Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
File: QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft (raw, json)
Hash identifier: vGvVyHKtVJxORTG7JBVZ6xvmMzj7MLrfxAtwOdmfgjg=
Subject key identifier: A9:9F:44:7E:0E:7C:57:C1:3E:40:F0:C1:3B:4F:9D:DE:3A:EA:6D:33
Authority key identifier: 40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
Certificate issuer: /CN=404284388e4d8b78e562e7b140dc358d4114c027
Certificate serial: 019F95496E0F318229859E3A37B2F7E067FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:45 +0000
Manifest this update: Fri 24 Jul 2026 18:00:45 +0000
Manifest next update: Sat 25 Jul 2026 18:00:45 +0000
Files and hashes: 1: QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl (hash: 4uu8Qek7o3u07uT3TrMFMvHRgI0AR7aRby38bL9sgTw=)
2: b9pucImMRklKE9H42beKCpH3jZQ.roa (hash: XLI5TKkW0eaR8i+yOT6IlSkbxxb0vfR2ygO3TPOk8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:6e:0f:31:82:29:85:9e:3a:37:b2:f7:e0:67:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404284388e4d8b78e562e7b140dc358d4114c027
Validity
Not Before: Jul 24 18:00:45 2026 GMT
Not After : Jul 25 18:00:45 2026 GMT
Subject: CN=a99f447e0e7c57c13e40f0c13b4f9dde3aea6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:be:49:b3:8d:98:ef:68:91:35:c0:dd:7d:
e1:27:c7:df:0e:6a:98:01:fe:59:9a:82:b3:42:f7:
7d:42:4e:bb:6d:3e:12:e0:ae:e7:50:d3:1b:eb:57:
ee:4c:5c:c7:dd:fc:95:70:c3:c9:9b:bf:63:d6:7b:
94:60:17:5d:04:9d:96:04:fb:68:52:f2:bd:89:25:
1b:5a:bb:1e:a9:1a:f3:83:ac:2d:be:c4:e2:41:a5:
d1:b3:fb:13:af:b2:b6:42:60:8d:cd:0d:7c:41:26:
5c:e2:de:da:46:13:71:c9:bb:2e:ef:4c:42:36:87:
46:d2:00:87:87:ea:0a:8e:b2:da:8e:1d:0a:50:c6:
1f:a7:ef:48:21:33:91:34:6d:b6:f9:34:cc:59:0e:
fa:d8:e8:0e:22:42:a2:f0:9b:43:ed:d6:4a:9f:47:
b4:bc:47:8c:e1:74:4a:a3:25:4b:a6:c2:29:c4:40:
15:4c:5c:b3:3b:d0:03:54:4b:b6:3a:1a:7b:3c:73:
58:69:ce:7b:51:e1:58:0d:33:26:01:dc:1c:a6:e0:
0f:ce:c0:da:92:15:58:ea:8c:f8:13:e3:1c:8b:0c:
cf:8c:e5:8e:86:ef:6e:11:bb:09:e1:d3:3e:bb:2e:
2c:d7:31:a8:70:65:92:2e:b1:24:9c:c5:1e:f0:a6:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:44:7E:0E:7C:57:C1:3E:40:F0:C1:3B:4F:9D:DE:3A:EA:6D:33
X509v3 Authority Key Identifier:
keyid:40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b6:d3:74:a3:9e:2b:a4:4a:94:40:4f:a3:76:a2:ee:b3:32:
67:99:5a:48:3a:80:da:8a:06:99:6d:26:c9:d6:07:fc:3d:da:
1b:d3:f7:ab:fc:8b:21:e7:aa:a1:87:bb:5c:92:61:12:5c:55:
62:ac:ee:f2:f2:59:25:70:87:33:8c:67:60:a4:cd:42:f7:aa:
b4:07:61:c7:72:3f:3a:58:3f:1a:fa:b7:cc:fb:96:60:5e:78:
1d:1b:63:ad:b4:fb:9e:f5:ed:c6:c7:4b:15:0b:39:d8:11:bf:
b3:30:bc:e6:6c:12:8c:b3:21:09:31:5c:37:a3:84:00:30:77:
44:5f:4b:cb:fb:41:bd:72:6e:46:fb:40:6f:08:b3:6a:3f:67:
57:ab:5e:b4:16:9a:35:9a:f3:5a:8b:c9:7b:7f:cd:09:5e:14:
f9:b5:9c:1a:85:4c:2d:b0:fc:9c:b5:42:92:5b:c8:d7:07:c7:
0d:94:2d:2f:50:59:13:b3:05:d2:d6:dd:c3:b0:91:fb:46:fb:
46:80:e0:ce:21:b7:30:99:ce:e8:a1:cb:c6:79:09:01:78:42:
63:aa:59:93:24:55:04:d9:6b:36:1b:60:53:b3:dc:cf:10:d2:
a0:d9:e8:4c:9d:55:aa:16:bd:91:fe:08:3b:b2:37:af:c9:ba:
c9:6a:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:22 2026 by rpki-client