Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: Ww9jORdrIdZxhII0222HOPHKXuhRHS6yzkjeCHLPMt0=
Subject key identifier: 99:4D:54:E2:D3:C3:C2:95:B2:A3:84:D7:98:9D:67:4E:3E:66:E9:A5
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019EB9C67131C07BE0A8AA37C688EB7AFDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1888
Signing time: Fri 12 Jun 2026 03:00:50 +0000
Manifest this update: Fri 12 Jun 2026 03:00:50 +0000
Manifest next update: Sat 13 Jun 2026 03:00:50 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: 2Wmb7rzIatAXPPoz2Up9Q/KZa0upK2Lm/1XWS/W6wvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:71:31:c0:7b:e0:a8:aa:37:c6:88:eb:7a:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jun 12 03:00:50 2026 GMT
Not After : Jun 13 03:00:50 2026 GMT
Subject: CN=994d54e2d3c3c295b2a384d7989d674e3e66e9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:9f:9f:45:69:b8:04:54:cb:86:9e:c0:07:
3d:ed:ab:8a:45:86:c2:c0:2c:fc:f0:4a:d1:c7:e1:
ea:df:5b:bb:2b:2c:ba:13:fe:65:e6:fa:7b:36:c3:
2c:b7:93:1f:75:f1:c2:09:7b:52:26:1f:45:89:cd:
e5:28:8a:0c:ca:4e:18:04:84:01:ed:46:e3:d9:f1:
c6:0d:e6:33:b2:bb:76:47:37:66:55:52:b0:b5:fe:
e0:2c:27:fa:47:ee:57:e4:5d:a1:64:de:d7:02:02:
81:87:a6:94:9b:bd:94:fd:0d:52:64:24:60:bd:09:
cb:c3:58:88:fe:23:e7:b7:03:ef:32:fc:27:a7:2e:
fc:10:4e:d4:c5:57:e9:fc:c3:c9:c9:ae:b3:ac:b0:
a5:f5:d8:7c:40:2a:32:1e:4a:ac:2e:b5:f3:01:8a:
7e:c2:20:a6:69:55:53:51:dd:ff:2a:b7:05:3f:52:
53:e1:23:78:e7:85:46:30:1a:54:d1:14:8c:fd:0a:
47:31:1f:b1:18:2c:ae:ea:66:a2:41:ec:c9:4f:16:
a0:6d:d7:b8:c2:a1:21:50:62:99:cd:d7:2e:b0:c9:
64:d1:9a:a9:e8:fa:d2:71:36:19:83:99:d4:24:ed:
2e:68:68:b2:2a:17:39:c5:ae:80:db:be:ab:29:1b:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4D:54:E2:D3:C3:C2:95:B2:A3:84:D7:98:9D:67:4E:3E:66:E9:A5
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0b:39:cd:f3:dd:16:ec:30:4b:0c:63:f5:0b:1c:ae:81:5b:
86:c5:8b:cb:c6:c1:d0:08:34:e8:e4:d3:11:53:38:f8:a1:a5:
44:df:90:42:d6:9e:3f:57:38:de:94:b9:1d:1b:6b:75:69:e9:
42:cd:7e:b5:49:6b:b2:36:7d:60:20:2d:c8:d7:d7:00:aa:92:
b2:c0:d1:9b:ab:23:22:16:aa:d2:7a:c0:ba:64:35:48:26:7b:
86:ce:1f:95:67:5a:48:db:4f:07:88:bd:94:ad:91:98:0a:5a:
74:d2:2f:97:30:2b:bb:da:93:d6:6a:06:82:f5:98:5a:05:7f:
f6:49:18:dc:e5:34:85:8a:98:4f:02:6a:79:e7:68:79:a3:d1:
92:94:f6:7b:2f:c7:8a:f3:86:d9:57:19:d4:1f:96:79:d8:e1:
f7:ed:da:5f:16:2f:d4:3d:e6:dd:66:a9:fa:37:1b:9d:fb:76:
ab:31:b4:f3:e5:6a:56:c9:c3:a5:2b:a7:fb:68:bd:ac:e5:90:
9d:ad:67:c8:bb:8c:69:c3:c7:0d:3e:f4:b5:4f:3c:e7:bb:fd:
e0:3c:e3:1a:8b:ad:10:4a:7f:9b:ca:00:ef:8e:81:83:7d:a7:
11:fc:95:8c:56:93:f6:1d:e1:81:3c:63:aa:bf:0a:00:8e:fb:
2e:c2:16:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xnExwHvgqKo3xojrev3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjYwNjEyMDMwMDUwWhcNMjYwNjEzMDMwMDUwWjAzMTEwLwYDVQQD
Eyg5OTRkNTRlMmQzYzNjMjk1YjJhMzg0ZDc5ODlkNjc0ZTNlNjZlOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJifn0VpuARUy4aewAc97auKRYbC
wCz88ErRx+Hq31u7Kyy6E/5l5vp7NsMst5MfdfHCCXtSJh9Fic3lKIoMyk4YBIQB
7Ubj2fHGDeYzsrt2RzdmVVKwtf7gLCf6R+5X5F2hZN7XAgKBh6aUm72U/Q1SZCRg
vQnLw1iI/iPntwPvMvwnpy78EE7UxVfp/MPJya6zrLCl9dh8QCoyHkqsLrXzAYp+
wiCmaVVTUd3/KrcFP1JT4SN454VGMBpU0RSM/QpHMR+xGCyu6maiQezJTxagbde4
wqEhUGKZzdcusMlk0Zqp6PrScTYZg5nUJO0uaGiyKhc5xa6A276rKRv+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlNVOLTw8KVsqOE15idZ04+ZumlMB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQs5zfPd
FuwwSwxj9QscroFbhsWLy8bB0Ag06OTTEVM4+KGlRN+QQtaeP1c43pS5HRtrdWnp
Qs1+tUlrsjZ9YCAtyNfXAKqSssDRm6sjIhaq0nrAumQ1SCZ7hs4flWdaSNtPB4i9
lK2RmApadNIvlzAru9qT1moGgvWYWgV/9kkY3OU0hYqYTwJqeedoeaPRkpT2ey/H
ivOG2VcZ1B+Wedjh9+3aXxYv1D3m3Wap+jcbnft2qzG08+VqVsnDpSun+2i9rOWQ
na1nyLuMacPHDT70tU8857v94DzjGoutEEp/m8oA746Bg32nEfyVjFaT9h3hgTxj
qr8KAI77LsIWcA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:40:26 2026 by rpki-client