Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: jQsR5KX6M7Cv2GWVfaTeJJbSTvKG8KqywEvvLCfRYMI=
Subject key identifier: 31:FB:7E:36:7E:42:CD:A1:C5:4F:3F:A8:D7:2D:52:EA:34:1F:CE:33
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019EC36E05B2ADA0EF9174893888F7201263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 0149
Signing time: Sun 14 Jun 2026 00:00:27 +0000
Manifest this update: Sun 14 Jun 2026 00:00:27 +0000
Manifest next update: Mon 15 Jun 2026 00:00:27 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: 3wXJawtVYLmsM4IajCcNixRGgOf3tFXxcHrJd3icBBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:05:b2:ad:a0:ef:91:74:89:38:88:f7:20:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Jun 14 00:00:27 2026 GMT
Not After : Jun 15 00:00:27 2026 GMT
Subject: CN=31fb7e367e42cda1c54f3fa8d72d52ea341fce33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:db:41:5a:8a:80:4c:25:03:60:fb:68:47:
34:53:4a:94:83:eb:f3:ca:b3:2a:ba:fb:b7:0f:be:
64:c0:5c:30:73:e4:6e:36:76:44:28:38:ba:49:b4:
14:17:e6:90:fc:d4:62:5a:ad:b7:9a:26:dd:f1:6a:
a5:8d:52:6c:4f:06:d7:32:9f:bf:b5:20:8b:bc:d2:
c0:0b:ca:06:65:c7:74:b7:ad:7b:a4:1d:39:60:5a:
43:74:1f:14:46:74:1e:19:b7:29:f6:8a:ec:f9:63:
5b:ec:03:9b:79:11:78:10:85:d5:7d:c1:66:8e:49:
6d:fb:d6:29:82:67:0f:03:4d:74:0a:dd:79:63:eb:
67:c3:be:d0:63:1a:63:f7:f5:ea:5d:fa:c0:7c:6d:
28:e1:69:54:33:91:3d:b3:48:f6:2b:33:78:9e:28:
62:be:93:50:49:c4:20:29:94:9c:96:31:d1:5c:81:
1d:dc:03:b3:cb:d7:d5:64:cd:f6:b3:06:62:36:b4:
09:46:53:a0:4c:87:0e:d1:f0:de:76:84:50:87:89:
b3:48:b4:35:ff:37:2b:10:d3:e6:5d:d6:34:25:ba:
07:8d:01:07:dd:f5:ce:60:2b:3e:08:3f:8c:60:ff:
3f:dd:9f:da:0f:04:f8:69:0e:76:30:c5:29:40:85:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:7E:36:7E:42:CD:A1:C5:4F:3F:A8:D7:2D:52:EA:34:1F:CE:33
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3c:17:82:f5:3c:11:81:16:2b:fa:63:93:a6:a1:19:ae:10:
c6:21:c8:bd:02:7c:92:4e:8f:06:90:67:2b:4a:b1:c0:c2:90:
ef:52:09:cf:71:e8:4f:d4:bb:4c:51:5b:17:99:9b:5b:f1:88:
c0:dc:81:0d:fe:9b:cb:af:40:6b:08:bb:ae:e2:36:2b:ad:a8:
8f:06:60:1c:60:94:5b:5e:e3:56:c6:be:d0:17:e9:6e:16:42:
17:cd:7a:ab:8d:33:25:9c:63:d2:90:0c:4b:ec:f0:e5:17:07:
c0:db:8e:6d:25:13:ee:29:08:1f:f6:63:95:d6:e3:12:33:22:
6d:17:95:fd:5f:d7:26:5c:2d:49:d7:c4:57:bb:ce:1e:1a:ca:
b9:5e:78:89:a0:b9:07:a7:ce:b7:94:dd:c6:d6:35:3c:5f:f9:
c8:2b:2b:58:89:53:66:53:c4:58:5d:b6:97:71:b6:57:90:33:
9f:25:06:6c:70:c6:15:fd:af:28:3a:9e:4c:ad:66:94:63:0d:
12:6e:f6:54:3b:97:59:f7:a2:9c:3e:80:62:cf:c7:96:1c:7d:
41:26:9a:c6:0e:4c:73:f5:5a:55:33:1c:17:e9:c5:75:4a:14:
29:92:c9:d5:bd:4f:9e:20:55:8c:cc:ef:f9:94:8a:4e:c8:44:
4c:ac:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:08:58 2026 by rpki-client