Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: om2h1c/YvlLO4dcCUKIt5ak4dDEL5eMVj9XygzTj9kM=
Subject key identifier: 4E:7B:09:63:D3:9C:BB:39:9A:F8:3D:ED:19:1A:7A:F7:21:BD:32:CA
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 019E205A5E75BB969B51EDBAAC6C06031611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 110D
Signing time: Wed 13 May 2026 08:00:53 +0000
Manifest this update: Wed 13 May 2026 08:00:53 +0000
Manifest next update: Thu 14 May 2026 08:00:53 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: dwFiwnmcS/FMe9a21T9JnQem4grBhOjLgDoMOfLSSBg=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:5e:75:bb:96:9b:51:ed:ba:ac:6c:06:03:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: May 13 08:00:53 2026 GMT
Not After : May 14 08:00:53 2026 GMT
Subject: CN=4e7b0963d39cbb399af83ded191a7af721bd32ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:b2:bc:a7:bb:a9:bc:a6:98:8a:45:09:09:
97:f4:fe:35:d0:67:14:f4:bc:46:9a:f3:ac:82:47:
f1:fd:f3:d2:9a:16:7d:8f:c6:41:3c:9d:93:38:e9:
64:86:0e:5a:69:23:1e:e9:6d:6c:12:61:22:9a:ab:
99:77:59:e9:bd:37:9a:84:14:ef:88:ec:a4:17:7b:
fa:d0:62:76:2f:0a:af:89:d7:34:4d:54:12:38:27:
73:fd:66:ae:e7:60:30:8f:e9:ee:5b:b3:2a:a1:27:
40:2f:11:33:8e:6e:15:6a:02:75:e2:1e:66:57:ef:
12:f5:20:df:f8:ee:96:1e:42:9c:89:ab:2d:52:53:
c8:9f:87:c4:9e:8e:85:2b:97:91:bb:ca:81:61:d2:
fd:fd:4a:86:02:0e:fa:82:85:c5:df:e9:c9:10:e1:
ab:b8:33:df:09:69:ef:6e:9a:c7:cc:3d:e4:bb:22:
f2:6b:4b:2a:96:c2:12:92:9f:17:2f:32:30:ea:a9:
b2:0c:0c:a3:9c:f3:42:bc:df:f8:8d:53:2c:bb:c0:
33:fb:07:17:09:01:c5:5a:ed:1a:62:76:45:83:0f:
8c:c1:e3:a4:f2:7c:ec:d5:d0:c0:e9:a0:a7:f1:af:
6e:7c:cf:67:f8:62:a6:69:27:e5:c1:f6:7e:8d:31:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:09:63:D3:9C:BB:39:9A:F8:3D:ED:19:1A:7A:F7:21:BD:32:CA
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:99:45:a4:0f:3e:60:3d:0a:59:4d:86:54:16:74:e6:4f:3b:
11:1e:10:f0:a5:e2:0a:f6:cf:2b:90:33:37:e3:a2:8a:55:46:
9c:70:77:d9:4a:ab:1e:7b:8f:1b:83:b1:9c:2c:e7:a6:35:ec:
dd:2e:92:4f:75:58:d5:96:b3:09:93:c3:3c:1d:9d:1d:ee:7f:
c9:89:9f:42:54:72:66:cc:dc:ab:34:fe:99:a7:6f:77:2f:9a:
15:51:ca:c4:25:0d:ed:9f:29:6d:e8:61:40:55:19:59:80:b4:
be:ce:ef:da:95:24:54:e5:a5:aa:59:af:4c:e9:ed:f6:44:70:
ad:f4:50:84:62:4a:db:36:91:4a:8d:94:4d:c4:b4:bc:5d:b0:
c5:7c:54:8d:ab:b8:28:76:ae:bb:4c:22:5b:f9:aa:2e:91:7b:
bc:74:d2:13:0c:5b:5a:88:11:a9:2c:10:b0:85:f4:be:24:61:
85:90:ee:52:d7:e9:f1:79:ee:59:e6:d3:23:21:97:c4:88:2e:
e5:fe:d2:c7:be:9d:25:f2:7b:7b:08:6d:a0:0d:ce:ec:ed:31:
16:7b:37:1e:c2:50:89:ae:3f:f5:b6:1b:bd:45:07:be:35:97:
28:02:ae:3f:4f:64:8c:4d:69:d8:a3:8f:fa:05:07:af:5a:94:
55:a2:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:00:21 2026 by rpki-client