
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: mhm/WLsR9NSG7zC/O3DM71gh38x3Vqbm4mIVlG3BKtw=
Subject key identifier: BE:A0:19:D5:65:21:1F:F2:ED:03:54:6B:9C:50:23:5C:99:47:16:46
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019EBE7F9502F6F6F9AB969A823D6B440B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 14B6
Signing time: Sat 13 Jun 2026 01:01:32 +0000
Manifest this update: Sat 13 Jun 2026 01:01:32 +0000
Manifest next update: Sun 14 Jun 2026 01:01:32 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: 0lVYN+/n0aZkZGQfO3KXP+94riXtSutGYG2g6gl1Tdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:95:02:f6:f6:f9:ab:96:9a:82:3d:6b:44:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jun 13 01:01:32 2026 GMT
Not After : Jun 14 01:01:32 2026 GMT
Subject: CN=bea019d565211ff2ed03546b9c50235c99471646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:5c:d1:68:01:dd:2c:ed:c2:04:33:22:4e:
eb:f7:5a:20:83:b9:f1:99:8a:98:ae:94:65:84:eb:
f4:6f:53:9a:49:f5:23:a8:fa:ff:71:ac:5d:92:08:
85:2c:32:d9:eb:07:a3:ef:5c:d6:96:8c:68:36:44:
b7:d7:8e:d6:70:eb:7b:9b:0a:b6:0b:25:fa:3d:f8:
fc:f1:3c:05:9c:07:6b:db:de:ec:dd:7f:2f:d9:60:
17:c7:8b:75:7e:2b:01:e6:67:c1:08:73:f6:4d:68:
9a:c6:a8:32:6c:06:0e:a7:5a:69:58:23:ba:55:cf:
f7:3b:bd:a7:47:74:3d:a7:1d:07:ae:fd:cb:dd:98:
7e:06:2f:48:c7:9e:01:e8:fa:c2:5e:4e:1f:13:f5:
53:1e:50:7e:03:af:0d:ed:1c:e6:b8:6e:3a:5a:f3:
ce:5f:d1:f9:5a:68:5f:1f:42:5b:e6:99:e3:5b:92:
ed:48:95:42:4e:7a:12:55:41:a8:9f:56:9d:f9:0e:
27:4e:c1:7d:49:0e:9d:83:3d:88:c0:07:20:84:5f:
6e:5a:68:58:1a:6a:c1:c1:4a:41:61:0d:40:a6:24:
00:ab:eb:53:04:95:d1:1d:60:7d:7d:61:76:df:92:
c7:65:18:f1:b7:5c:01:93:76:14:6e:c5:e2:a6:4d:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:19:D5:65:21:1F:F2:ED:03:54:6B:9C:50:23:5C:99:47:16:46
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:ff:d0:a0:12:6e:28:b4:6a:44:34:49:ec:be:57:45:77:
6d:a2:0f:9a:1f:6a:54:03:90:1b:2c:3e:9b:75:c2:d2:8e:5a:
03:bb:ac:1e:96:11:db:7f:25:3d:73:a6:51:93:bb:db:a5:4a:
7b:8e:99:67:b9:31:d5:df:66:4b:20:37:56:37:59:a5:46:19:
2a:8b:58:99:f4:30:23:72:26:23:c9:cb:17:31:1c:a3:b2:41:
95:08:81:d0:8d:57:cc:02:75:91:e0:03:8a:a0:0b:de:4f:90:
29:25:80:1d:bf:26:7b:bc:83:a0:34:a8:48:5d:02:de:1b:ce:
ff:e9:2a:9e:a4:57:aa:07:24:0d:a0:52:08:03:7c:ff:ab:8f:
e2:7b:65:be:29:1c:d6:16:ef:ef:b9:95:d9:3a:3d:08:3b:35:
3c:90:d2:b5:28:5c:a3:96:eb:ea:a2:1a:ef:9c:3f:8b:3e:11:
27:47:12:1e:c3:27:16:da:bd:c8:b8:23:17:fa:de:5c:4a:74:
08:de:0b:ac:2d:bd:5f:82:88:35:28:db:f8:0a:83:90:2d:e7:
d7:bf:f3:cb:eb:09:38:9c:7f:c2:5b:3e:1c:22:26:e9:30:bf:
10:0a:4b:16:34:f7:89:ce:b1:d1:0f:dc:d4:b6:8f:ee:85:8c:
10:a7:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:57 2026 by rpki-client