Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: 6TTdYQbeE20HKKnMEjEhI6OVLpQvySI8GWHGHM8kB64=
Subject key identifier: 0C:4F:15:67:44:B7:14:61:D3:88:8D:17:70:62:53:E5:4E:8E:51:3A
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019EB76A4F59E8B81E6A762BE4B5275522CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 16:00:58 +0000
Manifest this update: Thu 11 Jun 2026 16:00:58 +0000
Manifest next update: Fri 12 Jun 2026 16:00:58 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: OCjONIQ00jqU4VTdhlGuGzok+VBhMY7oAsbfXENLlzA=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:4f:59:e8:b8:1e:6a:76:2b:e4:b5:27:55:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Jun 11 16:00:58 2026 GMT
Not After : Jun 12 16:00:58 2026 GMT
Subject: CN=0c4f156744b71461d3888d17706253e54e8e513a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:64:be:f0:61:ac:20:96:3c:cf:f1:bd:02:
bc:9f:d1:04:3a:52:77:81:58:95:56:e2:0d:8a:f5:
02:b1:2f:ba:d3:65:9a:3f:3e:70:a5:16:34:e9:76:
7f:cf:b3:77:a7:cf:b1:c0:41:6b:38:57:77:87:9f:
1e:f1:65:d9:c1:de:b7:cc:03:4f:7e:c3:74:f9:da:
f3:3f:70:a2:14:1a:3c:60:06:1f:a7:aa:d4:8c:49:
1e:f9:7b:6e:fb:56:86:99:6e:e2:55:e9:ea:3a:0b:
4a:f4:c1:40:3b:5e:80:9f:12:2b:e0:26:7d:96:8d:
72:71:bd:d3:d0:b7:d7:dd:46:02:02:20:a6:bb:47:
7e:73:37:fc:f9:35:a9:81:98:7b:aa:d4:93:13:73:
68:6a:44:d0:25:ed:ef:41:cb:d0:28:ec:07:0a:ec:
cf:92:9d:a2:92:05:01:da:ce:5b:60:ba:b6:eb:62:
7b:df:4c:0a:68:fa:45:4d:21:4e:7d:a8:e5:ed:05:
dd:85:53:25:68:9b:ae:ce:9b:47:61:2a:7a:77:76:
19:95:0c:46:a9:54:bc:00:aa:91:e3:46:7c:cc:df:
65:78:02:51:30:34:b1:48:0f:93:53:10:e2:1d:23:
ad:62:5d:75:25:04:6f:44:5c:d4:d5:a9:17:e9:57:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:15:67:44:B7:14:61:D3:88:8D:17:70:62:53:E5:4E:8E:51:3A
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:73:c4:ca:db:d5:d6:cc:63:3a:04:3d:a6:29:4e:64:56:19:
3d:9b:c0:5c:04:64:5c:13:25:28:65:63:89:62:30:ab:06:da:
6c:8b:7d:50:9e:ff:f8:4c:68:df:7b:bc:04:ff:f9:69:ba:70:
52:41:bf:50:d9:f1:ef:0e:ca:51:0f:7d:b0:cb:cc:25:11:d4:
f0:ea:cb:74:72:93:68:0e:ac:3d:30:39:22:c5:92:29:e2:71:
01:31:62:c8:68:e0:5a:91:b1:eb:45:27:f5:66:4b:44:eb:da:
d5:3a:78:62:11:52:b1:8e:10:6f:f0:d2:0c:f9:25:55:78:26:
d8:8d:6b:ae:79:54:f7:7d:34:bd:09:c9:99:78:a1:bb:01:f7:
5b:2c:5e:6d:17:92:96:36:95:e1:b6:a2:a7:ac:73:ff:45:2c:
53:eb:71:49:c7:8a:ed:6d:fa:b6:8d:8a:3b:96:f9:e8:c9:13:
e7:0c:21:45:97:b6:83:cd:2f:2f:d1:5a:4c:3b:a9:16:c1:a9:
66:a4:b7:c6:0d:7a:41:68:fc:38:4c:46:5d:9c:f5:ad:82:24:
87:3c:a5:e4:36:a5:14:1d:8b:b2:b2:f8:3a:d9:33:ad:59:3b:
63:0b:3e:06:08:ab:7e:a8:b8:ab:c7:5c:62:e2:c7:27:94:9f:
2d:85:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:13:46 2026 by rpki-client