Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: WE8ZS7/owCUtzq4k4f1CE09Girq1fxalxK1HRYMXG3Y=
Subject key identifier: CA:6F:51:56:62:A6:D1:B5:1A:AD:44:BC:D3:E8:3A:38:64:7F:E6:36
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019E9BF29BE39CF3D1C6B3E52D5FC2340E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 121F
Signing time: Sat 06 Jun 2026 08:00:28 +0000
Manifest this update: Sat 06 Jun 2026 08:00:28 +0000
Manifest next update: Sun 07 Jun 2026 08:00:28 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: NGh/VxLu5T9wqvqcB8OSJPgGjYLRR71/1JmRYs9ZBx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:9b:e3:9c:f3:d1:c6:b3:e5:2d:5f:c2:34:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jun 6 08:00:28 2026 GMT
Not After : Jun 7 08:00:28 2026 GMT
Subject: CN=ca6f515662a6d1b51aad44bcd3e83a38647fe636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:eb:e3:b7:8b:ec:bc:c5:bf:ee:a5:19:d9:
74:f6:78:32:c9:21:92:2a:40:11:64:22:d6:f2:04:
15:20:0c:a1:7d:51:2d:f6:fb:2c:9f:86:9c:1b:0e:
f2:fe:ba:aa:b4:a6:c2:cf:23:9a:8c:9f:24:55:1d:
f8:17:cf:1d:4e:09:df:cd:b9:d7:fb:ea:c8:5d:df:
81:df:6b:f8:33:65:94:dc:94:ee:78:24:dc:3a:7e:
f6:5b:1a:66:5e:0a:06:7d:a0:7f:2a:1b:b8:d5:59:
2c:0f:df:18:09:79:12:19:44:f8:0d:45:e9:98:7a:
74:c6:5c:aa:f1:65:3e:08:d4:9a:9d:4a:1a:a7:d9:
3c:a0:fc:c7:5e:b8:fd:16:d3:6f:9d:17:be:47:f9:
25:a7:f5:eb:5f:35:7f:6a:94:d1:99:76:9d:bf:7c:
ff:a7:19:f1:75:11:6f:76:52:fb:53:8d:2d:d1:ff:
79:90:ba:ba:29:6c:6c:b9:e7:8a:e5:e7:5b:d5:51:
9d:69:55:6b:46:42:19:31:da:ad:54:ac:22:0a:a8:
d9:ad:4a:36:b9:69:62:31:e8:c5:bc:e0:b2:c4:77:
6b:48:10:9e:f0:6a:f7:8a:11:d1:3d:c3:39:f7:33:
dd:8d:b9:6e:62:31:ab:06:c5:a1:0d:76:f4:2a:f1:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:51:56:62:A6:D1:B5:1A:AD:44:BC:D3:E8:3A:38:64:7F:E6:36
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9a:69:10:c7:08:e0:8c:09:47:8e:19:1b:99:32:c4:fb:16:
f5:ab:45:ef:0e:46:75:20:34:ba:cb:32:08:ca:7d:4e:57:82:
52:f0:e6:3d:54:61:a4:3d:7b:56:bd:7e:85:69:2c:be:0b:2a:
b8:cf:3b:62:24:bd:76:c9:a2:45:5d:36:74:7e:2b:bb:72:a6:
18:6f:8c:16:57:ad:57:bd:a2:f9:8b:a5:4c:13:86:09:6f:78:
ee:33:4e:51:01:5c:e7:b2:d0:f9:dc:46:46:d5:11:e9:38:a2:
91:c5:7d:ae:d5:3e:f0:04:96:fb:a7:94:b2:66:d2:0a:22:66:
76:6f:77:1f:61:d1:12:0d:fa:78:50:49:34:42:37:bc:b2:5f:
b7:c0:92:c1:f8:72:ce:d3:84:92:45:d7:6f:eb:bb:2d:27:df:
c1:cc:c8:eb:b0:a6:6a:e1:5f:e8:9a:68:01:5e:08:13:03:eb:
e6:a1:40:b6:97:9a:3b:b5:b3:f0:c1:a7:b9:4b:cb:ba:bc:5c:
11:7d:62:b4:8d:10:da:d9:6d:96:b0:6a:9b:88:1c:63:f0:fa:
59:19:2c:0e:5b:53:f1:9d:e4:6e:da:1e:c1:8e:81:57:48:d3:
a3:37:49:15:b3:0f:15:37:dd:67:4a:31:18:3b:d5:61:3a:5d:
0b:60:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:39 2026 by rpki-client