Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: Xr724Glv0V98Xs1bfmgJQNgpK1guDFuoWOaHfyyifFc=
Subject key identifier: 01:EA:DA:4B:F4:2F:43:C4:54:56:03:9D:83:93:69:76:80:80:11:B0
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019F10E50FBA7B983A4ACADD2DB5572EEDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 01:01:14 +0000
Manifest this update: Mon 29 Jun 2026 01:01:14 +0000
Manifest next update: Tue 30 Jun 2026 01:01:14 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: GIuVWyH8JwygqFuV2i3QnGKN6UEVLDaH/yG2Mxkl08w=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:0f:ba:7b:98:3a:4a:ca:dd:2d:b5:57:2e:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jun 29 01:01:14 2026 GMT
Not After : Jun 30 01:01:14 2026 GMT
Subject: CN=01eada4bf42f43c45456039d83936976808011b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:97:2d:59:e7:21:9b:ef:fb:b7:03:58:cc:
71:c7:a4:34:9b:8a:1f:b3:c9:74:46:14:a6:2c:0b:
5f:21:98:c6:f5:a3:df:8f:84:2a:d5:12:1e:18:da:
25:59:14:99:92:9c:eb:57:c0:e0:64:7b:74:54:bb:
eb:c2:20:99:82:5f:48:6c:26:8c:5c:71:cf:cb:d7:
82:b9:04:ed:cb:9f:65:bb:6f:64:5c:d3:3e:f9:82:
fb:8f:cc:fc:3b:52:e6:f0:4d:a5:7b:84:42:43:99:
2f:c7:dd:29:04:6b:62:61:e3:ed:e1:75:ba:0f:96:
e8:fd:72:17:57:b8:c6:82:85:a1:7d:f8:5c:5f:ae:
d8:d8:7d:f9:22:a5:02:1f:37:c3:5d:af:2d:d3:b0:
7c:3a:c4:49:57:af:35:50:70:53:95:b7:91:c0:d4:
e7:98:79:08:22:e0:17:b6:06:20:31:3c:b6:62:21:
9e:ce:b2:2a:89:05:cb:c8:31:37:bd:6a:3e:33:e8:
bc:46:56:1b:eb:89:cb:25:3e:4e:fc:7c:a6:78:f8:
fe:9b:9d:98:9e:d0:5e:74:90:03:dc:77:30:10:0e:
86:98:a0:ea:06:24:84:36:a8:e1:90:bb:1a:08:4f:
d0:be:76:d8:e7:5d:99:13:28:87:ff:c1:2e:74:65:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:DA:4B:F4:2F:43:C4:54:56:03:9D:83:93:69:76:80:80:11:B0
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ee:2d:13:67:46:e4:79:4d:08:6d:c4:68:c6:df:98:47:b7:
7c:2e:93:2d:59:4c:ca:30:98:28:83:e4:29:da:40:d5:e6:96:
78:bc:c6:cf:1e:18:6d:9d:70:61:f4:e5:05:44:37:9b:df:13:
bd:0d:93:4e:98:8b:92:8c:3a:43:dc:98:c7:a8:d9:75:4a:b7:
17:6e:20:dc:df:98:88:47:e4:b5:bf:bc:95:3b:78:ff:de:ef:
b8:00:01:be:82:85:9e:8d:f3:43:01:c8:b3:2e:ea:f9:9f:2f:
4e:34:55:9c:c6:e2:ad:02:94:66:47:04:bb:8e:97:3f:87:e1:
47:86:b7:f3:51:3b:28:97:ca:f3:d2:2e:8c:bc:30:c8:fb:1f:
83:07:85:21:2e:30:71:52:42:77:5d:73:b9:9c:c3:a2:54:48:
e6:b8:eb:d3:da:44:13:a4:98:fd:fd:c3:ef:42:53:0a:b7:dc:
1d:9c:9f:8f:cb:77:67:28:e9:5c:0f:fc:bc:02:32:cf:c3:1a:
73:cf:6a:66:41:3f:7a:de:12:e0:16:cd:0f:6d:aa:7b:8a:d8:
b0:53:e5:85:3a:ce:9a:3b:73:67:1e:0b:c4:fb:ce:11:dc:f9:
b0:4b:b4:4b:69:de:aa:78:9a:25:55:74:dd:08:7e:94:1a:40:
c0:c2:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:21 2026 by rpki-client