Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: d1lS7lnqHT58DxB5sro/gqoUjCkCxCTwb5iDO3FND4g=
Subject key identifier: B1:9A:EC:B1:55:F9:82:6C:79:95:6A:30:08:AD:61:A0:82:62:AA:FE
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019E1E6C2844CE5C5CB57CAD2AF677E52F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 11DE
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: SYt8PXkKuPhV7yq/XuwMYo6a6ZoWMz+EoE/C4nslRXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:28:44:ce:5c:5c:b5:7c:ad:2a:f6:77:e5:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=b19aecb155f9826c79956a3008ad61a08262aafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:c9:88:fe:d7:5d:e3:ce:c8:8f:f3:59:1b:
c5:ba:f0:35:8e:8b:52:b0:86:fe:d1:42:40:40:0c:
d9:fb:c8:14:e3:71:c9:16:92:3b:2f:68:ba:82:20:
2c:44:5f:ed:f1:8c:ca:96:6f:79:db:0f:b9:e6:65:
59:a3:00:6f:2d:1b:0e:b7:ae:69:c7:d0:5e:72:b7:
dd:ae:0f:01:8c:e4:cf:2f:5c:b1:3a:a4:df:4c:8e:
f5:be:45:b1:f2:16:06:cf:ef:aa:67:8d:ce:98:bd:
80:18:12:ab:1b:b6:10:00:f1:a9:5e:f7:b7:22:9b:
da:e2:6c:90:f6:03:f3:19:8e:11:43:50:cb:a1:e0:
a5:e3:34:1d:d1:6b:d9:e3:e8:b8:83:75:26:8f:d3:
20:9e:3c:43:8e:de:70:fc:3c:7e:3d:4c:6a:05:3d:
45:c9:73:69:fa:7c:2a:03:d8:11:99:b9:4f:75:20:
50:f6:85:a6:ba:64:3b:b8:56:b4:4d:e6:4e:84:07:
c4:2f:09:74:7f:53:13:10:d0:95:8e:1a:3d:1a:f9:
d8:48:dd:e7:a3:b2:22:4a:c0:39:03:10:eb:e2:f4:
fe:56:87:08:7b:46:57:3d:e8:7e:7f:0d:e4:bd:6d:
ad:10:cc:c6:97:9d:29:ed:f0:23:38:e8:31:dc:c8:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9A:EC:B1:55:F9:82:6C:79:95:6A:30:08:AD:61:A0:82:62:AA:FE
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:90:99:19:6a:a5:04:b6:79:6e:c9:c4:46:3c:15:ea:4f:
32:70:a7:ff:f3:3e:4f:08:79:e5:da:7a:d9:e4:60:01:48:68:
ef:e6:bc:2c:0c:34:69:c7:a2:0a:3c:0c:93:f0:70:a7:b0:ea:
36:2b:e6:64:31:e1:8f:ea:a9:98:0c:ba:37:bd:45:57:02:79:
04:1d:3b:5d:52:4e:07:27:ae:9b:1b:e3:b2:62:1e:3e:9a:4d:
b5:7c:45:98:a3:f2:b3:08:ab:b3:47:41:e8:c7:94:93:85:d0:
7c:3c:ba:19:43:c6:ef:ff:48:c3:4c:ff:a3:ba:0b:87:86:f8:
f1:27:53:41:f4:99:03:ac:6c:27:49:05:71:b8:7d:92:05:73:
34:38:3f:a6:24:2c:6c:c4:67:a5:f5:09:d2:09:f5:6e:e8:ce:
95:4e:dc:ea:14:5b:9b:93:55:88:b9:3f:39:15:1f:e3:c4:97:
9e:f4:0e:b6:66:9d:bb:24:a7:d1:b3:68:b8:a6:f4:64:bf:bf:
b5:37:1a:06:1f:0f:16:3c:e6:ae:6a:46:f8:61:b7:a1:c3:f9:
fd:86:7c:eb:1b:97:18:03:7a:d9:80:7e:c7:98:65:b8:1f:94:
cf:41:ca:79:f5:c6:3c:2a:0b:e6:a2:e4:05:eb:32:4a:9f:dd:
4a:03:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:01 2026 by rpki-client