Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: 7/VH5LpgdMvPFnUFN7jCLn+d4OaBgwHLXt0npO3F87c=
Subject key identifier: CE:25:D1:92:A1:13:A7:60:98:80:30:34:EF:43:D2:CE:43:A8:6E:5F
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019EC29256A91CED15338D118F813BBBCE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 1233
Signing time: Sat 13 Jun 2026 20:00:30 +0000
Manifest this update: Sat 13 Jun 2026 20:00:30 +0000
Manifest next update: Sun 14 Jun 2026 20:00:30 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: H6OErJHqUOrutvfulAFRkt2ckNJ1IFWlFtRFwMt45K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:56:a9:1c:ed:15:33:8d:11:8f:81:3b:bb:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jun 13 20:00:30 2026 GMT
Not After : Jun 14 20:00:30 2026 GMT
Subject: CN=ce25d192a113a76098803034ef43d2ce43a86e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:b3:37:d1:35:56:24:d6:57:60:43:d2:ae:
1d:0b:2b:eb:69:60:51:bf:67:ee:28:5e:bd:c3:17:
7b:3c:58:f6:e2:ad:93:94:fe:ad:bd:89:fe:ce:ca:
59:df:84:93:85:6d:35:1b:7b:39:dd:71:08:c3:8d:
40:46:7d:e1:85:49:82:99:9e:57:2d:4c:fe:eb:ab:
17:e2:99:59:bd:ac:fa:12:4c:a7:73:eb:5c:37:1a:
61:32:25:d4:95:d7:c0:44:d9:23:fc:d0:66:e3:e1:
a1:ab:80:b3:9b:22:b2:0e:b5:98:50:33:de:a3:f1:
c7:11:7a:20:c6:55:0a:94:99:52:b3:e3:42:17:f8:
d0:10:01:7a:9b:01:ed:be:97:d8:ec:5c:e7:57:75:
98:1a:8a:87:b8:b0:e7:14:a8:61:a1:cb:42:d3:21:
f5:10:cf:a4:da:24:bb:e3:e7:ed:9e:1d:86:73:f5:
5e:4d:e8:5c:f6:b9:0b:ea:a5:d7:ac:73:b5:ca:d6:
b5:44:eb:0c:31:47:ce:f9:98:53:ea:ec:33:44:10:
de:b9:1a:e2:f1:d3:92:17:21:e4:4d:50:2b:b0:bc:
6e:f9:86:5a:13:de:4f:49:10:58:30:94:b3:b7:ab:
02:5b:03:66:f5:f2:00:60:80:d8:d2:7e:bd:61:83:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:D1:92:A1:13:A7:60:98:80:30:34:EF:43:D2:CE:43:A8:6E:5F
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e3:0c:bd:24:d6:c2:03:35:05:f1:05:27:cd:ec:12:80:7d:
2e:00:b5:0f:8a:96:6a:71:86:ff:d1:c0:66:b3:e3:78:be:d5:
7a:96:b8:0e:9d:e3:5f:f7:ce:b2:06:68:e1:21:95:e3:15:42:
78:40:22:20:d0:b2:b3:ba:3f:bb:d8:b3:8a:fa:d4:70:c0:17:
53:b6:dc:48:bc:aa:d1:4d:3a:7c:14:f6:d5:e3:51:5c:86:32:
02:83:14:83:aa:e1:a9:d3:56:94:df:f3:b5:98:1f:1d:d4:d2:
d2:f9:c8:82:34:98:16:4b:db:ce:52:c8:76:63:86:00:2b:1b:
5b:0f:62:72:d2:07:1a:fb:43:3a:ef:a4:88:fd:9c:e2:ea:48:
96:20:3b:6c:4d:29:a3:b2:75:9c:83:27:1d:8c:4e:79:d5:a1:
eb:b4:4e:44:65:e6:2e:7c:52:c9:c9:5b:45:b3:16:eb:19:a7:
18:5c:1c:c4:e2:8e:df:3b:ac:4d:a4:bf:b4:2a:81:e0:ca:c9:
84:5b:72:e4:bf:24:00:68:a2:5e:42:03:04:8c:b7:38:a5:0a:
14:6b:00:55:df:3b:6c:d2:75:31:2e:0a:28:59:06:7d:72:f6:
aa:e0:09:e8:b5:2c:6b:d7:b9:e8:26:60:92:21:b3:76:af:c5:
b6:40:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:28 2026 by rpki-client