d0:d1:48:cb:59:ae:d0:19:
9b:b8:9d:8c:a1:f9:d9:ec:af:a0:c5:33:32:12:b6:
8c:c7:60:e9:07:d5:55:a3:00:ba:33:da:0e:80:a4:
8b:b4:c9:e7:a7:a8:6e:a3:6d:c0:7e:16:b6:20:97:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:33:65:B6:EC:5F:D7:19:98:29:44:C5:AE:EE:5F:FE:88:6D:59
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:7b:83:dd:5e:cd:e5:11:19:f4:5d:77:51:25:a0:8d:f9:
35:b2:95:2d:ef:2d:eb:f5:42:f4:d0:45:fe:27:33:ec:12:2a:
73:e6:5f:29:46:c3:d9:73:f1:f1:6a:b7:50:d1:21:fb:c7:37:
a0:43:2a:b8:cf:e3:74:3a:ed:33:e0:2f:2a:bd:13:32:b9:07:
f6:6c:f9:15:cb:a4:01:1a:9b:84:5c:4d:3e:49:52:11:47:47:
75:f9:5c:de:ad:ee:41:0c:57:2b:05:20:c6:72:3b:94:b1:d5:
2d:1d:f6:c8:46:ee:70:a3:e5:3c:c2:1f:20:97:67:24:c9:ad:
95:f0:bf:a9:c5:b1:6a:a0:8d:3a:0c:c1:a9:c1:9a:14:b4:2f:
bd:1c:54:fa:d6:c4:8c:8e:e9:34:ea:96:36:2b:0e:24:0d:91:
fc:f0:ac:0f:68:06:2e:89:80:a5:3d:35:1a:fd:9e:2d:1e:db:
88:a3:60:c2:f5:22:13:4c:d4:3d:0e:ab:2d:40:ee:53:3e:e4:
37:a2:e5:0b:6d:67:f4:f5:5b:89:ac:f9:a6:cb:fd:39:cf:0b:
c2:49:3c:2f:cc:44:1c:52:61:8a:e5:68:79:22:ee:ba:d5:fb:
a1:49:dd:7f:8d:dc:a2:6d:cc:cc:51:fa:b1:6c:c8:65:ff:f9:
c3:74:c2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4t8uSX3JBb05Hh9ILjBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2JjMWRjMmUxMWQ0OTFiOWI4NWUwOGQwMWMyMjJmOTc3
NmMzY2MwHhcNMjYwNzI4MTgwMDQ1WhcNMjYwNzI5MTgwMDQ1WjAzMTEwLwYDVQQD
EyhiM2ZiMzM2NWI2ZWM1ZmQ3MTk5ODI5NDRjNWFlZWU1ZmZlODg2ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CSrWOv5KYEHOmuiJhDBnQSzMvM9
WmOnjJ3sP8ZN60xeXB003Sz4KYqxb1tKlJnicuF8M3tZ5OFi8sLnuLiPDJ0arq1k
bQ+ODYpwdbTirTpX7tvhrhtCYaIUZ8iedfdykeEK6QO/1uM33YmaVJWx85qJRKgN
KmAP9X9SNvusbK0WtK21VfUWPqTsBSPONxR5a6pI1oGQHJwR7uwAnWtYlHS6VgmK
iqaB2/ThIx0DYQi3NBijxS8bbB8wh6UlrgOgxenPG3kQxmrC0NFIy1mu0BmbuJ2M
ofnZ7K+gxTMyEraMx2DpB9VVowC6M9oOgKSLtMnnp6huo23Afha2IJdhRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP7M2W27F/XGZgpRMWu7l/+iG1ZMB8GA1UdIwQY
MBaAFEB7wdwuEdSRubheCNAcIi+XdsPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2It
N2FmMGExNWY0MGI1LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2ItN2FmMGExNWY0MGI1
LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPV7g91e
zeURGfRdd1EloI35NbKVLe8t6/VC9NBF/icz7BIqc+ZfKUbD2XPx8Wq3UNEh+8c3
oEMquM/jdDrtM+AvKr0TMrkH9mz5FcukARqbhFxNPklSEUdHdflc3q3uQQxXKwUg
xnI7lLHVLR32yEbucKPlPMIfIJdnJMmtlfC/qcWxaqCNOgzBqcGaFLQvvRxU+tbE
jI7pNOqWNisOJA2R/PCsD2gGLomApT01Gv2eLR7biKNgwvUiE0zUPQ6rLUDuUz7k
N6LlC21n9PVbiaz5psv9Oc8Lwkk8L8xEHFJhiuVoeSLuutX7oUndf43com3MzFH6
sWzIZf/5w3TCpA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:14 2026 by rpki-client