Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: E1LdEYPaREd0NDmFojBXyKkrC2O3lNzZQk7xIvkXWFQ=
Subject key identifier: B9:03:C9:26:73:9C:A9:78:39:D8:BC:CB:9F:41:F7:03:1C:06:A9:22
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 019ED507487C08651378A4C2E92518AF5B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 10:01:24 +0000
Manifest this update: Wed 17 Jun 2026 10:01:24 +0000
Manifest next update: Thu 18 Jun 2026 10:01:24 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: ZEIo2tTO7knRUpsrjDHPF6afz6EdNpfbIGAqztQ505A=)
2: wt3Ui80OQ2RXah5MDzF8MWqly2Q.roa (hash: J67sJRmcaTP47jMbuSDSqG6+LX3lK8JypZ67sDFFc/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:48:7c:08:65:13:78:a4:c2:e9:25:18:af:5b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Jun 17 10:01:24 2026 GMT
Not After : Jun 18 10:01:24 2026 GMT
Subject: CN=b903c926739ca97839d8bccb9f41f7031c06a922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:70:fa:12:5d:3c:c4:91:7c:4b:12:89:00:
85:fd:44:ff:94:e4:94:6c:c2:21:0a:eb:27:17:4e:
b0:6d:f3:d5:ea:e3:96:14:17:cf:76:b1:56:6f:ac:
f2:9a:67:6f:24:8f:11:b9:5e:fd:b8:77:b6:b3:86:
ea:6c:f5:b0:aa:72:24:42:18:98:ae:65:83:f4:6e:
80:bc:7c:2f:b3:92:8f:cc:62:95:06:71:2b:15:4d:
e0:92:c1:4f:ae:ad:4f:f1:84:2d:49:98:93:dd:20:
3b:5a:c5:61:a9:20:cb:e6:d9:cd:25:a9:d6:1b:a2:
6e:97:8a:04:80:23:c0:aa:5e:1c:2b:ed:d5:0c:24:
ac:d8:bf:dc:f8:1f:57:95:6e:f2:0e:04:a5:a8:29:
fc:d1:cd:bf:54:90:d4:b0:ef:79:db:1b:7b:95:fa:
9b:69:6a:dd:4f:f2:68:94:fb:bb:e1:24:16:90:c5:
28:6d:46:79:6d:30:0b:f4:b1:22:d3:87:b8:00:69:
32:ae:f3:9a:3f:90:73:48:39:bd:71:fb:7e:ea:33:
d4:8e:33:00:b2:28:3e:39:c8:f9:85:e6:9e:80:75:
a0:cf:06:a8:a9:2a:15:f1:fa:c0:a0:02:04:ec:a5:
83:fc:62:0d:3e:d9:5c:83:6e:40:97:f2:28:20:fb:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:C9:26:73:9C:A9:78:39:D8:BC:CB:9F:41:F7:03:1C:06:A9:22
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:4b:c9:87:51:73:df:31:7b:46:55:4e:56:52:73:07:7f:
79:61:0d:9d:57:e2:69:b5:60:50:89:24:da:6d:7b:c6:3b:ba:
ea:93:a2:0e:b7:77:ee:67:20:10:b0:af:e5:bf:4e:38:df:ac:
c4:3a:33:93:78:0a:c2:7c:15:85:45:3e:ba:ee:d5:1f:0c:6b:
22:08:bb:03:93:b8:f3:b8:13:ac:b4:c7:55:57:01:af:de:e6:
f7:ad:5d:65:0c:61:a5:63:a2:81:fa:1d:7a:75:83:31:3c:6d:
61:15:27:74:a4:15:57:fb:30:1f:08:9b:f7:b3:f5:af:0e:07:
1c:af:ae:00:11:fd:63:53:c4:04:56:52:62:25:ab:b8:c4:8d:
d1:52:4d:6b:1a:88:0f:a2:94:c9:68:52:c9:5d:27:6c:21:d7:
c9:a8:8a:a8:cc:98:6b:1a:2c:08:10:2c:74:02:43:02:81:7a:
f8:38:14:fc:4e:b1:43:3b:8e:da:55:70:d7:08:d9:20:36:d0:
56:52:84:e2:d1:38:ff:57:86:95:6a:7f:c2:11:87:6e:14:0e:
d5:f3:14:85:51:44:ce:c6:7d:8d:92:4b:b7:48:81:e2:42:6c:
05:31:00:80:a3:96:72:15:2f:d1:a9:45:a2:b4:45:85:27:fe:
09:75:3a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VB0h8CGUTeKTC6SUYr1ufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1
OTdhMTIwHhcNMjYwNjE3MTAwMTI0WhcNMjYwNjE4MTAwMTI0WjAzMTEwLwYDVQQD
EyhiOTAzYzkyNjczOWNhOTc4MzlkOGJjY2I5ZjQxZjcwMzFjMDZhOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rlw+hJdPMSRfEsSiQCF/UT/lOSU
bMIhCusnF06wbfPV6uOWFBfPdrFWb6zymmdvJI8RuV79uHe2s4bqbPWwqnIkQhiY
rmWD9G6AvHwvs5KPzGKVBnErFU3gksFPrq1P8YQtSZiT3SA7WsVhqSDL5tnNJanW
G6Jul4oEgCPAql4cK+3VDCSs2L/c+B9XlW7yDgSlqCn80c2/VJDUsO952xt7lfqb
aWrdT/JolPu74SQWkMUobUZ5bTAL9LEi04e4AGkyrvOaP5BzSDm9cft+6jPUjjMA
sig+Ocj5heaegHWgzwaoqSoV8frAoAIE7KWD/GINPtlcg25Al/IoIPsJ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkDySZznKl4Odi8y59B9wMcBqkiMB8GA1UdIwQY
MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt
NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm
LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLtLyYdR
c98xe0ZVTlZScwd/eWENnVfiabVgUIkk2m17xju66pOiDrd37mcgELCv5b9OON+s
xDozk3gKwnwVhUU+uu7VHwxrIgi7A5O487gTrLTHVVcBr97m961dZQxhpWOigfod
enWDMTxtYRUndKQVV/swHwib97P1rw4HHK+uABH9Y1PEBFZSYiWruMSN0VJNaxqI
D6KUyWhSyV0nbCHXyaiKqMyYaxosCBAsdAJDAoF6+DgU/E6xQzuO2lVw1wjZIDbQ
VlKE4tE4/1eGlWp/whGHbhQO1fMUhVFEzsZ9jZJLt0iB4kJsBTEAgKOWchUv0alF
orRFhSf+CXU6ag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:20 2026 by rpki-client