Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: H6s6Bk0QLm3tO9mfuHoqv7acSO+Dka0IbNdAHT1j1JE=
Subject key identifier: 6D:62:43:C7:C5:2D:FF:A8:F3:29:C4:F6:4B:FD:4B:39:A8:81:6A:95
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019EFC16240E795636041D12F35F5066BF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 012F
Signing time: Thu 25 Jun 2026 00:02:49 +0000
Manifest this update: Thu 25 Jun 2026 00:02:49 +0000
Manifest next update: Fri 26 Jun 2026 00:02:49 +0000
Files and hashes: 1: IZkDUCigInWdeV2VhafZmgrDhxk.asa (hash: fVSaR3R0qI7sWBf1eA/UjYaOluP3hVc1HKfEAv11/p0=)
2: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: HCRldbvV/rg9l6T5GovxtdiTkof4tgap7IOUbZC/L+U=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:24:0e:79:56:36:04:1d:12:f3:5f:50:66:bf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Jun 25 00:02:49 2026 GMT
Not After : Jun 26 00:02:49 2026 GMT
Subject: CN=6d6243c7c52dffa8f329c4f64bfd4b39a8816a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:88:46:d0:95:36:77:d6:92:20:bf:de:29:
f7:6b:f5:7a:ec:7e:f2:6b:dc:8c:09:fc:bf:56:2c:
97:a6:90:59:55:df:29:a8:72:fb:c0:d0:80:4e:f6:
f4:ec:be:a5:b1:dc:30:33:5b:5d:14:d9:8c:d7:e4:
b3:37:a8:a3:7a:48:cc:9d:59:1e:84:08:23:75:6a:
97:a4:39:73:d5:a9:58:fb:82:48:01:0f:c9:22:59:
7d:67:87:97:00:b6:48:12:2e:fc:13:5e:3e:59:74:
4d:fe:ca:69:c1:70:61:0e:66:45:12:21:13:94:58:
85:85:91:1c:b6:8a:37:f2:bf:62:b1:ce:96:e4:6d:
5a:97:9e:c4:91:6d:ac:78:5b:f1:84:d9:23:98:9e:
cb:3e:a2:f2:fe:c1:58:a7:58:25:3f:ca:1d:57:e4:
d1:e0:f3:d0:c6:bc:41:f1:76:3b:79:b9:24:59:99:
1b:68:92:55:85:31:b0:ed:0e:50:ba:de:2b:f9:c6:
ed:92:4c:f1:7f:6c:49:c2:cc:54:81:61:01:60:15:
b7:bb:c0:e9:01:b4:1f:d5:b9:86:6c:f3:d3:c9:35:
de:6d:c1:74:90:9f:b0:c9:16:c3:2d:25:23:7b:35:
93:9c:48:10:22:db:d5:7d:59:e2:c7:31:70:e6:94:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:43:C7:C5:2D:FF:A8:F3:29:C4:F6:4B:FD:4B:39:A8:81:6A:95
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:0c:c0:85:c5:01:34:bc:1e:47:5f:55:20:bb:e0:38:99:
34:0e:a7:43:c5:42:0b:41:03:ae:17:59:94:62:7d:3c:24:1f:
2b:fc:81:dd:39:12:81:af:54:fa:a2:80:08:08:95:84:2e:d2:
09:5f:42:fe:57:e5:79:7d:d0:50:fc:7b:5f:0e:0b:5c:94:a7:
9a:2d:f4:5a:ed:16:43:b2:e1:6d:3f:4d:18:51:5a:e7:67:e9:
85:9c:eb:33:c8:39:8b:28:fb:c4:26:a8:6d:89:8d:d0:43:9d:
3e:fa:2f:ea:88:ea:6d:37:79:43:a2:7f:e1:3d:8c:db:99:9c:
3d:f7:dc:39:96:44:7c:34:94:1f:0c:f5:d2:02:3d:18:6c:6d:
be:39:b4:4c:7b:f4:c0:aa:1b:8c:ed:84:50:e8:0f:0d:bb:ab:
c8:93:bc:30:5e:5b:ce:58:f9:43:5c:9f:82:c5:be:b5:40:a9:
9d:aa:dd:cc:34:96:97:d2:64:82:74:c0:6a:bc:c8:45:36:5f:
98:95:ec:d2:b4:15:c5:78:62:69:90:63:05:c7:65:41:9f:5c:
83:28:de:7b:78:ab:ea:16:ea:3b:9c:a0:97:0d:c4:50:71:96:
69:ea:a4:2a:9a:ea:66:da:25:76:89:07:47:dc:9b:b0:91:0b:
17:0d:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:42:18 2026 by rpki-client