Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: g3XnycSXdSvCLj49K7XltAEsCZ0gTNzDG4NtTP0dSrw=
Subject key identifier: 21:11:B2:7F:92:0C:78:24:9B:D5:0E:D9:54:9D:11:52:E3:CA:5A:BD
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019EFB3B3BD843AC21ACE82810E6CEE15746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0D74
Signing time: Wed 24 Jun 2026 20:03:43 +0000
Manifest this update: Wed 24 Jun 2026 20:03:43 +0000
Manifest next update: Thu 25 Jun 2026 20:03:43 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: RU544w1tz/BlxFilTAQZjToo/2tbn5sw2Zl93IvOVKs=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:3b:3b:d8:43:ac:21:ac:e8:28:10:e6:ce:e1:57:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jun 24 20:03:43 2026 GMT
Not After : Jun 25 20:03:43 2026 GMT
Subject: CN=2111b27f920c78249bd50ed9549d1152e3ca5abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:81:21:06:59:12:0e:e9:40:1e:37:57:cb:
50:dc:1f:14:6d:a6:fe:3e:50:ee:4c:d9:4a:bd:b0:
69:b3:70:a6:3b:f7:4f:60:66:5c:57:c2:cc:d2:12:
28:62:75:27:86:83:1a:19:da:33:49:c3:2d:71:66:
4c:c9:37:3b:19:00:77:0c:86:4e:cf:77:9c:23:08:
26:02:0a:ea:8b:6d:0e:eb:77:0e:ce:ed:7a:27:66:
af:34:33:3d:67:4a:21:89:9d:3f:be:c2:85:1c:a4:
52:6a:ab:53:ed:e5:9e:8f:de:1f:fd:17:8d:94:f4:
31:6d:b5:26:5b:aa:ea:6a:2e:76:3e:4b:5f:08:af:
a8:98:27:1d:e7:f6:63:dd:ae:ae:67:88:95:2b:d9:
1f:93:48:0d:69:fc:35:49:5b:75:bb:5a:c4:f2:42:
23:76:c3:74:87:79:2b:6a:46:14:3a:c4:af:aa:e5:
64:ee:0f:82:8d:9c:f0:46:ff:8f:9a:91:d5:cd:14:
ef:dc:d1:ec:e9:a5:9a:53:7e:82:59:ba:cc:9f:34:
ed:0a:34:10:9f:52:f6:1d:d0:c7:05:bf:1b:3e:39:
58:ed:9b:62:9c:be:21:74:54:e3:75:c0:b8:5d:06:
30:f0:8b:27:90:01:99:c3:0f:8c:01:a8:ef:d0:8b:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:B2:7F:92:0C:78:24:9B:D5:0E:D9:54:9D:11:52:E3:CA:5A:BD
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:be:3c:82:4d:c4:fa:24:92:e1:31:be:45:05:54:78:4d:
1c:07:76:84:4f:15:3b:25:7f:6d:cc:03:03:63:31:6c:b7:30:
24:80:41:9d:8d:27:67:f4:f7:06:c7:9e:e5:1d:2f:ea:e5:9c:
8b:26:f6:b0:70:64:e6:c9:68:74:b7:a1:5f:82:fd:48:60:94:
45:b6:72:d9:ef:3b:3c:f8:ba:12:b5:3c:97:28:3c:65:af:47:
6f:cd:88:4a:cc:55:83:9a:7a:6a:c3:92:f9:9d:3f:84:06:10:
2f:58:3e:e8:64:2d:02:ee:ba:7d:b4:2e:d2:6c:59:f7:93:3f:
6a:1a:f0:cd:06:f2:31:8c:e3:32:63:b0:3a:fb:2d:e2:a9:e7:
63:ae:d1:c5:f8:bc:f9:5f:75:29:f1:63:c7:d5:35:b7:16:a5:
c2:19:6a:ad:1a:42:03:fc:a7:6e:42:d4:7b:6d:93:6c:fa:6d:
96:d0:6d:20:5f:27:c3:d7:69:01:be:ec:87:a4:b5:a0:25:47:
ed:2f:88:ef:60:76:bb:40:e0:a1:b0:e2:43:6c:2e:2d:3e:1d:
71:ff:c2:e8:45:4b:88:6e:55:11:45:64:2f:f8:45:30:08:ae:
fb:82:37:4e:ea:68:d2:8d:b6:62:5d:14:b5:5c:45:86:eb:6f:
e3:a6:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:29:30 2026 by rpki-client