Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: /QfGaU153Oh19/Qqj6thcB3Gvxz2rwRovdRQ5diadtA=
Subject key identifier: 07:CD:B6:94:09:9C:CF:9C:45:FD:19:5E:DF:5C:37:76:E1:76:4A:BB
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019E2023EC1CE88AEDDDC146237F4E1FFFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 07:01:25 +0000
Manifest this update: Wed 13 May 2026 07:01:25 +0000
Manifest next update: Thu 14 May 2026 07:01:25 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: gmFt/nYhuE+mZNyt+Q0k56yzC2tVzkONmUuQiBlUUW8=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:ec:1c:e8:8a:ed:dd:c1:46:23:7f:4e:1f:ff:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: May 13 07:01:25 2026 GMT
Not After : May 14 07:01:25 2026 GMT
Subject: CN=07cdb694099ccf9c45fd195edf5c3776e1764abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b0:43:60:55:7c:96:18:d0:14:36:c1:89:fc:
1c:cc:4d:e2:28:9b:26:f5:8a:f7:d3:04:c2:22:95:
04:2a:2f:4c:ed:a1:7d:6a:c0:6f:f4:c2:5f:69:ea:
a6:a4:86:d7:00:82:fb:0c:af:38:db:74:6b:c1:58:
9e:08:6d:5a:7e:03:aa:cc:1d:01:34:71:23:e5:98:
85:70:32:f8:62:84:03:d1:01:82:23:87:ea:56:db:
53:ea:6a:15:84:b7:11:7f:1c:4d:a7:bb:b0:9a:48:
7b:4d:19:90:9f:b8:8c:f7:62:5f:75:58:87:5f:65:
b8:e3:7e:52:a5:f5:2a:df:3d:b7:fb:74:7f:c4:c1:
16:30:2c:5c:da:9e:d1:01:5b:8e:46:af:ce:7e:b8:
97:19:2d:b3:ac:31:dc:2d:4d:7f:3c:17:bc:50:28:
16:b4:95:49:97:41:af:53:80:0b:4e:08:42:5e:55:
76:95:6f:de:79:6d:06:28:70:b0:ad:45:1d:ed:f6:
47:40:9d:62:7a:9f:0d:c1:de:11:48:d3:11:50:13:
cc:4c:26:4b:5f:a0:82:ca:75:6f:0b:6e:97:71:d8:
4b:10:8d:66:15:7c:58:bf:56:95:d8:66:cf:d0:cb:
b9:8c:36:ee:0d:81:3f:a0:e8:17:31:7c:f1:fa:73:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CD:B6:94:09:9C:CF:9C:45:FD:19:5E:DF:5C:37:76:E1:76:4A:BB
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7e:63:8d:f5:13:cc:e9:41:13:66:a9:0b:f3:b5:3b:28:7a:
78:f0:11:3d:2b:42:06:26:94:0f:d7:7d:e7:a2:b1:1b:1a:3a:
21:ed:31:89:7c:59:94:7f:30:31:6a:47:e7:c7:0f:dc:8a:ed:
9f:74:8d:6e:d3:ec:ad:8b:3b:82:af:a8:59:94:1e:19:c5:3a:
e6:d2:71:b2:4b:f2:f0:f2:45:8b:6d:da:d7:d2:f4:86:aa:01:
d5:19:c3:cc:bf:d2:c6:c5:05:c0:77:66:48:ac:42:bc:89:f1:
cc:e9:03:e4:24:0a:ee:c0:d5:d4:ba:92:1d:18:a8:2e:2a:ef:
7e:bc:1c:57:fe:5a:3f:0f:b7:66:97:65:98:14:79:4b:26:2c:
73:85:9e:9f:bf:52:e9:6c:6e:3a:06:f8:2f:46:65:8e:ec:75:
4b:36:b4:8d:b8:5d:84:be:93:1e:6f:72:1e:f2:03:31:be:bd:
65:b9:e8:1f:c5:64:f8:a1:20:d9:fc:5c:f1:35:74:c3:86:60:
23:db:09:97:f0:7b:9a:b0:ac:2a:f0:32:ee:96:7e:f4:21:6f:
ad:04:be:c3:40:22:fa:7a:21:c8:0a:01:70:97:e6:c4:6c:7c:
3e:8c:3b:55:e4:52:1d:fc:a7:d5:65:7d:4f:ea:ab:bc:c5:1f:
f8:92:da:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI+wc6Irt3cFGI39OH/+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjYwNTEzMDcwMTI1WhcNMjYwNTE0MDcwMTI1WjAzMTEwLwYDVQQD
EygwN2NkYjY5NDA5OWNjZjljNDVmZDE5NWVkZjVjMzc3NmUxNzY0YWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bBDYFV8lhjQFDbBifwczE3iKJsm
9Yr30wTCIpUEKi9M7aF9asBv9MJfaeqmpIbXAIL7DK8423RrwVieCG1afgOqzB0B
NHEj5ZiFcDL4YoQD0QGCI4fqVttT6moVhLcRfxxNp7uwmkh7TRmQn7iM92JfdViH
X2W4435SpfUq3z23+3R/xMEWMCxc2p7RAVuORq/OfriXGS2zrDHcLU1/PBe8UCgW
tJVJl0GvU4ALTghCXlV2lW/eeW0GKHCwrUUd7fZHQJ1iep8Nwd4RSNMRUBPMTCZL
X6CCynVvC26XcdhLEI1mFXxYv1aV2GbP0Mu5jDbuDYE/oOgXMXzx+nOkpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfNtpQJnM+cRf0ZXt9cN3bhdkq7MB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn5jjfUT
zOlBE2apC/O1Oyh6ePARPStCBiaUD9d956KxGxo6Ie0xiXxZlH8wMWpH58cP3Irt
n3SNbtPsrYs7gq+oWZQeGcU65tJxskvy8PJFi23a19L0hqoB1RnDzL/SxsUFwHdm
SKxCvInxzOkD5CQK7sDV1LqSHRioLirvfrwcV/5aPw+3ZpdlmBR5SyYsc4Wen79S
6WxuOgb4L0Zljux1Sza0jbhdhL6THm9yHvIDMb69ZbnoH8Vk+KEg2fxc8TV0w4Zg
I9sJl/B7mrCsKvAy7pZ+9CFvrQS+w0Ai+nohyAoBcJfmxGx8Pow7VeRSHfyn1WV9
T+qrvMUf+JLaeg==
-----END CERTIFICATE-----
Generated at Wed May 13 17:49:53 2026 by rpki-client