Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: B6ahdaDk+MxqrswruXTlmnCxT0BxP+8ixAA2PWWqLoI=
Subject key identifier: EC:8C:94:AC:B4:FF:C0:91:87:D7:71:01:71:3D:A4:CF:F9:1E:EF:49
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019EC0362037706BC7FF9AA50D1D423BB782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 16E4
Signing time: Sat 13 Jun 2026 09:00:33 +0000
Manifest this update: Sat 13 Jun 2026 09:00:33 +0000
Manifest next update: Sun 14 Jun 2026 09:00:33 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 13Mpyyff9Ap5Jm8AWBgbNgPZ2+yLl15NsKmT4lyhX2E=)
3: d4L-Ywam3q9FKYpyHF6Nixngago.asa (hash: zY2cIfwxMRiOqaAZBQMaP/RsPvaaJfXbxud7F/yA2YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:20:37:70:6b:c7:ff:9a:a5:0d:1d:42:3b:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jun 13 09:00:33 2026 GMT
Not After : Jun 14 09:00:33 2026 GMT
Subject: CN=ec8c94acb4ffc09187d77101713da4cff91eef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:93:0f:08:94:e3:da:57:1c:6a:c4:a3:b5:
85:db:d1:09:b5:71:a6:b6:d0:fc:87:bf:1b:8e:46:
65:aa:6c:6e:64:0b:a6:44:4a:56:0a:e8:4f:47:e7:
f1:3e:b9:e9:fa:88:50:51:ae:b0:a4:b0:19:98:02:
3e:d2:41:f7:ff:bc:ba:43:28:7d:89:a4:d5:07:e9:
87:5f:78:62:65:e5:f8:a2:b8:49:8a:23:c4:d3:65:
b6:24:e4:76:fc:46:b1:ed:0f:f0:dc:c7:b0:e0:90:
d6:bc:17:5f:b3:2f:bf:3e:22:cf:3d:b9:d0:9c:77:
07:55:85:b8:7e:ca:82:aa:e3:13:94:46:6a:7b:b2:
15:b9:4f:76:e6:62:6e:e7:09:05:fe:1e:87:6d:a9:
b3:37:d0:02:85:36:78:6d:8f:f7:0e:96:63:7a:69:
83:5c:33:91:5c:19:32:eb:28:fa:1c:98:f3:ee:61:
f3:a4:29:12:d9:f1:b5:30:f7:87:53:59:47:34:e8:
68:e6:55:7a:da:c4:10:be:cb:28:d3:1c:43:6b:f5:
b6:b6:e3:c5:62:ca:56:37:6a:c0:0b:ba:68:ec:42:
20:d1:62:6e:12:7f:c7:8b:3e:b8:17:b8:af:95:0f:
19:02:68:b6:0e:b2:d9:42:ec:2e:71:7a:6f:6d:69:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8C:94:AC:B4:FF:C0:91:87:D7:71:01:71:3D:A4:CF:F9:1E:EF:49
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7f:c2:3d:53:f4:ed:85:c9:71:66:28:77:71:2e:ea:e7:75:
de:26:2c:e1:98:07:7f:f8:2a:24:fe:4e:f7:6d:af:d7:75:0a:
b0:7e:a2:77:d9:b8:47:0b:9c:2c:40:d8:e6:b5:c3:eb:95:99:
b5:27:f9:44:c4:31:bb:c6:e9:e6:c6:c8:53:3a:0a:c3:59:93:
bc:93:f8:b5:1e:7d:a3:da:fc:05:01:d2:34:1f:9f:1b:9b:b9:
11:f7:63:86:09:ac:22:0e:fb:af:cc:7a:3a:d4:fa:80:80:03:
0d:9f:93:27:d2:2a:4a:78:38:80:79:3b:39:04:6b:ce:1e:c7:
6b:5d:5a:e0:b3:3c:e6:51:dc:2a:92:91:e5:d0:61:d6:42:4b:
09:fb:20:1e:53:64:18:0c:ce:f0:98:38:1a:b8:57:92:61:3e:
c8:4f:35:52:88:97:47:96:80:29:7d:c4:70:25:0f:04:39:4e:
f5:07:75:cc:2a:c6:4f:8e:e1:14:e3:12:ed:4b:b8:c4:a5:75:
4a:fa:bd:b7:c9:29:36:9b:01:a4:f7:52:b4:33:16:30:fc:38:
79:93:d0:a8:a2:90:21:2e:63:5f:c4:3b:f8:3e:76:f9:bc:b1:
3e:6d:09:f8:e1:b4:69:f6:91:d4:ab:3c:4b:03:f0:0c:e9:4e:
4d:2b:06:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANiA3cGvH/5qlDR1CO7eCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw
NmI0YjQwHhcNMjYwNjEzMDkwMDMzWhcNMjYwNjE0MDkwMDMzWjAzMTEwLwYDVQQD
EyhlYzhjOTRhY2I0ZmZjMDkxODdkNzcxMDE3MTNkYTRjZmY5MWVlZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth+TDwiU49pXHGrEo7WF29EJtXGm
ttD8h78bjkZlqmxuZAumREpWCuhPR+fxPrnp+ohQUa6wpLAZmAI+0kH3/7y6Qyh9
iaTVB+mHX3hiZeX4orhJiiPE02W2JOR2/Eax7Q/w3Mew4JDWvBdfsy+/PiLPPbnQ
nHcHVYW4fsqCquMTlEZqe7IVuU925mJu5wkF/h6HbamzN9AChTZ4bY/3DpZjemmD
XDORXBky6yj6HJjz7mHzpCkS2fG1MPeHU1lHNOho5lV62sQQvsso0xxDa/W2tuPF
YspWN2rAC7po7EIg0WJuEn/Hiz64F7ivlQ8ZAmi2DrLZQuwucXpvbWk0IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyMlKy0/8CRh9dxAXE9pM/5Hu9JMB8GA1UdIwQY
MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt
OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw
LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn/CPVP0
7YXJcWYod3Eu6ud13iYs4ZgHf/gqJP5O922v13UKsH6id9m4RwucLEDY5rXD65WZ
tSf5RMQxu8bp5sbIUzoKw1mTvJP4tR59o9r8BQHSNB+fG5u5EfdjhgmsIg77r8x6
OtT6gIADDZ+TJ9IqSng4gHk7OQRrzh7Ha11a4LM85lHcKpKR5dBh1kJLCfsgHlNk
GAzO8Jg4GrhXkmE+yE81UoiXR5aAKX3EcCUPBDlO9Qd1zCrGT47hFOMS7Uu4xKV1
Svq9t8kpNpsBpPdStDMWMPw4eZPQqKKQIS5jX8Q7+D52+byxPm0J+OG0afaR1Ks8
SwPwDOlOTSsGgA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:58 2026 by rpki-client