Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: GRIXNzGynEFSUozj0MSJgdBcdOidfLs1yXp1GmxV0LI=
Subject key identifier: 52:8B:EE:0E:53:92:BE:7E:3F:F7:6B:BF:0F:4C:7B:59:DA:7D:FB:45
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019FA3727AC96B325AF14A04A9B040E9DAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 12:00:16 +0000
Manifest this update: Mon 27 Jul 2026 12:00:16 +0000
Manifest next update: Tue 28 Jul 2026 12:00:16 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: HTYO0XRDMKBtbh18Rx/KAB6AQQjHlxTh+7j7PP/16Gw=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:7a:c9:6b:32:5a:f1:4a:04:a9:b0:40:e9:da:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jul 27 12:00:16 2026 GMT
Not After : Jul 28 12:00:16 2026 GMT
Subject: CN=528bee0e5392be7e3ff76bbf0f4c7b59da7dfb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:ec:26:ec:79:74:1b:99:5c:6a:ae:bd:5b:
22:e8:e7:4f:eb:f0:d2:42:a6:d5:64:cd:5d:bc:85:
b6:fb:9b:77:81:43:52:b4:36:a2:9b:13:d8:e9:42:
03:37:08:c0:63:34:5a:71:f2:ce:b7:75:ba:cd:06:
4c:44:84:9d:7d:35:b9:dd:44:ee:d1:51:17:d6:60:
3d:0f:b7:d5:1e:80:5a:5f:3c:3b:92:f5:bf:e7:ee:
b8:e3:5d:bb:a2:67:d8:19:d6:02:2b:01:13:ff:ed:
bd:c9:c9:59:0a:dc:ef:53:37:af:3c:12:42:e4:1d:
21:4d:14:26:ea:79:a6:24:45:14:ed:d3:1c:fb:f2:
fb:20:83:9d:4b:20:d1:29:8a:7b:29:9c:00:6e:27:
52:d1:23:39:af:d8:5f:59:a6:e2:c1:ab:af:a7:62:
d8:40:2d:96:e4:c9:13:cc:15:5e:e2:33:2a:b7:73:
d1:5a:25:53:b6:4d:42:74:ac:23:65:dc:2c:6f:8a:
f3:20:eb:5d:7f:90:56:eb:23:97:fb:8e:b9:0f:ad:
44:32:18:d9:72:2f:af:ac:1a:b7:7c:02:c9:be:35:
6b:27:8f:3e:6b:6d:11:e2:b4:06:b7:9f:00:ba:1b:
4c:d8:1e:4e:70:dc:b9:87:79:3d:12:16:ef:c8:07:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8B:EE:0E:53:92:BE:7E:3F:F7:6B:BF:0F:4C:7B:59:DA:7D:FB:45
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7c:65:14:d0:87:f9:e1:4d:af:b3:87:bd:bc:03:dc:1f:ea:
e4:e6:bf:c5:d6:ba:87:53:34:e6:b3:a6:b0:78:1d:32:5e:a3:
a4:95:69:f5:07:48:4e:4d:12:b7:e1:00:6b:64:16:1a:f9:12:
89:fd:85:96:45:2b:01:fa:ab:71:3c:32:ef:7c:79:71:8a:8e:
14:ca:34:62:8f:65:85:d9:e9:9c:fc:9b:fe:a7:85:a1:39:1c:
bf:f0:e9:1f:fd:d6:0f:b6:f5:f1:c5:f9:37:b1:85:39:14:3a:
07:fe:2d:bd:a1:29:58:ea:ff:75:74:6c:0c:4c:e7:91:b2:a3:
6f:a3:b3:ff:0a:84:3e:39:5a:96:ce:18:86:3e:2f:8e:ae:e2:
39:35:f5:70:56:05:dc:7f:73:56:2a:ec:24:85:3d:23:6a:90:
b4:a4:92:76:d2:ae:13:05:07:cb:24:1e:5f:10:51:fc:03:a3:
30:42:e8:87:a6:8c:ad:f6:d2:14:0e:8a:01:39:f8:4e:50:f1:
a8:3d:3f:f4:ba:02:dd:73:13:78:c2:aa:8e:51:ae:86:b7:10:
ff:d5:8e:cf:f0:12:1c:65:58:07:c0:74:74:e2:93:bf:66:d0:
90:53:11:d6:c9:d4:94:b4:fe:87:c7:cd:5e:f3:89:55:96:f0:
8b:06:50:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcnrJazJa8UoEqbBA6drSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTQwODhjNzdiZDEyNjg3ZmQ0YmE5ZmUzMTU5ZWE4MDU4
ODhlZDIwHhcNMjYwNzI3MTIwMDE2WhcNMjYwNzI4MTIwMDE2WjAzMTEwLwYDVQQD
Eyg1MjhiZWUwZTUzOTJiZTdlM2ZmNzZiYmYwZjRjN2I1OWRhN2RmYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswTsJux5dBuZXGquvVsi6OdP6/DS
QqbVZM1dvIW2+5t3gUNStDaimxPY6UIDNwjAYzRacfLOt3W6zQZMRISdfTW53UTu
0VEX1mA9D7fVHoBaXzw7kvW/5+644127omfYGdYCKwET/+29yclZCtzvUzevPBJC
5B0hTRQm6nmmJEUU7dMc+/L7IIOdSyDRKYp7KZwAbidS0SM5r9hfWabiwauvp2LY
QC2W5MkTzBVe4jMqt3PRWiVTtk1CdKwjZdwsb4rzIOtdf5BW6yOX+465D61EMhjZ
ci+vrBq3fALJvjVrJ48+a20R4rQGt58AuhtM2B5OcNy5h3k9EhbvyAe68wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKL7g5Tkr5+P/drvw9Me1nafftFMB8GA1UdIwQY
MBaAFEIUCIx3vRJof9S6n+MVnqgFiI7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAt
N2UyMWRiNWEyZWY5LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAtN2UyMWRiNWEyZWY5
LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnxlFNCH
+eFNr7OHvbwD3B/q5Oa/xda6h1M05rOmsHgdMl6jpJVp9QdITk0St+EAa2QWGvkS
if2FlkUrAfqrcTwy73x5cYqOFMo0Yo9lhdnpnPyb/qeFoTkcv/DpH/3WD7b18cX5
N7GFORQ6B/4tvaEpWOr/dXRsDEznkbKjb6Oz/wqEPjlals4Yhj4vjq7iOTX1cFYF
3H9zVirsJIU9I2qQtKSSdtKuEwUHyyQeXxBR/AOjMELoh6aMrfbSFA6KATn4TlDx
qD0/9LoC3XMTeMKqjlGuhrcQ/9WOz/ASHGVYB8B0dOKTv2bQkFMR1snUlLT+h8fN
XvOJVZbwiwZQgw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 21:38:26 2026 by rpki-client