Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: 0SmK3zHNvUUCnCFnSUQVFN46tyukU1LmoAN2yt30KzA=
Subject key identifier: 41:A1:C2:E7:9F:82:87:FE:D4:1D:25:23:3D:F0:2A:DC:A6:B6:27:13
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019F86B1A4EEB4D76F7D86F77009B837DF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0844
Signing time: Tue 21 Jul 2026 22:00:16 +0000
Manifest this update: Tue 21 Jul 2026 22:00:16 +0000
Manifest next update: Wed 22 Jul 2026 22:00:16 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: 6Imjo47MOJ/4rKn3YYZdBG1JKg9TEECrl/We4qI4DLQ=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:a4:ee:b4:d7:6f:7d:86:f7:70:09:b8:37:df:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jul 21 22:00:16 2026 GMT
Not After : Jul 22 22:00:16 2026 GMT
Subject: CN=41a1c2e79f8287fed41d25233df02adca6b62713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:5d:49:44:84:6d:05:7a:bc:a0:0a:19:76:
c7:fb:fd:02:de:8d:74:33:38:d2:20:fb:e8:01:fc:
65:9e:0a:b0:88:a7:3f:65:95:80:80:99:6c:94:18:
fa:8e:35:e5:35:1e:31:ce:dc:be:80:59:ee:cf:49:
40:f0:b4:36:fc:0d:7a:cf:af:bf:9e:84:de:f1:05:
d5:fa:d6:78:14:2f:03:5a:96:43:d0:7d:04:54:97:
5e:07:a3:2d:b2:65:82:9a:80:a2:40:89:0e:4b:21:
3f:0c:b8:12:22:6f:9e:cd:6a:e5:43:7b:62:13:cd:
01:d3:ad:8f:35:6a:42:4a:2f:50:3a:50:1e:10:89:
33:28:58:b4:da:e4:94:a6:ff:da:cc:96:c7:fb:4b:
f6:e4:bf:fb:39:a6:fd:6a:ef:63:21:7e:9d:b6:27:
15:a0:37:98:af:f7:7f:3a:da:09:7a:38:66:98:21:
e1:cd:49:59:49:e1:32:6f:ea:52:d4:7f:8f:59:65:
86:82:74:cd:8d:0b:51:23:57:bb:61:43:e6:a8:fb:
85:c8:91:59:e8:bc:71:7e:76:56:5a:04:39:b7:33:
70:00:b6:3f:00:28:3a:b5:de:74:da:aa:78:c2:6a:
0f:af:42:fb:e4:9d:80:3b:40:ea:c0:dc:21:99:a3:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:C2:E7:9F:82:87:FE:D4:1D:25:23:3D:F0:2A:DC:A6:B6:27:13
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2e:0b:c7:d3:fe:37:f9:9d:20:ea:08:fe:5b:8e:5c:85:59:
da:d3:60:e3:0f:9c:38:5c:c5:57:bf:0b:04:0e:72:07:bc:ee:
2e:f9:60:a4:3f:ed:16:4f:03:4b:4a:ef:8f:32:0b:e6:b2:3d:
ac:2c:8e:50:7c:70:0a:c1:cb:95:3a:7d:d2:f6:df:1a:54:a2:
46:43:95:08:fd:3a:28:f9:91:8d:7e:2e:af:9e:9c:59:ce:82:
1d:39:ab:00:e5:ad:ec:bc:82:24:ee:d4:4f:05:8c:4d:59:70:
8a:28:f7:c8:42:63:55:3d:fb:1e:21:ca:86:90:dd:6f:af:b4:
4e:7a:bb:58:9f:e4:c8:b9:ce:a5:b0:47:41:61:91:43:3a:12:
05:a3:f8:5f:17:5d:b5:7d:3a:4b:79:a0:d4:8e:d6:78:ca:d8:
a1:27:ef:2b:75:c7:49:da:0f:b8:05:ec:b2:a4:d9:4c:fe:4b:
c6:7e:67:ad:ee:98:b5:5d:f9:ff:c7:57:a7:90:0d:16:9e:ef:
5e:8d:9f:28:7e:40:54:45:f7:da:dc:93:0f:9b:8b:68:21:f1:
4c:ff:f0:9f:f5:4b:b3:ac:51:f4:3b:22:f2:b5:0d:d5:af:c8:
20:12:88:60:6e:f7:11:ed:aa:fa:4c:6b:c8:03:80:da:f9:be:
2f:85:b0:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GsaTutNdvfYb3cAm4N9+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWNiYTU4OTkyMGJlZWJiMTliYzU3MmFlNmQ1MDFiOGNm
NmJiZjAwHhcNMjYwNzIxMjIwMDE2WhcNMjYwNzIyMjIwMDE2WjAzMTEwLwYDVQQD
Eyg0MWExYzJlNzlmODI4N2ZlZDQxZDI1MjMzZGYwMmFkY2E2YjYyNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAFdSUSEbQV6vKAKGXbH+/0C3o10
MzjSIPvoAfxlngqwiKc/ZZWAgJlslBj6jjXlNR4xzty+gFnuz0lA8LQ2/A16z6+/
noTe8QXV+tZ4FC8DWpZD0H0EVJdeB6MtsmWCmoCiQIkOSyE/DLgSIm+ezWrlQ3ti
E80B062PNWpCSi9QOlAeEIkzKFi02uSUpv/azJbH+0v25L/7Oab9au9jIX6dticV
oDeYr/d/OtoJejhmmCHhzUlZSeEyb+pS1H+PWWWGgnTNjQtRI1e7YUPmqPuFyJFZ
6LxxfnZWWgQ5tzNwALY/ACg6td502qp4wmoPr0L75J2AO0DqwNwhmaPn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGhwuefgof+1B0lIz3wKtymticTMB8GA1UdIwQY
MBaAFEIculiZIL7rsZvFcq5tUBuM9rvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQt
ZWMwMGUxYTI3Y2M4LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQtZWMwMGUxYTI3Y2M4
LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyy4Lx9P+
N/mdIOoI/luOXIVZ2tNg4w+cOFzFV78LBA5yB7zuLvlgpD/tFk8DS0rvjzIL5rI9
rCyOUHxwCsHLlTp90vbfGlSiRkOVCP06KPmRjX4ur56cWc6CHTmrAOWt7LyCJO7U
TwWMTVlwiij3yEJjVT37HiHKhpDdb6+0Tnq7WJ/kyLnOpbBHQWGRQzoSBaP4Xxdd
tX06S3mg1I7WeMrYoSfvK3XHSdoPuAXssqTZTP5Lxn5nre6YtV35/8dXp5ANFp7v
Xo2fKH5AVEX32tyTD5uLaCHxTP/wn/VLs6xR9Dsi8rUN1a/IIBKIYG73Ee2q+kxr
yAOA2vm+L4WwdA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:06:56 2026 by rpki-client