Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: 7G2SMobq+mTCyBhn7B7ryxPoC+1Il70iZ8MaedIfn24=
Subject key identifier: AB:08:AA:6A:A0:1C:0A:B2:9A:B3:FA:73:A6:C3:9F:85:98:3A:BB:93
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01A0E13D1611B98F29FC2BEFB023DC40F0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 134C
Signing time: Sun 27 Sep 2026 05:01:11 +0000
Manifest this update: Sun 27 Sep 2026 05:01:11 +0000
Manifest next update: Mon 28 Sep 2026 05:01:11 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: 6Y4I/zWx+Jze9JTmxoIIW05gNP+oxCwMmJPucO8+8Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:16:11:b9:8f:29:fc:2b:ef:b0:23:dc:40:f0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Sep 27 05:01:11 2026 GMT
Not After : Sep 28 05:01:11 2026 GMT
Subject: CN=ab08aa6aa01c0ab29ab3fa73a6c39f85983abb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:ce:05:ea:01:cb:be:ac:a2:b8:4d:4e:41:
32:14:8e:78:7e:00:b6:7a:f1:ad:0e:e3:9e:f7:b7:
62:69:81:04:3b:62:41:67:cf:0f:cf:d0:5e:de:9e:
95:7e:2a:2f:0e:29:b6:65:a0:54:fb:2e:89:a5:b8:
0c:e2:e1:aa:68:bc:b2:1e:46:e3:31:bf:7f:ce:c0:
2d:6e:a3:ad:bc:9c:46:dc:85:27:85:61:7f:1c:a6:
c8:94:7f:2b:5d:49:e6:2f:ba:6a:9e:f0:43:7f:d1:
65:4b:92:5b:36:5c:24:65:65:6a:ff:02:a1:3c:23:
3a:fd:b0:9c:47:21:0a:8b:67:4b:00:0d:91:55:1e:
0a:12:75:a9:46:06:c4:36:3f:18:b9:4c:d2:9f:c5:
a2:87:09:ef:87:84:cf:7e:0d:04:66:15:04:6c:76:
c8:58:5b:2c:81:7c:63:1a:7d:ed:64:52:f8:2f:d4:
f3:6f:85:ca:df:da:41:1d:98:c6:ce:cc:65:d0:bf:
24:7d:dc:75:94:71:5b:fd:22:2c:97:c8:96:6e:b7:
ee:aa:e8:04:cf:b4:71:b7:5e:32:6a:14:67:d3:f0:
19:f7:62:64:43:94:d7:b1:3b:cb:4a:85:61:ac:61:
31:7e:e6:11:d6:c8:74:1e:2a:44:04:40:c9:f9:48:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:AA:6A:A0:1C:0A:B2:9A:B3:FA:73:A6:C3:9F:85:98:3A:BB:93
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:90:7a:a8:82:a1:ec:ee:6e:27:a9:aa:ef:dc:d0:fc:2c:f1:
97:a9:ec:55:c9:53:0a:4d:e4:73:58:7c:1a:b5:ff:dd:5b:29:
06:ef:4e:0e:13:80:c3:11:fa:cf:ec:b5:58:16:88:5e:a7:6d:
f5:9d:20:1f:4c:9b:28:d3:37:0f:4d:58:4b:d3:34:91:90:b9:
03:a0:b5:68:be:5f:39:10:0c:b3:6c:b0:c5:2f:fe:a0:fd:0b:
73:65:51:ee:56:6e:14:9a:fd:2e:1a:a0:06:4e:e9:bb:64:38:
9a:c0:17:52:c9:b4:46:14:fc:75:2f:64:0b:b7:45:fc:b7:0b:
74:f6:2e:52:dc:5b:b0:45:64:a7:75:7c:dc:76:da:52:fb:bd:
56:0d:ce:c8:f5:be:68:23:3f:5d:68:b3:28:f6:de:34:ff:c9:
4a:60:ea:2c:c5:b7:9b:5d:7a:95:93:cc:05:30:2d:f6:c5:d8:
c3:34:17:09:2b:0f:13:f6:6d:16:52:c9:ff:fe:fe:4a:4e:14:
55:02:a2:8f:6a:6b:9b:8f:d5:06:8f:83:67:69:32:ea:6d:26:
72:67:70:0b:0b:23:bc:e1:67:63:a9:26:02:43:c6:f4:ec:89:
c4:1c:fc:f6:df:0d:1e:fc:ad:87:67:12:fe:ab:9a:e3:42:66:
f4:40:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:53:51 2026 by rpki-client