Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: vo910r/vsuGSgFxCc/O1Ujgr9YlxEHd8TAiz+QXd5CY=
Subject key identifier: 5B:1D:6F:49:1D:C9:BE:BE:3E:60:DE:BB:C9:46:04:FA:32:DE:F7:03
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019F8E6BEA24588A5529A0669BDA93E39DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 16AC
Signing time: Thu 23 Jul 2026 10:01:04 +0000
Manifest this update: Thu 23 Jul 2026 10:01:04 +0000
Manifest next update: Fri 24 Jul 2026 10:01:04 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: qmjSgGiLGlVvqGujHDwgDsI3fjlpxoruiZ3ZxcJa2gI=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:ea:24:58:8a:55:29:a0:66:9b:da:93:e3:9d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jul 23 10:01:04 2026 GMT
Not After : Jul 24 10:01:04 2026 GMT
Subject: CN=5b1d6f491dc9bebe3e60debbc94604fa32def703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:7e:55:c1:0e:eb:d1:e1:e5:46:4d:4a:31:
d6:a6:0a:05:94:fd:5a:cc:87:13:a3:cb:8a:42:b8:
f0:6b:19:5d:6b:83:25:97:81:3a:97:13:f2:cc:83:
02:7a:2d:27:65:d7:20:9c:04:94:c5:36:e1:e0:4b:
d4:9b:e6:7c:b4:cb:80:b0:73:ca:32:34:b3:ef:09:
c8:35:25:a6:dd:2c:58:91:32:c4:17:78:72:1d:ce:
65:4d:61:b7:32:f5:7c:8c:67:04:07:cb:3a:8c:49:
96:fd:bb:f1:ca:83:76:e9:92:e9:4e:b6:25:28:00:
a8:86:7a:50:d4:df:7c:a8:5a:89:28:bf:ce:4a:ca:
d3:51:e9:64:fc:b7:61:c3:43:bb:99:4f:14:ef:9f:
7c:e6:00:dc:40:44:cc:0c:29:4a:5b:4f:bd:43:04:
07:a7:c8:b7:60:8b:de:33:56:a0:5a:eb:11:80:67:
6c:41:45:3c:c0:f8:4f:81:e6:e3:27:51:fe:2d:a8:
5f:01:76:53:8d:1e:3d:ce:78:2c:38:65:87:c7:48:
22:ef:3e:6a:f4:65:24:6d:df:cf:56:7f:cd:a1:dd:
e5:a2:25:20:87:eb:de:54:fe:28:39:1c:6a:8d:cf:
17:dd:5a:fa:3e:dd:d1:d3:46:9a:81:37:7a:f3:3d:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:6F:49:1D:C9:BE:BE:3E:60:DE:BB:C9:46:04:FA:32:DE:F7:03
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:f5:60:4d:b3:b1:85:d8:d4:3f:c7:9e:bb:f0:de:a6:af:
23:88:2c:0e:6e:53:be:80:d1:31:dc:ef:f2:28:0d:5c:ad:a6:
7f:9e:e0:c1:f0:21:00:92:ed:27:16:a3:d6:08:b2:6d:4d:c5:
0f:a4:81:0a:cc:92:f6:46:40:a3:73:ca:a3:0c:18:25:f6:27:
56:23:7d:fc:03:74:3f:88:ec:ba:6d:4e:9f:ff:44:b7:cc:a2:
63:cc:b4:a9:69:56:2d:59:b1:95:29:7f:f5:db:6b:28:57:01:
2a:49:07:6f:0d:6b:cc:1b:b9:b1:8a:78:3b:28:8d:71:02:0e:
e4:c1:89:c9:33:29:29:59:cd:68:f5:a7:07:c8:8a:09:89:a4:
02:74:99:3a:d0:c6:ed:a9:11:1b:8a:01:c6:4e:f8:9d:4f:87:
04:3e:3a:01:4f:50:45:10:a7:d3:d5:8c:ab:ec:db:56:f0:ed:
d3:20:f8:9a:fd:67:2b:14:ee:75:44:69:e0:84:24:c6:6e:96:
8f:f9:69:2b:a0:7d:fa:21:ae:9b:4c:06:d3:65:88:c0:7b:98:
72:75:4f:5c:e3:f7:7a:a9:34:34:a9:40:66:ec:d9:11:52:cb:
bc:37:a4:6b:21:e5:f4:24:70:54:0d:a6:7b:d3:ba:de:4b:60:
41:6f:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:45 2026 by rpki-client