Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: 24ZKiRu0iGEMJPPiCfwrMQvdJTPGDWL6meRvhj29PQQ=
Subject key identifier: FA:17:5C:FF:3F:DB:2F:27:C4:7E:F3:E5:8C:0A:9C:5D:CB:97:1F:11
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019EC17F7B4A71F54B407EC411F03C797DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1661
Signing time: Sat 13 Jun 2026 15:00:17 +0000
Manifest this update: Sat 13 Jun 2026 15:00:17 +0000
Manifest next update: Sun 14 Jun 2026 15:00:17 +0000
Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: SlyiVSSaug3AxOvfDI3dDIkHNjFBnG+d/zLLwONmPyQ=)
3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:7b:4a:71:f5:4b:40:7e:c4:11:f0:3c:79:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jun 13 15:00:17 2026 GMT
Not After : Jun 14 15:00:17 2026 GMT
Subject: CN=fa175cff3fdb2f27c47ef3e58c0a9c5dcb971f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:a7:b3:f3:9e:9c:1d:32:ae:19:d6:ec:c0:
6d:61:78:6d:0e:25:bc:a3:5c:08:38:be:3e:7d:0e:
7f:4e:da:94:47:71:7f:30:5b:e8:97:64:e5:9b:ad:
cf:09:64:39:d1:1a:1b:81:4d:15:e8:f2:38:17:7c:
c1:72:e4:bc:12:95:9f:b4:05:85:d6:19:2f:19:a7:
2f:41:c1:8f:24:c5:d2:19:e7:b5:af:8a:e9:8b:e3:
67:23:d8:c8:fc:43:a3:49:fd:09:19:17:4d:bb:47:
5f:01:4b:e8:2c:76:8e:91:f7:36:f1:32:72:a9:0f:
57:01:d8:4a:99:8c:90:f3:87:41:68:29:ff:d0:ee:
77:a0:49:9d:d5:53:9c:05:aa:8e:02:fb:5b:99:65:
62:97:a8:d0:0e:6d:79:04:7c:6b:8a:05:55:cb:2c:
56:56:08:2c:5f:93:eb:44:10:af:0b:d5:40:f6:d8:
1e:eb:5c:22:5d:66:92:d3:61:a9:f7:bf:b7:21:5c:
3e:f9:82:4c:03:48:b1:67:fd:a4:a8:72:de:8b:f2:
78:06:c8:40:5d:36:65:80:2c:a7:26:65:4e:a0:19:
93:c4:bb:01:8b:a2:c3:9c:de:50:c1:b4:88:fb:72:
24:e2:d6:73:46:77:4c:b1:5b:5f:62:ef:c6:8e:45:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:5C:FF:3F:DB:2F:27:C4:7E:F3:E5:8C:0A:9C:5D:CB:97:1F:11
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:84:ce:14:ea:79:a3:fc:02:7b:8d:2d:ed:e2:78:fb:0a:10:
06:f5:cf:4d:58:de:cf:e6:c4:84:1f:39:d8:53:b1:43:de:33:
31:0e:ae:24:0c:35:78:40:84:76:b7:6a:9d:26:d8:b9:16:45:
68:55:5d:a5:5a:94:6d:bc:45:bb:a5:6e:d3:32:2d:c1:59:c7:
73:b1:31:09:56:8f:c8:93:43:ac:fb:7d:5f:4b:ca:b0:35:92:
a9:04:9d:f8:88:41:d2:bd:cd:49:23:b0:0e:9a:30:09:36:0c:
4f:c6:be:53:73:4a:7f:2f:2f:84:3f:12:ad:17:3f:ff:7b:96:
13:b0:64:6d:e9:44:a0:6b:1f:d7:f2:cb:1b:88:82:05:09:52:
47:27:5d:46:f5:d6:e2:02:a0:c1:03:ad:cf:04:38:a5:14:e1:
40:f8:2c:f5:8e:af:8f:e9:3b:ef:bd:af:57:97:af:b8:06:3c:
b4:16:aa:a5:cb:ac:e0:c2:b9:7d:2c:9d:f7:d6:87:87:87:ff:
23:a8:99:cf:37:be:07:49:d5:7e:ec:c1:19:ba:88:ac:aa:e7:
ad:6e:75:f2:5a:c4:f6:0e:c1:e2:52:b5:12:f5:7d:5c:44:40:
fe:8c:33:ed:f3:4c:5b:47:2b:34:2c:69:53:e7:30:9a:be:ed:
2c:c7:c7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf3tKcfVLQH7EEfA8eX3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi
YjgwOTIwHhcNMjYwNjEzMTUwMDE3WhcNMjYwNjE0MTUwMDE3WjAzMTEwLwYDVQQD
EyhmYTE3NWNmZjNmZGIyZjI3YzQ3ZWYzZTU4YzBhOWM1ZGNiOTcxZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lins/OenB0yrhnW7MBtYXhtDiW8
o1wIOL4+fQ5/TtqUR3F/MFvol2Tlm63PCWQ50RobgU0V6PI4F3zBcuS8EpWftAWF
1hkvGacvQcGPJMXSGee1r4rpi+NnI9jI/EOjSf0JGRdNu0dfAUvoLHaOkfc28TJy
qQ9XAdhKmYyQ84dBaCn/0O53oEmd1VOcBaqOAvtbmWVil6jQDm15BHxrigVVyyxW
VggsX5PrRBCvC9VA9tge61wiXWaS02Gp97+3IVw++YJMA0ixZ/2kqHLei/J4BshA
XTZlgCynJmVOoBmTxLsBi6LDnN5QwbSI+3Ik4tZzRndMsVtfYu/GjkXZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoXXP8/2y8nxH7z5YwKnF3Llx8RMB8GA1UdIwQY
MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt
Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj
LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4TOFOp5
o/wCe40t7eJ4+woQBvXPTVjez+bEhB852FOxQ94zMQ6uJAw1eECEdrdqnSbYuRZF
aFVdpVqUbbxFu6Vu0zItwVnHc7ExCVaPyJNDrPt9X0vKsDWSqQSd+IhB0r3NSSOw
DpowCTYMT8a+U3NKfy8vhD8SrRc//3uWE7BkbelEoGsf1/LLG4iCBQlSRyddRvXW
4gKgwQOtzwQ4pRThQPgs9Y6vj+k7772vV5evuAY8tBaqpcus4MK5fSyd99aHh4f/
I6iZzze+B0nVfuzBGbqIrKrnrW518lrE9g7B4lK1EvV9XERA/owz7fNMW0crNCxp
U+cwmr7tLMfHMg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:17:01 2026 by rpki-client