Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: oh6aGAXMKfGdq8Sx6Z/OIGNPzzcXnrA3yKCJaLzAWwo=
Subject key identifier: E6:BB:F0:3B:70:33:E0:41:72:FE:02:C7:A2:DB:50:66:C9:C5:78:63
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 019DD19A572B91BE00F4803E23F698F7E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 07CE
Signing time: Tue 28 Apr 2026 01:00:46 +0000
Manifest this update: Tue 28 Apr 2026 01:00:46 +0000
Manifest next update: Wed 29 Apr 2026 01:00:46 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: 6ikYpKNecqTzJj/9aHLwuPXcD1hnu3V1lCQTv0v6Y/A=)
2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:57:2b:91:be:00:f4:80:3e:23:f6:98:f7:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Apr 28 01:00:46 2026 GMT
Not After : Apr 29 01:00:46 2026 GMT
Subject: CN=e6bbf03b7033e04172fe02c7a2db5066c9c57863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:d5:f3:d4:dc:67:5b:fa:f3:d5:2b:89:5d:
dd:3e:d3:04:bb:f9:96:8f:30:e9:37:2c:7b:2e:62:
ca:c1:ff:63:89:99:fe:87:14:5a:83:c5:88:20:5c:
28:31:aa:a3:97:2f:58:04:1e:ad:63:02:24:ca:14:
40:b1:6d:37:84:a3:8b:03:e5:8d:85:c3:47:f0:b2:
ff:16:83:77:09:36:de:47:ac:39:e7:db:b7:87:39:
02:ba:a0:c1:8c:a3:93:b4:35:7e:88:01:54:0e:0f:
f1:7f:8f:fe:7b:0d:7d:f5:77:a3:94:fb:bf:da:43:
15:af:85:92:37:7b:7e:3a:fa:21:c2:b7:ee:39:d6:
26:d4:6c:f8:03:0f:77:51:89:ca:b8:a9:c3:99:49:
6d:2b:d6:1b:41:25:a0:9b:17:83:84:66:84:d9:af:
c6:60:cb:ee:63:74:19:2f:aa:e1:7b:35:76:6d:ac:
7b:1f:fd:c3:f8:fc:8e:39:41:ad:6c:dd:41:94:fc:
00:5a:70:78:eb:90:03:04:9f:87:18:47:b6:69:f7:
46:4e:d6:62:3e:20:e3:50:34:ea:ac:9f:61:e6:ee:
0a:a1:6c:77:01:64:78:18:9a:a8:69:40:dc:c8:85:
c2:c2:52:a8:10:3e:6d:d1:8e:d1:61:c9:b3:a4:5c:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BB:F0:3B:70:33:E0:41:72:FE:02:C7:A2:DB:50:66:C9:C5:78:63
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:18:53:3f:ee:c0:c8:d9:4a:de:a0:12:13:e7:3b:4f:d5:
86:d8:6c:dc:cd:39:24:d8:0e:a7:54:3f:0f:7d:22:9f:11:9a:
6b:03:31:2c:7d:ef:af:01:5a:e4:1b:a5:fd:56:40:60:1a:2e:
7b:a5:3b:31:93:10:c1:cb:12:0e:9e:57:04:42:cb:c3:3a:cf:
61:95:5f:b6:14:7f:ad:cb:e5:99:d3:90:15:86:dd:2f:22:dd:
66:19:e1:3a:6c:ca:2f:3c:a8:51:a6:95:c4:2c:05:9e:13:48:
22:4c:5e:1b:99:bd:46:b1:fb:e2:22:b2:3a:cd:52:ac:00:5b:
60:d4:22:32:8e:d7:1c:c1:b8:d9:96:8f:8a:22:06:2d:1a:5a:
52:e2:d6:00:fb:d3:29:5a:45:6c:b3:f7:e5:c1:29:40:6b:5b:
ec:c6:5b:38:18:42:1d:f6:c3:f0:e7:95:5c:22:62:e4:d1:de:
82:16:f6:52:75:90:09:27:82:57:2c:18:75:a4:de:c0:ba:3a:
75:57:18:ab:fd:e4:e1:83:27:19:69:14:a5:d4:0a:c2:9d:68:
af:27:34:13:ec:f4:bb:85:ca:58:fe:02:3a:4f:95:79:c4:7d:
7a:c3:ca:ce:1c:a5:25:82:b2:a7:93:f6:2a:54:0e:b1:39:2d:
86:e4:5b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Rmlcrkb4A9IA+I/aY9+VaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx
NjE4MjIwHhcNMjYwNDI4MDEwMDQ2WhcNMjYwNDI5MDEwMDQ2WjAzMTEwLwYDVQQD
EyhlNmJiZjAzYjcwMzNlMDQxNzJmZTAyYzdhMmRiNTA2NmM5YzU3ODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwvV89TcZ1v689UriV3dPtMEu/mW
jzDpNyx7LmLKwf9jiZn+hxRag8WIIFwoMaqjly9YBB6tYwIkyhRAsW03hKOLA+WN
hcNH8LL/FoN3CTbeR6w559u3hzkCuqDBjKOTtDV+iAFUDg/xf4/+ew199XejlPu/
2kMVr4WSN3t+OvohwrfuOdYm1Gz4Aw93UYnKuKnDmUltK9YbQSWgmxeDhGaE2a/G
YMvuY3QZL6rhezV2bax7H/3D+PyOOUGtbN1BlPwAWnB465ADBJ+HGEe2afdGTtZi
PiDjUDTqrJ9h5u4KoWx3AWR4GJqoaUDcyIXCwlKoED5t0Y7RYcmzpFwciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa78DtwM+BBcv4Cx6LbUGbJxXhjMB8GA1UdIwQY
MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt
Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw
LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO8YUz/u
wMjZSt6gEhPnO0/Vhths3M05JNgOp1Q/D30inxGaawMxLH3vrwFa5Bul/VZAYBou
e6U7MZMQwcsSDp5XBELLwzrPYZVfthR/rcvlmdOQFYbdLyLdZhnhOmzKLzyoUaaV
xCwFnhNIIkxeG5m9RrH74iKyOs1SrABbYNQiMo7XHMG42ZaPiiIGLRpaUuLWAPvT
KVpFbLP35cEpQGtb7MZbOBhCHfbD8OeVXCJi5NHeghb2UnWQCSeCVywYdaTewLo6
dVcYq/3k4YMnGWkUpdQKwp1oryc0E+z0u4XKWP4COk+VecR9esPKzhylJYKyp5P2
KlQOsTkthuRbSA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:52:06 2026 by rpki-client