Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: 7m9wFowMiwtSPW43e28mAIhH1UdGZsREzN1yP0DaKgk=
Subject key identifier: 71:3F:0E:E8:DF:8E:07:AC:89:F2:43:A0:35:4B:CD:8F:34:11:E8:B9
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019FAB2C7ED07FF2E0AC46013891E5623DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:00:47 +0000
Manifest this update: Wed 29 Jul 2026 00:00:47 +0000
Manifest next update: Thu 30 Jul 2026 00:00:47 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: qII+6mbz6QdAOXtRtn2HvoT0WeoToE1U+CL5x+uLDbA=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:7e:d0:7f:f2:e0:ac:46:01:38:91:e5:62:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jul 29 00:00:47 2026 GMT
Not After : Jul 30 00:00:47 2026 GMT
Subject: CN=713f0ee8df8e07ac89f243a0354bcd8f3411e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:12:89:e0:55:7f:ef:fd:d0:53:6d:bd:1a:
00:1f:96:93:b7:bb:a5:f5:16:69:62:53:fc:cf:e9:
a2:77:b2:52:df:aa:c0:58:c1:90:8f:bd:9d:fc:ed:
b9:f4:8d:9f:4c:aa:21:ac:43:1b:e5:35:ca:46:13:
cd:e0:39:4c:3a:11:2d:de:bf:d5:ef:68:7a:80:d7:
c8:c8:9b:7a:e9:df:e1:e3:78:ba:4e:e3:aa:95:ec:
e1:53:0d:c2:9b:df:f5:bf:ef:b1:36:b0:ed:e5:c2:
3a:53:3b:88:61:5b:94:87:df:48:c8:46:7e:10:7d:
f1:bf:e4:03:74:26:44:6b:c2:7d:b9:bc:da:e5:4b:
9e:ef:0f:3d:0b:5c:65:ea:3d:7b:f7:47:50:e8:83:
f6:79:2f:bc:ef:22:7e:3e:f6:0d:d5:29:41:d0:78:
4d:7e:2f:74:9a:46:c9:35:90:f7:61:0f:42:53:72:
c2:2a:7a:61:10:8d:39:d2:ef:fe:96:fb:2c:2a:ab:
b0:f2:ed:fa:7b:bb:d9:0a:50:d6:fb:b6:38:04:fd:
11:ab:13:e8:7d:50:78:c4:53:b5:73:40:b8:a5:39:
4c:6d:68:f6:88:f1:97:5f:b7:48:de:75:1f:db:e5:
5a:ca:bc:0f:e4:41:a4:c9:eb:8b:28:82:79:da:7e:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:0E:E8:DF:8E:07:AC:89:F2:43:A0:35:4B:CD:8F:34:11:E8:B9
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1e:22:11:a3:79:0d:fa:e6:d2:11:8f:b8:a8:03:40:9f:c4:
7c:99:c4:d3:3a:a3:73:81:14:2e:c8:7d:21:e4:5f:2f:dd:d2:
63:c5:0c:10:04:47:07:2b:16:d7:9d:a2:17:f9:61:a1:08:b7:
78:ab:27:e6:fe:67:ac:17:32:aa:4d:74:f2:de:dc:73:20:f6:
4a:28:92:d6:f2:47:36:82:a0:ba:7c:8d:48:2e:99:fe:77:5e:
79:e5:16:40:ae:09:e5:46:e3:20:1a:0a:21:5b:d0:36:dd:21:
d7:34:42:e8:ca:9c:32:92:00:68:09:32:4d:93:61:ee:ea:0d:
bf:9c:e3:e5:ac:4f:20:bd:5f:32:6e:84:3a:19:05:d6:c9:ef:
97:d4:6c:1b:f5:d3:9b:44:2d:a6:f1:da:63:f7:e3:9f:10:aa:
97:0a:d7:fd:25:3f:29:f9:07:f4:ca:62:f0:1a:2d:f8:7f:ec:
f9:dd:9e:a3:7e:4c:09:f9:fc:f8:56:a7:68:80:05:8a:07:7f:
11:7b:b7:3e:73:a2:65:43:6c:3b:f8:13:47:90:bd:3d:86:d5:
8c:a1:43:33:fe:2c:96:e7:3e:c8:b5:ae:d6:91:5c:28:d7:53:
3e:26:78:22:1d:99:25:d4:55:6d:b8:55:78:c5:1e:f1:22:5d:
a2:dc:73:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLH7Qf/LgrEYBOJHlYj3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTQwODhjNzdiZDEyNjg3ZmQ0YmE5ZmUzMTU5ZWE4MDU4
ODhlZDIwHhcNMjYwNzI5MDAwMDQ3WhcNMjYwNzMwMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg3MTNmMGVlOGRmOGUwN2FjODlmMjQzYTAzNTRiY2Q4ZjM0MTFlOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWgSieBVf+/90FNtvRoAH5aTt7ul
9RZpYlP8z+mid7JS36rAWMGQj72d/O259I2fTKohrEMb5TXKRhPN4DlMOhEt3r/V
72h6gNfIyJt66d/h43i6TuOqlezhUw3Cm9/1v++xNrDt5cI6UzuIYVuUh99IyEZ+
EH3xv+QDdCZEa8J9ubza5Uue7w89C1xl6j1790dQ6IP2eS+87yJ+PvYN1SlB0HhN
fi90mkbJNZD3YQ9CU3LCKnphEI050u/+lvssKquw8u36e7vZClDW+7Y4BP0RqxPo
fVB4xFO1c0C4pTlMbWj2iPGXX7dI3nUf2+VayrwP5EGkyeuLKIJ52n4bvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE/DujfjgesifJDoDVLzY80Eei5MB8GA1UdIwQY
MBaAFEIUCIx3vRJof9S6n+MVnqgFiI7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAt
N2UyMWRiNWEyZWY5LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAtN2UyMWRiNWEyZWY5
LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx4iEaN5
Dfrm0hGPuKgDQJ/EfJnE0zqjc4EULsh9IeRfL93SY8UMEARHBysW152iF/lhoQi3
eKsn5v5nrBcyqk108t7ccyD2SiiS1vJHNoKgunyNSC6Z/ndeeeUWQK4J5UbjIBoK
IVvQNt0h1zRC6MqcMpIAaAkyTZNh7uoNv5zj5axPIL1fMm6EOhkF1snvl9RsG/XT
m0QtpvHaY/fjnxCqlwrX/SU/KfkH9Mpi8Bot+H/s+d2eo35MCfn8+FanaIAFigd/
EXu3PnOiZUNsO/gTR5C9PYbVjKFDM/4sluc+yLWu1pFcKNdTPiZ4Ih2ZJdRVbbhV
eMUe8SJdotxzaw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:29 2026 by rpki-client