Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: U/njTfM/2hUzSEIgEldMPbeJ4YTqhG/mh7xSZzMI8MI=
Subject key identifier: 84:C7:5E:89:16:5D:C0:2F:0A:00:D9:09:23:0E:5B:46:84:E7:00:59
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019CABA20E387D342FB779DD8ADCE200995E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 111E
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: SOTKzYIm6bqFlIHtWklT4Ibjk5wUilu4bm9ab+xJcj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0e:38:7d:34:2f:b7:79:dd:8a:dc:e2:00:99:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=84c75e89165dc02f0a00d909230e5b4684e70059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:56:5b:85:15:90:78:57:b9:2d:28:64:18:
c7:21:5a:d8:33:65:2c:25:6c:4e:a2:3d:fe:5b:e8:
bd:71:e5:8b:e2:df:f4:91:54:51:84:06:e8:4c:72:
6e:38:60:32:5e:f7:be:08:67:9e:71:5c:56:d4:c7:
10:5b:d6:c6:b4:52:82:72:2e:0e:18:ec:ba:18:05:
af:61:56:00:de:65:4d:8e:27:cb:63:cf:99:b7:78:
41:26:5d:43:af:0b:7e:68:ee:42:01:8a:22:5d:25:
ad:52:96:cb:34:dd:44:dd:de:44:01:9b:45:a4:dd:
39:8e:1d:d3:1c:d9:8c:08:35:35:52:98:be:4b:66:
6e:86:63:e4:37:21:14:a6:c0:2b:ed:d4:d1:6d:eb:
ed:84:75:c2:a0:d0:e4:65:4b:88:19:79:d4:b6:94:
5f:3f:58:90:1d:22:03:b6:5c:5d:28:4f:b1:92:a7:
c6:c9:86:54:9d:f0:0e:7d:9e:11:14:db:82:82:34:
28:6f:89:e9:ec:58:e3:33:6f:59:4d:27:e3:db:b8:
30:0d:71:34:d7:9b:a1:35:90:3f:41:48:09:5a:b8:
8b:ea:6d:6c:04:ae:08:a8:d0:6a:06:14:0f:05:3d:
b3:d4:8f:42:84:a0:06:4b:e6:69:76:14:1e:33:b2:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C7:5E:89:16:5D:C0:2F:0A:00:D9:09:23:0E:5B:46:84:E7:00:59
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:25:68:c5:a5:e4:3f:9e:4d:f0:26:32:09:9c:77:3c:9c:d1:
25:4b:f9:09:19:ca:74:ba:b1:02:55:11:d0:4c:7e:5f:38:4a:
65:db:71:3a:d0:53:9a:6d:32:7a:5f:a3:aa:3e:13:7e:05:ca:
6f:8b:69:d2:a0:62:fe:f0:72:58:9a:e3:12:c6:f5:72:98:06:
06:5a:a8:09:42:eb:61:c7:e8:d1:a6:94:fe:7a:16:5c:9c:a9:
c4:d8:d4:be:9f:db:d7:28:8b:94:08:02:30:1b:41:8c:0d:3c:
5b:cd:1c:0b:4e:19:06:68:df:87:4a:cc:d3:0a:27:54:d2:0c:
0c:f2:70:f0:13:9a:41:bc:63:88:ec:5d:e8:70:a9:ba:97:3d:
ee:10:5a:40:ff:b5:3d:11:4d:0a:86:4f:66:e2:b4:bd:33:9e:
e7:50:fa:83:25:33:f6:26:b8:d4:44:da:24:08:6d:db:3f:d3:
b2:21:af:8e:cd:e4:07:10:05:8b:40:37:2e:2e:e4:d0:9b:7c:
c7:f1:b1:ae:43:94:77:b0:c5:a2:90:3d:2d:79:1c:1c:56:99:
8a:c1:ef:28:ad:a0:cb:4f:5a:ff:81:23:e2:52:c2:85:6b:de:
63:d1:39:ef:3e:9c:b8:eb:79:4e:26:d1:2e:48:a2:c7:71:af:
a5:3f:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:28 2026 by rpki-client