Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: cdbLY0phLJGrTpENApxi6w64OdnEp2N02X5kSC78UB8=
Subject key identifier: E9:27:8E:30:CC:1A:14:46:57:1E:60:08:8C:F1:E4:CA:26:E8:CD:E6
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019EC17FD82F1250363C66062ECC3B44DDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 15:00:41 +0000
Manifest this update: Sat 13 Jun 2026 15:00:41 +0000
Manifest next update: Sun 14 Jun 2026 15:00:41 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: XYH+F9PQ2CKXIxkE/RfQofasoRikLSGYU6wWjxQMu/g=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:d8:2f:12:50:36:3c:66:06:2e:cc:3b:44:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jun 13 15:00:41 2026 GMT
Not After : Jun 14 15:00:41 2026 GMT
Subject: CN=e9278e30cc1a1446571e60088cf1e4ca26e8cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:44:9a:53:cd:a0:43:8e:7b:65:66:75:c7:
57:ab:9d:dd:99:69:d0:f3:b1:75:82:ea:93:89:d7:
64:53:80:a7:89:70:a7:c0:d8:dd:8b:13:34:1f:11:
31:00:c3:42:de:d2:09:30:54:57:45:72:d8:cf:f9:
4d:73:b4:1c:38:f6:87:f8:a9:9c:64:7e:42:13:fa:
47:80:b1:0e:8b:8b:11:6b:38:70:4b:a6:17:4e:04:
7c:cb:c6:e6:89:89:08:e7:dc:91:d7:9a:69:32:05:
27:cb:8e:63:56:15:af:bb:02:ee:0a:de:0c:32:4b:
33:60:42:d0:8f:68:d0:94:d1:b1:65:bc:6d:81:df:
35:0a:44:5d:b3:6c:d2:9e:61:3f:f8:fe:10:17:e9:
a7:4a:6e:7c:73:59:1a:ad:2e:c7:29:b9:eb:c6:47:
2f:99:c2:f4:b0:87:5b:4e:90:82:4e:2e:70:a6:81:
f9:5d:68:b9:8d:10:bb:f1:35:68:93:00:8e:78:a9:
40:47:12:30:16:cc:24:7e:5b:9a:54:fa:d7:8f:91:
a0:0b:de:ef:a9:b2:6f:23:6d:8f:5a:a9:57:60:cf:
c5:26:3f:f3:42:70:0c:49:ea:9a:57:5e:88:9c:82:
0e:7a:03:4d:d7:bd:50:1b:f5:2f:9f:7e:d9:4d:17:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:8E:30:CC:1A:14:46:57:1E:60:08:8C:F1:E4:CA:26:E8:CD:E6
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:89:57:5b:b0:ac:e3:1d:6f:fd:6f:8d:d0:1f:9b:49:a9:d6:
3e:61:58:bc:a4:5e:7d:6b:b8:bf:ee:45:f2:05:07:3e:52:78:
32:fc:0a:a3:72:89:13:34:20:30:05:fa:ea:f4:4d:d3:3f:d3:
fd:17:6e:bf:e3:a7:be:ee:d8:94:68:b0:9e:4d:db:05:ca:ca:
af:bd:6b:14:fa:23:5e:9d:e0:66:1c:e2:5c:b6:06:da:38:54:
77:5f:92:33:0f:a5:c9:01:fc:0c:f8:95:b8:99:ab:af:5b:eb:
ca:ed:73:5e:ff:4b:b7:7c:c1:9b:c4:70:97:80:6c:4b:92:f1:
42:b0:0d:0c:97:c1:f7:89:ef:57:56:6c:91:69:c3:99:a2:f8:
5c:7f:f6:77:ff:ec:e2:25:50:e0:f0:01:73:be:b8:13:59:81:
8f:25:f4:8e:75:b9:0a:91:2d:a0:c3:3a:99:a3:af:bd:d4:30:
5b:43:e6:b0:d7:8b:2a:bd:07:69:4c:92:1f:8c:93:b4:fa:bf:
78:fe:0f:56:3e:d0:0c:6e:3a:7f:c7:29:a2:88:96:fb:a0:12:
b3:c7:bc:f8:5e:cb:7f:36:43:c3:8e:6b:d1:b5:31:88:df:46:
93:5d:f2:d8:33:58:e5:d2:b4:3e:e4:5b:42:7d:19:85:9b:17:
84:80:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:09 2026 by rpki-client