Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: rdA2b3xb6Wz9rIpihL430bc2wLz7Pba2JZ42PSP0M1Y=
Subject key identifier: 2F:DA:2F:D5:8C:EE:97:3F:98:29:2C:91:BD:E3:32:38:BE:BA:50:C3
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019D992B3A094C62D45FFE4E7A54E531B909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 1199
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: vp92tGGsc1C6l7BYLZaJhL6t5FzppH9gcn0+HBkC8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:3a:09:4c:62:d4:5f:fe:4e:7a:54:e5:31:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=2fda2fd58cee973f98292c91bde33238beba50c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:bc:cd:fa:18:33:dc:25:b9:db:40:22:4e:
f9:26:30:28:85:6c:af:bb:41:cc:e7:f2:97:36:11:
56:46:81:06:b0:04:6e:c7:04:a4:78:f7:dc:d1:a3:
51:27:e0:5b:e9:8b:b3:d0:65:ce:74:fd:e1:10:da:
20:e7:9f:d5:be:7b:30:50:33:9e:fd:50:d5:4a:f5:
22:08:af:c0:d5:1a:5c:95:68:7c:02:3b:2d:43:b8:
bb:c6:4e:4c:46:ee:46:13:ce:17:a9:f7:ea:ee:3f:
36:18:3f:8a:29:7e:f5:ce:15:cb:51:82:a2:45:da:
1a:c3:a7:a7:77:cc:67:5f:fb:f1:ec:71:1d:d0:1c:
b5:a6:50:e0:52:0a:d9:2f:8e:f4:6f:81:06:7c:bb:
f6:8a:4b:95:9a:b8:07:8d:16:90:45:fe:37:5b:e6:
48:5d:99:13:33:a0:0f:49:ea:19:2e:84:10:7d:ef:
a3:a9:4d:65:83:1c:c7:bf:71:c6:14:56:54:ac:05:
58:f2:90:c9:e9:b6:a4:26:fa:d6:66:a2:e0:dd:e9:
77:68:b0:07:ef:64:c5:c5:bf:6c:27:4c:eb:83:a7:
7f:d9:6d:d1:88:1f:d4:2c:3d:28:4a:b3:e9:44:f2:
b9:13:1a:21:29:c7:9c:06:05:fd:0e:12:7f:55:e8:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:2F:D5:8C:EE:97:3F:98:29:2C:91:BD:E3:32:38:BE:BA:50:C3
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c8:76:a7:a4:93:a7:77:e8:cf:fd:b3:3c:9a:62:ef:b3:9d:
38:2b:b5:a2:a6:b7:04:e2:16:c9:ef:40:b7:25:83:50:f5:2c:
9b:43:e8:f2:e1:a9:77:d9:52:04:25:19:86:8d:fc:6d:62:71:
6e:ce:45:c5:1d:99:1a:d7:74:2b:59:f5:dc:1f:b0:19:bd:8e:
eb:67:aa:64:bc:1d:9d:3a:d8:12:88:59:19:25:36:c5:27:fd:
02:c7:b1:9d:f7:b6:69:f4:62:84:24:f5:36:9d:50:42:76:8d:
90:6f:ba:25:8b:68:95:cc:73:72:67:63:9b:eb:9d:de:30:0b:
a6:c3:f3:9d:1b:50:79:d2:77:81:b9:40:87:9c:f7:94:f6:7e:
a6:9d:7e:33:35:89:80:f8:44:bd:ae:e4:69:49:ee:a9:95:91:
af:54:7b:30:14:78:b5:e0:25:54:45:3c:61:a1:4c:1a:ff:06:
51:3e:3e:b1:54:98:de:60:3f:2e:b2:a2:45:e8:a4:9f:6f:55:
16:ee:75:c5:45:6f:53:43:cc:da:ea:f7:d2:41:62:0d:aa:61:
a5:49:c5:5d:3c:23:5a:8a:15:47:d6:e5:43:f1:af:c4:a3:62:
bb:23:d1:17:a1:08:98:bb:05:e7:24:36:b8:f9:04:c6:ae:75:
2d:6e:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:01 2026 by rpki-client