Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: 1Dc9ki4WEYMJ7WCeXTioEr0rZkdZgT2L7ZTiTzhPHic=
Subject key identifier: FF:31:94:98:5E:08:D2:F1:9A:AF:B5:31:B0:7B:19:BA:01:69:52:91
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019FA14D81C8C287AE289D551C2C2C00C0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 161E
Signing time: Mon 27 Jul 2026 02:00:38 +0000
Manifest this update: Mon 27 Jul 2026 02:00:38 +0000
Manifest next update: Tue 28 Jul 2026 02:00:38 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: s34VyB4liJdVA+YcCoiDlR1pVyOhDVCkAGOQSDoLPCg=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:81:c8:c2:87:ae:28:9d:55:1c:2c:2c:00:c0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jul 27 02:00:38 2026 GMT
Not After : Jul 28 02:00:38 2026 GMT
Subject: CN=ff3194985e08d2f19aafb531b07b19ba01695291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:bb:3a:3d:12:44:56:d8:67:b7:82:c5:4c:
fc:89:bf:4c:ad:87:9f:d6:15:38:6c:93:67:83:37:
07:d1:19:ab:8b:65:c7:db:1c:fc:98:ff:6e:9e:8f:
3f:a5:e9:b3:a9:a0:5d:ad:9a:79:34:e0:63:8c:30:
06:b8:a4:4a:51:dc:7e:e2:0e:7e:ab:d1:95:0c:7c:
88:19:e5:ed:85:be:2c:2e:e2:24:5f:19:27:f6:14:
07:22:60:81:30:c2:2d:d8:54:fa:1f:57:ae:0d:a2:
0c:ce:82:b6:50:36:c2:01:7d:2e:5a:5b:6c:ea:bb:
9e:f5:f0:20:7b:51:58:a9:35:d3:42:68:4a:75:e9:
78:3e:66:d8:ec:64:2e:51:70:b7:cc:4c:12:39:5a:
b2:8a:fb:1d:99:f2:89:b9:25:bd:8f:eb:58:10:e0:
c8:50:4d:40:d1:09:1b:ec:e4:1d:fe:70:35:ee:e6:
2d:6b:f5:3b:a6:e2:16:9e:81:71:b9:3b:81:f4:68:
ae:28:40:7b:2e:01:74:6f:b4:70:11:6b:d7:cb:8b:
2a:41:2b:fb:df:cc:dd:f2:78:bf:05:e1:28:d7:f1:
16:04:af:c2:31:91:18:63:67:a7:11:9d:32:43:9e:
f0:a5:7f:e6:76:11:b2:4f:e9:d6:31:f6:72:d6:54:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:94:98:5E:08:D2:F1:9A:AF:B5:31:B0:7B:19:BA:01:69:52:91
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6e:7a:2f:d5:cf:6c:b7:63:45:d1:01:5f:2b:d3:a8:f0:13:
dd:9c:65:89:d1:4d:32:a3:c5:58:9a:96:08:6c:ae:65:bc:32:
42:72:f7:6f:de:11:57:fc:b1:f5:39:8b:be:c0:07:09:a4:24:
28:12:7c:e9:46:cf:c9:a9:45:4f:8d:c1:70:2b:5a:c9:52:88:
8f:fb:cd:2e:69:d9:a2:14:1f:3c:97:38:c0:b4:f6:4e:66:67:
4a:04:a3:89:21:17:a4:a4:c0:2a:f1:38:b3:b4:12:2f:c1:5e:
24:ee:d1:30:bf:9d:d4:85:cd:f6:15:bc:54:f6:1c:e7:63:02:
09:c7:62:da:01:45:65:f0:cd:34:df:20:58:1b:77:a2:6e:cd:
e6:6e:58:6f:e5:03:c2:a6:e0:21:24:3e:7a:82:af:8b:d5:03:
fd:37:a9:ed:ba:37:86:0e:61:f1:27:0b:22:0e:e9:35:0a:70:
6c:1e:6b:dd:ae:5f:5b:94:5e:13:22:34:93:47:a6:a2:dd:17:
97:18:15:57:b2:51:b9:87:51:f2:e5:c2:0c:50:44:c9:b2:46:
ce:9a:5d:9d:ec:d5:eb:f3:b6:b0:61:01:ef:86:1f:b5:9f:e6:
20:d3:28:78:75:4b:15:9a:94:2c:08:f0:db:71:15:6e:e4:6e:
45:4c:0a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTYHIwoeuKJ1VHCwsAMDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1
OGIzZTcwHhcNMjYwNzI3MDIwMDM4WhcNMjYwNzI4MDIwMDM4WjAzMTEwLwYDVQQD
EyhmZjMxOTQ5ODVlMDhkMmYxOWFhZmI1MzFiMDdiMTliYTAxNjk1MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF27Oj0SRFbYZ7eCxUz8ib9MrYef
1hU4bJNngzcH0Rmri2XH2xz8mP9uno8/pemzqaBdrZp5NOBjjDAGuKRKUdx+4g5+
q9GVDHyIGeXthb4sLuIkXxkn9hQHImCBMMIt2FT6H1euDaIMzoK2UDbCAX0uWlts
6rue9fAge1FYqTXTQmhKdel4PmbY7GQuUXC3zEwSOVqyivsdmfKJuSW9j+tYEODI
UE1A0Qkb7OQd/nA17uYta/U7puIWnoFxuTuB9GiuKEB7LgF0b7RwEWvXy4sqQSv7
38zd8ni/BeEo1/EWBK/CMZEYY2enEZ0yQ57wpX/mdhGyT+nWMfZy1lQ6AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8xlJheCNLxmq+1MbB7GboBaVKRMB8GA1UdIwQY
MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt
ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz
LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoW56L9XP
bLdjRdEBXyvTqPAT3ZxlidFNMqPFWJqWCGyuZbwyQnL3b94RV/yx9TmLvsAHCaQk
KBJ86UbPyalFT43BcCtayVKIj/vNLmnZohQfPJc4wLT2TmZnSgSjiSEXpKTAKvE4
s7QSL8FeJO7RML+d1IXN9hW8VPYc52MCCcdi2gFFZfDNNN8gWBt3om7N5m5Yb+UD
wqbgISQ+eoKvi9UD/Tep7bo3hg5h8ScLIg7pNQpwbB5r3a5fW5ReEyI0k0emot0X
lxgVV7JRuYdR8uXCDFBEybJGzppdnezV6/O2sGEB74YftZ/mINMoeHVLFZqULAjw
23EVbuRuRUwKmA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:17:19 2026 by rpki-client