Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: jkgl/XFtr/2VFdovGb6cgV3MU3bm8A1oN+XTBnsFOjk=
Subject key identifier: 6B:CF:5A:16:E0:C5:6C:CC:24:BA:6C:9B:4F:DF:80:59:A8:1E:5C:DF
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019DCE9937854A8DDDD8AD3EAD8BC87A64B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 106F
Signing time: Mon 27 Apr 2026 11:00:40 +0000
Manifest this update: Mon 27 Apr 2026 11:00:40 +0000
Manifest next update: Tue 28 Apr 2026 11:00:40 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: 1GWsztRHg6wl5HnB3QnaoS2UMI90LsOPCdiG+IPQryI=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:37:85:4a:8d:dd:d8:ad:3e:ad:8b:c8:7a:64:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Apr 27 11:00:40 2026 GMT
Not After : Apr 28 11:00:40 2026 GMT
Subject: CN=6bcf5a16e0c56ccc24ba6c9b4fdf8059a81e5cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:b1:88:f7:c7:27:ae:1b:fd:e4:1a:bb:96:
9c:30:81:cb:dc:b1:1d:57:11:38:9f:d6:04:d6:6d:
d8:2b:19:5a:cc:b4:00:e7:66:42:6c:60:17:64:42:
ff:8e:93:44:9c:75:38:b1:49:bb:e4:f8:4c:5b:4b:
b1:8d:83:af:58:16:41:68:22:b2:95:9e:d9:82:0c:
a9:87:90:8b:f0:f0:89:dc:6a:dd:e2:98:1f:88:45:
a6:71:e1:5f:f9:86:c7:b2:b4:90:be:e5:4f:98:94:
6e:f8:c5:80:3c:f3:39:d6:28:31:7d:65:7d:68:cf:
0a:44:b2:42:2f:30:20:d0:f5:71:b5:08:95:36:5b:
94:7f:05:96:62:91:f2:f1:f2:52:50:0e:dc:bc:84:
d0:a9:eb:66:7c:65:cf:d2:89:f5:9a:59:ca:2a:4d:
35:10:0f:09:95:3e:20:90:87:24:82:f6:61:d2:69:
5a:d7:07:f3:f7:44:b9:28:b5:65:71:b6:8f:77:12:
ce:c6:47:39:8c:8d:99:57:e3:d4:9c:4b:e9:6a:2a:
c4:81:33:a7:6e:8f:39:94:58:68:86:c4:89:da:ef:
8b:e2:89:e8:e5:cd:b9:e0:a5:d6:26:b9:a2:99:e7:
06:0d:46:54:cb:a4:f9:f8:05:9a:d7:0e:34:8c:d0:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:5A:16:E0:C5:6C:CC:24:BA:6C:9B:4F:DF:80:59:A8:1E:5C:DF
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:67:39:34:2f:89:d5:90:e8:2b:95:b3:26:31:af:61:e8:de:
81:32:44:b0:e8:26:40:16:d9:6f:0a:56:40:5c:3e:85:73:a9:
d2:b6:d8:19:e3:d7:a0:14:59:48:1f:20:cb:be:17:22:1d:86:
d9:19:9d:75:81:88:3e:ec:4e:87:9a:48:c2:86:6c:dd:9c:86:
08:0b:ef:6c:9f:82:62:b5:c0:07:49:d4:e4:08:67:c1:d9:ea:
80:35:cd:67:64:50:89:35:6b:75:68:d7:72:01:18:55:1e:ab:
ed:97:07:66:72:1b:a0:ef:82:d2:3f:26:3b:6a:68:a2:66:4c:
22:e5:b1:7e:a4:b3:62:6f:d1:ff:91:ab:4c:8e:86:36:b9:a9:
60:44:43:0b:ce:0c:d4:07:5e:39:29:4e:b4:95:74:52:a4:91:
d1:e9:ca:67:ec:04:c0:59:2d:9a:d5:de:9b:6a:6d:4f:30:a2:
9a:94:72:0f:d8:82:32:9b:3d:de:91:b6:9b:06:e0:22:3e:32:
76:86:41:f0:5d:6b:9f:89:44:91:37:81:fc:4b:98:2c:c5:59:
5d:44:8b:36:ac:fa:62:2f:01:af:ef:3a:63:24:36:dd:41:26:
3b:4e:da:e1:68:d1:41:2e:cd:ab:41:b3:dc:45:94:63:b8:e7:
29:2f:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:27 2026 by rpki-client