Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: l8NDr1YED51/Js38zws/iNanUNWSgQWgAkmteJX78Xw=
Subject key identifier: CD:C3:9B:5E:21:9E:49:68:02:40:D7:3E:18:26:42:45:89:4D:0C:F6
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019EC0A42A04536E79632217D95C24D4B055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:44 +0000
Manifest this update: Sat 13 Jun 2026 11:00:44 +0000
Manifest next update: Sun 14 Jun 2026 11:00:44 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: tM31ce/k6BU37zElFMY5ZgsV+mBmIkaYzIbzmEH/78U=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:2a:04:53:6e:79:63:22:17:d9:5c:24:d4:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jun 13 11:00:44 2026 GMT
Not After : Jun 14 11:00:44 2026 GMT
Subject: CN=cdc39b5e219e49680240d73e18264245894d0cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:07:a5:59:0c:12:0e:af:b1:d6:76:12:93:
f3:8c:9e:49:71:65:b0:13:de:9b:c3:d7:35:c2:0c:
3f:a7:3f:0b:8c:f8:29:8e:05:70:38:48:e8:fb:94:
6e:02:fd:dd:58:c8:3f:16:79:11:a3:37:e2:0f:c1:
0e:74:74:57:d8:01:f9:5a:d0:2d:51:da:7a:61:8c:
bf:a3:87:14:23:e9:1d:f5:d0:06:c6:5d:74:07:d8:
f5:d8:41:92:e1:0d:cc:c6:86:9b:58:14:da:da:a8:
fd:70:d1:b5:d9:76:6b:c4:15:f5:b7:76:f9:77:a3:
52:5b:a4:f9:6b:1e:c8:65:b3:27:1b:98:70:99:bc:
1d:d5:03:c4:35:fc:d7:33:ec:94:cc:fc:d4:ef:b6:
e4:3a:17:bb:93:c2:cf:6a:10:c5:9f:bc:b9:a9:38:
20:bf:42:ec:1a:2d:bc:9b:c5:6f:04:67:3e:91:33:
db:bb:f1:90:29:ad:15:80:0d:5e:32:b0:e9:c9:6a:
c3:38:eb:cf:46:a8:4b:6d:41:ff:af:bc:2e:de:8f:
e0:48:31:da:0c:ec:f5:b7:ec:d7:44:b2:8d:86:aa:
92:e0:70:11:5d:e8:e0:57:39:e3:14:87:e7:f0:29:
c5:53:d9:ce:66:28:e7:d0:52:61:f9:56:92:cf:24:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:9B:5E:21:9E:49:68:02:40:D7:3E:18:26:42:45:89:4D:0C:F6
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:96:a0:4f:f5:31:9c:90:1d:32:3f:a8:5e:30:63:44:cb:
49:1e:04:c4:8e:b5:03:b9:13:67:9f:fd:1d:74:c1:68:b8:db:
38:44:6f:47:95:4c:c7:87:04:09:36:f9:d1:fc:ac:c4:bc:6e:
fa:30:de:2d:6d:55:7c:5e:73:ed:b4:60:7d:bb:58:cc:ab:69:
c4:6c:4b:24:91:e0:96:c4:10:54:18:bd:9e:b3:8c:3f:ef:51:
6e:59:8a:57:de:d9:2f:b8:86:cb:52:55:cb:d6:9c:42:60:58:
d3:6f:4a:52:c9:6f:94:28:35:74:5d:af:fc:26:ac:26:68:88:
fa:af:00:54:35:e8:bf:26:4b:36:70:08:3b:23:0a:de:6e:35:
ee:2b:01:d6:26:39:0a:79:a6:67:c5:54:e9:44:67:93:9f:d3:
04:99:b8:9e:1e:59:84:62:76:95:9c:93:9d:9b:f6:ce:24:0d:
d0:02:43:f4:6b:56:c4:7c:bc:22:59:67:bb:b5:40:2c:f5:dc:
ae:7d:bf:7b:3a:93:b3:25:c2:9f:a4:5c:fa:80:fd:c6:d7:f0:
0a:74:1b:e2:47:e2:5b:65:91:58:db:e7:45:e6:51:bc:e8:db:
99:a2:f9:07:9e:3d:0c:9e:ba:72:7a:87:c7:4e:45:e0:f1:56:
5d:7a:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:27 2026 by rpki-client