Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: mfJwDzkakKWBXCtFP0vRR6PI0CImshs8Z7QyrmwheGM=
Subject key identifier: 5A:57:4E:7C:AF:51:60:75:EF:CA:29:64:FE:64:C5:77:71:B3:A3:2E
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019E1D90C1BFA041B0F692F33D1FD9E2D181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: R5pPdV0PAQXuwQxhloj38jULZTFG+v1/zzCERCS181s=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c1:bf:a0:41:b0:f6:92:f3:3d:1f:d9:e2:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=5a574e7caf516075efca2964fe64c57771b3a32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:33:6f:9f:de:c6:c2:0e:2d:36:c9:e8:52:
73:5e:00:bf:cc:26:a0:7d:86:b1:0b:bb:27:e9:9e:
e3:e3:43:0a:7f:6a:d0:30:f2:a7:bc:73:6f:be:99:
8a:aa:b3:63:96:2b:ec:69:7f:ae:fd:68:db:d5:a5:
2d:53:56:52:96:d8:18:5d:d4:fa:1f:76:df:c6:c0:
a6:e0:d4:98:d2:bb:6b:f8:2b:ab:7b:0f:87:73:c7:
37:bc:e2:29:40:91:af:fb:20:ab:e6:fa:82:39:30:
23:db:94:1e:fb:44:6a:15:53:20:c4:d2:1c:39:0f:
dc:cf:5d:ae:78:e3:e0:2c:55:3e:03:18:18:e4:84:
87:51:be:43:0f:a8:e0:9b:e7:f6:4c:25:a1:2e:11:
9f:75:dd:0c:f7:a9:5f:dd:a2:3f:af:f5:17:40:84:
66:bc:73:c6:44:18:72:82:7a:33:2b:9a:97:6e:e2:
dc:ce:a1:34:2b:e7:b7:82:d0:02:3f:e3:31:c6:11:
46:24:15:8f:58:14:4e:dc:e4:9a:ec:13:b1:89:02:
eb:21:45:fd:81:17:2f:fb:95:64:3b:df:8a:2c:c7:
47:a2:36:e7:c8:0a:4c:38:39:b3:9d:3a:2c:e2:bc:
a7:fd:f4:13:e5:94:93:6e:8d:ac:d6:5c:8e:62:bb:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:4E:7C:AF:51:60:75:EF:CA:29:64:FE:64:C5:77:71:B3:A3:2E
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e4:19:98:a7:92:c5:a9:45:40:c9:a9:81:18:60:e4:c0:94:
f0:dd:b7:e4:db:e8:26:64:c9:22:a3:c7:17:2e:d4:d1:85:58:
56:94:39:a2:b0:3a:bc:ff:8c:4e:40:dd:26:24:8b:9e:9f:90:
cf:26:70:c7:38:1f:a0:94:e7:95:9b:6f:60:d2:b8:a6:83:49:
41:bf:92:ec:70:af:d5:11:58:31:2c:b1:94:34:05:1e:76:5f:
7f:a2:7e:9b:70:42:5d:88:a2:22:bf:35:ae:c6:b8:e7:fc:b5:
3d:b9:64:81:06:bc:d8:fc:ea:e5:de:6e:79:54:12:58:05:ae:
5b:12:56:61:cf:03:a6:69:72:02:4a:54:10:58:ee:d9:2e:d2:
17:80:a9:e2:48:ca:fc:27:4a:4d:3a:0c:db:bc:99:dd:91:c0:
8a:6e:a8:33:22:cc:cb:8a:86:55:75:bf:43:0a:36:7e:d5:0a:
27:a7:d6:b5:e5:86:63:a3:9f:9e:4d:78:0f:dd:c2:f5:da:fb:
12:f1:3f:55:c5:d2:3b:62:20:85:94:ba:0d:bd:2a:2d:90:a8:
81:91:ea:0d:c6:d5:91:c5:fb:51:2c:99:d1:55:a4:62:e7:28:
65:76:69:74:3c:46:0f:ab:ee:98:b0:5e:6f:38:0c:8d:60:eb:
97:6d:7b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkMG/oEGw9pLzPR/Z4tGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjYwNTEyMTkwMTI2WhcNMjYwNTEzMTkwMTI2WjAzMTEwLwYDVQQD
Eyg1YTU3NGU3Y2FmNTE2MDc1ZWZjYTI5NjRmZTY0YzU3NzcxYjNhMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDszb5/exsIOLTbJ6FJzXgC/zCag
fYaxC7sn6Z7j40MKf2rQMPKnvHNvvpmKqrNjlivsaX+u/Wjb1aUtU1ZSltgYXdT6
H3bfxsCm4NSY0rtr+Curew+Hc8c3vOIpQJGv+yCr5vqCOTAj25Qe+0RqFVMgxNIc
OQ/cz12ueOPgLFU+AxgY5ISHUb5DD6jgm+f2TCWhLhGfdd0M96lf3aI/r/UXQIRm
vHPGRBhygnozK5qXbuLczqE0K+e3gtACP+MxxhFGJBWPWBRO3OSa7BOxiQLrIUX9
gRcv+5VkO9+KLMdHojbnyApMODmznTos4ryn/fQT5ZSTbo2s1lyOYruSZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpXTnyvUWB178opZP5kxXdxs6MuMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheQZmKeS
xalFQMmpgRhg5MCU8N235NvoJmTJIqPHFy7U0YVYVpQ5orA6vP+MTkDdJiSLnp+Q
zyZwxzgfoJTnlZtvYNK4poNJQb+S7HCv1RFYMSyxlDQFHnZff6J+m3BCXYiiIr81
rsa45/y1PblkgQa82Pzq5d5ueVQSWAWuWxJWYc8DpmlyAkpUEFju2S7SF4Cp4kjK
/CdKTToM27yZ3ZHAim6oMyLMy4qGVXW/Qwo2ftUKJ6fWteWGY6Ofnk14D93C9dr7
EvE/VcXSO2IghZS6Db0qLZCogZHqDcbVkcX7USyZ0VWkYucoZXZpdDxGD6vumLBe
bzgMjWDrl217Xw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:54:17 2026 by rpki-client