Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: N6JVYEHxk2/7ttiM0ogTfKZ0Xg+kGUECvHECRjSQHTI=
Subject key identifier: 75:33:DB:32:E6:EA:B4:8E:A2:51:75:E0:93:96:AA:7E:1B:19:7E:06
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019F27DA9659DF1CB0B81F3B608BBC7B30D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 166F
Signing time: Fri 03 Jul 2026 12:01:04 +0000
Manifest this update: Fri 03 Jul 2026 12:01:04 +0000
Manifest next update: Sat 04 Jul 2026 12:01:04 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: VZ5qxCLlfgbuF1GpmzYnzMxh8tM4imXbBFw35E+IsaY=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:da:96:59:df:1c:b0:b8:1f:3b:60:8b:bc:7b:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jul 3 12:01:04 2026 GMT
Not After : Jul 4 12:01:04 2026 GMT
Subject: CN=7533db32e6eab48ea25175e09396aa7e1b197e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:32:d8:e8:9b:cf:58:7d:4c:4c:99:1c:92:
62:7f:04:a2:1e:0c:80:3b:db:45:8b:8b:39:22:69:
16:18:d8:93:b4:ee:9a:6c:8d:cf:fa:1a:9d:71:b5:
dd:46:c8:49:c3:f1:74:d3:4a:c3:0a:b0:25:ee:62:
26:ce:87:59:92:93:86:84:e5:66:24:a7:36:ee:bf:
bf:e5:95:84:f1:25:1e:33:b8:1e:44:20:94:69:11:
5d:9c:28:a6:b8:4e:b3:5d:47:42:23:18:17:3b:e1:
35:6a:b2:17:b1:74:5f:7b:4f:1e:f5:b6:e4:d7:2f:
17:5a:df:19:1c:fd:01:a5:f9:5c:10:6c:eb:77:f1:
ea:de:e2:e9:00:09:b2:69:e8:a7:88:7f:c1:72:fb:
94:2d:dc:c6:46:2c:cb:a6:d0:09:16:6b:0c:e6:4b:
05:21:1e:cb:04:f8:5f:47:60:25:eb:ed:6c:fb:ed:
b9:fa:fa:66:46:62:33:d9:30:77:53:77:06:30:b5:
ba:0f:67:48:f4:79:f0:43:2c:2f:d1:99:ca:69:a5:
80:5f:d6:16:7b:d9:15:15:dc:d5:21:c1:0c:59:d3:
b1:81:df:b4:ef:48:2a:46:20:93:54:38:a2:1e:6e:
59:94:6d:93:5a:27:c6:1c:60:d7:fa:91:0d:cf:45:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:DB:32:E6:EA:B4:8E:A2:51:75:E0:93:96:AA:7E:1B:19:7E:06
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:55:13:1b:cf:1d:12:d5:c1:27:cc:f5:22:e3:38:cb:f6:e0:
79:6a:74:88:3c:a9:8c:ad:89:dd:19:02:2c:8b:b6:6e:de:43:
64:e0:db:ce:94:81:2c:ea:80:f4:99:11:db:84:a5:e8:63:52:
49:eb:f0:9d:81:af:77:c4:f7:76:1c:2f:29:81:62:ab:aa:5f:
cf:36:d9:e2:4e:7a:d6:0a:c6:a6:a6:e8:26:ce:9d:4f:7a:db:
18:24:87:4b:2d:58:6f:a8:df:fe:5f:bb:d4:1e:7a:81:e6:70:
2d:1b:4e:0f:1f:85:8c:2c:b5:35:98:43:87:e9:c1:87:7c:ed:
6a:37:0a:89:e8:ef:d9:c6:7c:30:70:0d:0f:f0:1b:ed:5f:26:
d8:2b:7c:f6:84:15:6a:5f:12:29:f6:b8:9e:45:a9:ae:f9:cf:
3a:a3:55:57:f1:23:d9:8f:a3:77:b4:b9:b8:37:85:77:61:f8:
3a:ff:20:59:74:8f:da:95:62:2e:e0:8d:03:7d:65:9b:02:7b:
01:7b:e4:b0:75:f8:64:68:52:5c:2c:57:bb:3f:46:6f:94:86:
3d:39:fe:ad:7d:71:27:e1:29:1c:90:66:a3:e1:ce:79:b5:51:
e2:18:65:a2:40:e2:88:88:d4:16:70:70:33:74:6b:1b:70:b5:
59:f1:dc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8n2pZZ3xywuB87YIu8ezDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi
MWIwNjYwHhcNMjYwNzAzMTIwMTA0WhcNMjYwNzA0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg3NTMzZGIzMmU2ZWFiNDhlYTI1MTc1ZTA5Mzk2YWE3ZTFiMTk3ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05oy2Oibz1h9TEyZHJJifwSiHgyA
O9tFi4s5ImkWGNiTtO6abI3P+hqdcbXdRshJw/F000rDCrAl7mImzodZkpOGhOVm
JKc27r+/5ZWE8SUeM7geRCCUaRFdnCimuE6zXUdCIxgXO+E1arIXsXRfe08e9bbk
1y8XWt8ZHP0BpflcEGzrd/Hq3uLpAAmyaeiniH/BcvuULdzGRizLptAJFmsM5ksF
IR7LBPhfR2Al6+1s++25+vpmRmIz2TB3U3cGMLW6D2dI9HnwQywv0ZnKaaWAX9YW
e9kVFdzVIcEMWdOxgd+070gqRiCTVDiiHm5ZlG2TWifGHGDX+pENz0Wj/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUz2zLm6rSOolF14JOWqn4bGX4GMB8GA1UdIwQY
MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt
ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj
LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVUTG88d
EtXBJ8z1IuM4y/bgeWp0iDypjK2J3RkCLIu2bt5DZODbzpSBLOqA9JkR24Sl6GNS
SevwnYGvd8T3dhwvKYFiq6pfzzbZ4k561grGpqboJs6dT3rbGCSHSy1Yb6jf/l+7
1B56geZwLRtODx+FjCy1NZhDh+nBh3ztajcKiejv2cZ8MHAND/Ab7V8m2Ct89oQV
al8SKfa4nkWprvnPOqNVV/Ej2Y+jd7S5uDeFd2H4Ov8gWXSP2pViLuCNA31lmwJ7
AXvksHX4ZGhSXCxXuz9Gb5SGPTn+rX1xJ+EpHJBmo+HOebVR4hhlokDiiIjUFnBw
M3RrG3C1WfHcfA==
-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:02 2026 by rpki-client