Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
File: QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft (raw, json)
Hash identifier: zabhX9aVzebqDTdVN77wVlzsElbx3v4I86Hki4ZHHtY=
Subject key identifier: 33:79:82:A8:A5:A4:52:1A:3E:F6:73:D9:93:22:96:91:25:CA:58:D1
Authority key identifier: 40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
Certificate issuer: /CN=404284388e4d8b78e562e7b140dc358d4114c027
Certificate serial: 019FAC764B5C4C3EDCD1F9D94DEEED2BD427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:01 +0000
Manifest this update: Wed 29 Jul 2026 06:01:01 +0000
Manifest next update: Thu 30 Jul 2026 06:01:01 +0000
Files and hashes: 1: QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl (hash: vbVAQfdytLMFT7XccfdvEivB6US50S5BEck4ETcGLpU=)
2: b9pucImMRklKE9H42beKCpH3jZQ.roa (hash: XLI5TKkW0eaR8i+yOT6IlSkbxxb0vfR2ygO3TPOk8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:4b:5c:4c:3e:dc:d1:f9:d9:4d:ee:ed:2b:d4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404284388e4d8b78e562e7b140dc358d4114c027
Validity
Not Before: Jul 29 06:01:01 2026 GMT
Not After : Jul 30 06:01:01 2026 GMT
Subject: CN=337982a8a5a4521a3ef673d99322969125ca58d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:f0:4b:8d:cc:dd:f7:06:b6:93:0f:e5:00:
42:06:f7:44:74:79:07:5f:00:29:f1:b7:2d:e2:b5:
1c:cf:06:53:aa:45:cd:9b:c0:41:a7:f4:ff:c2:01:
23:64:fd:3b:fd:92:72:e7:b5:fc:cd:b8:5f:cc:1e:
1a:56:66:b6:b7:cd:ab:06:d0:b9:8e:c8:9c:ec:40:
59:31:53:9c:15:8e:e3:d8:69:79:ba:17:41:0c:d5:
b5:aa:15:c0:60:5a:50:3e:7e:89:c5:b1:21:8e:04:
1d:70:e6:c0:34:4f:74:26:45:62:f0:ae:09:2c:10:
2d:7f:7c:3f:a8:3f:87:5b:e3:17:23:42:12:14:b3:
1d:d0:02:57:7e:29:5a:ae:99:36:7e:c4:c6:2f:9e:
a8:d2:67:32:08:e1:9b:0d:62:54:5f:d0:67:85:10:
59:b1:f0:50:eb:23:7a:0c:fd:13:2f:9c:6e:67:16:
da:26:76:24:08:82:4f:ca:8b:11:03:b4:b8:7d:20:
1e:93:b0:0c:a5:04:c3:8e:e6:b5:47:ce:18:6a:ec:
f3:1e:da:67:78:4c:b6:5c:05:00:ab:f0:55:27:50:
b3:e7:2e:9c:b2:27:03:df:f4:b9:a9:7c:5b:03:42:
14:b1:71:f4:f7:64:5b:54:e2:bf:b5:c6:84:47:35:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:82:A8:A5:A4:52:1A:3E:F6:73:D9:93:22:96:91:25:CA:58:D1
X509v3 Authority Key Identifier:
keyid:40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:be:2f:27:f5:b6:cc:46:16:45:aa:e2:1d:25:4e:91:8b:
a3:d4:14:77:61:85:bf:07:7b:63:70:7c:6f:2f:a1:74:22:4d:
30:26:42:ef:91:f9:7a:8a:7b:79:24:6a:37:d8:30:4f:69:e0:
2f:3b:cf:3e:cf:00:9c:e5:5c:68:a7:4d:c6:45:de:ed:d2:24:
67:d4:71:73:89:70:1c:c8:12:66:08:dd:38:7a:57:07:21:70:
c4:69:f2:d7:68:5d:94:c8:8a:e3:f0:26:23:45:4f:d7:28:0b:
ce:11:4c:6f:44:64:42:ad:47:67:3a:93:49:99:86:2d:69:10:
4c:d3:39:32:e4:31:38:41:90:b4:d1:6c:53:db:59:04:91:59:
6f:f1:1b:8b:05:c5:0d:3c:50:fa:c4:c4:cb:e8:76:7c:85:28:
d3:9e:f2:38:3f:49:4b:9e:66:46:06:e8:53:1f:8f:60:4f:4d:
c0:da:ae:fa:5b:a1:72:1f:97:44:a0:4a:98:6a:60:f3:41:7b:
f0:16:3b:3f:67:04:c5:b9:22:95:15:3b:48:8d:0a:d9:07:7d:
0f:5f:38:62:0a:b9:9f:c9:d4:a3:cf:59:40:04:46:90:db:21:
0e:f7:64:c9:96:24:22:27:2e:24:e5:20:46:06:dd:2a:3a:74:
ff:40:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:46 2026 by rpki-client