Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: QdX4i7/Wacj7EkjXjAH4s+jdFtEP6rYj2C/ByGRf95o=
Subject key identifier: 31:B7:3A:4D:65:1E:F8:A1:BF:CC:09:61:F2:C8:94:29:68:FB:1D:75
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019F37F254B612955B15F87B483D8888A40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 193C
Signing time: Mon 06 Jul 2026 15:00:55 +0000
Manifest this update: Mon 06 Jul 2026 15:00:55 +0000
Manifest next update: Tue 07 Jul 2026 15:00:55 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: fLMBXUZXOouVECYWN0mQuhovfDY0e2Yrd1ueXSttRig=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f2:54:b6:12:95:5b:15:f8:7b:48:3d:88:88:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jul 6 15:00:55 2026 GMT
Not After : Jul 7 15:00:55 2026 GMT
Subject: CN=31b73a4d651ef8a1bfcc0961f2c8942968fb1d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:35:4d:c2:77:4e:cc:d8:83:6d:68:8a:56:
1d:c0:39:80:61:97:ae:2f:5e:b8:98:7b:95:3f:b4:
c4:d6:0f:b5:f4:e8:1c:63:68:ce:78:1e:6b:61:de:
a4:99:3e:cc:ff:2b:1b:ad:c9:7f:f0:65:b0:14:72:
b8:dc:87:65:dd:16:d1:e0:71:80:df:d7:31:46:b6:
3a:f3:74:50:62:b9:51:8d:26:59:59:0d:e7:5b:3f:
52:b0:3a:5d:b6:a5:e0:a9:c5:d5:63:ed:84:70:a2:
37:71:ef:04:46:14:ec:89:36:19:d4:5f:16:de:84:
27:88:66:68:b7:55:46:22:1f:89:e3:6c:e3:b1:a6:
17:c2:8a:f7:ba:0c:eb:cc:d8:2c:7a:d3:54:df:a4:
28:16:cb:25:f4:12:dc:65:44:ef:a2:ec:42:16:94:
5f:7c:13:e9:15:13:53:95:05:b4:be:c1:3b:3e:54:
22:a4:75:1d:61:e4:dc:2e:be:5d:3f:0a:43:61:eb:
7a:27:4e:93:bc:d0:29:7f:f1:fe:9a:99:de:05:f4:
c2:9e:7c:cb:1c:e6:76:97:ee:82:f5:42:10:8d:d1:
c7:15:0a:99:30:62:a1:47:9e:9f:77:6a:27:d8:e7:
5e:74:e9:7f:d1:eb:23:e9:08:44:21:fb:1f:b0:d5:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:3A:4D:65:1E:F8:A1:BF:CC:09:61:F2:C8:94:29:68:FB:1D:75
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9e:ab:cd:5b:73:7a:d4:61:e0:f6:67:2f:b8:2c:18:6e:66:
ca:ca:87:ed:b8:ef:c5:7d:59:35:07:1d:3f:f4:2a:33:cb:52:
7b:63:21:7b:0d:4f:28:9b:3e:5c:c5:c6:6f:f1:18:d3:0f:02:
18:37:6b:71:ae:0e:23:0d:f3:ae:11:49:6e:35:45:2d:e6:40:
eb:0a:70:6e:02:34:08:f8:b9:2d:e1:80:26:01:45:ba:56:55:
a2:b4:6c:a3:c1:7f:96:45:f9:1f:b5:23:08:17:99:68:a2:f3:
2a:37:c7:12:63:e9:ae:3f:0f:9d:6f:a9:d7:49:3d:41:4a:b3:
8c:c8:a1:0a:fc:57:55:c8:f9:a4:f8:ff:ba:3f:af:1b:b8:5a:
c1:aa:6a:94:6f:a5:95:db:68:6f:4f:f8:5f:df:07:e0:69:c6:
2f:cf:c4:ef:74:55:20:47:18:a6:26:d9:91:8c:37:1b:3b:c4:
d7:d8:7a:76:51:70:ec:6c:b8:7a:1a:0b:5b:8c:f4:37:0a:46:
1a:7e:b1:1d:fd:e7:bb:9a:10:53:30:f1:40:32:55:a7:76:23:
57:6d:41:e7:9b:5f:5d:43:87:5b:c3:03:b8:21:b9:62:e0:45:
43:74:01:e6:99:47:ba:ba:c2:25:bd:c1:54:9d:7c:b5:74:6a:
8a:57:4c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ838lS2EpVbFfh7SD2IiKQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl
YjE5Y2MwHhcNMjYwNzA2MTUwMDU1WhcNMjYwNzA3MTUwMDU1WjAzMTEwLwYDVQQD
EygzMWI3M2E0ZDY1MWVmOGExYmZjYzA5NjFmMmM4OTQyOTY4ZmIxZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iU1TcJ3TszYg21oilYdwDmAYZeu
L164mHuVP7TE1g+19OgcY2jOeB5rYd6kmT7M/ysbrcl/8GWwFHK43Idl3RbR4HGA
39cxRrY683RQYrlRjSZZWQ3nWz9SsDpdtqXgqcXVY+2EcKI3ce8ERhTsiTYZ1F8W
3oQniGZot1VGIh+J42zjsaYXwor3ugzrzNgsetNU36QoFssl9BLcZUTvouxCFpRf
fBPpFRNTlQW0vsE7PlQipHUdYeTcLr5dPwpDYet6J06TvNApf/H+mpneBfTCnnzL
HOZ2l+6C9UIQjdHHFQqZMGKhR56fd2on2OdedOl/0esj6QhEIfsfsNVKBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG3Ok1lHvihv8wJYfLIlClo+x11MB8GA1UdIwQY
MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt
MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh
LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU56rzVtz
etRh4PZnL7gsGG5mysqH7bjvxX1ZNQcdP/QqM8tSe2Mhew1PKJs+XMXGb/EY0w8C
GDdrca4OIw3zrhFJbjVFLeZA6wpwbgI0CPi5LeGAJgFFulZVorRso8F/lkX5H7Uj
CBeZaKLzKjfHEmPprj8PnW+p10k9QUqzjMihCvxXVcj5pPj/uj+vG7hawapqlG+l
ldtob0/4X98H4GnGL8/E73RVIEcYpibZkYw3GzvE19h6dlFw7Gy4ehoLW4z0NwpG
Gn6xHf3nu5oQUzDxQDJVp3YjV21B55tfXUOHW8MDuCG5YuBFQ3QB5plHurrCJb3B
VJ18tXRqildMcg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:01 2026 by rpki-client