Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: Ec0LmOfDlkix8mP4XWq4Tucj+wDgd8uPQUl3z8IPHCc=
Subject key identifier: D2:C1:89:B7:D1:DD:CA:A2:74:A7:73:48:8B:2D:6B:E4:C2:C9:16:FC
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 019EB9585BEE7E411B72F2D724A5E291B67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 0846
Signing time: Fri 12 Jun 2026 01:00:35 +0000
Manifest this update: Fri 12 Jun 2026 01:00:35 +0000
Manifest next update: Sat 13 Jun 2026 01:00:35 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: n8HLZa/Yk3ECOvJDHXYByu/7wRbm3ZWmjolDP+9IvaE=)
2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:5b:ee:7e:41:1b:72:f2:d7:24:a5:e2:91:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Jun 12 01:00:35 2026 GMT
Not After : Jun 13 01:00:35 2026 GMT
Subject: CN=d2c189b7d1ddcaa274a773488b2d6be4c2c916fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:b0:85:c8:de:4d:40:27:c5:78:00:34:90:
fd:e1:b2:71:95:27:90:9b:c7:d2:b0:3c:89:69:03:
e5:c1:6c:cc:b0:06:cb:fa:86:3f:87:21:df:11:29:
b0:db:37:d6:87:9a:f1:2b:10:05:67:89:93:f8:34:
71:3a:bd:d6:18:f5:43:1d:5a:1b:b6:e5:a9:78:a3:
24:78:66:37:0c:0c:66:e5:d1:ca:f6:a7:e0:e4:07:
d6:af:ea:2d:6b:8c:bb:cf:31:83:1e:aa:2d:e8:7c:
95:27:e8:51:05:43:16:25:cd:51:6e:44:68:2b:90:
a1:98:21:98:bb:e2:37:86:e1:16:2b:ef:8c:7f:4a:
b2:89:6a:68:3f:61:05:3c:56:d6:68:64:d9:2d:fb:
38:cb:bf:5d:51:4d:2d:fe:85:ff:b0:94:86:3f:2f:
4c:c0:1a:d5:c4:7c:83:ff:63:a0:d4:6c:92:0f:6b:
cf:72:e9:6f:39:1b:99:a6:56:fc:ad:07:bc:0b:e9:
0d:40:26:b7:21:4f:83:4d:6c:0d:43:bc:ff:5b:61:
6d:0e:1b:f1:f1:95:39:43:12:16:e7:43:a7:d7:d6:
20:2e:eb:1a:b7:db:f8:b4:f1:49:dd:16:7a:01:a2:
77:a0:62:20:4f:25:b7:af:49:2c:10:67:cc:35:9b:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:89:B7:D1:DD:CA:A2:74:A7:73:48:8B:2D:6B:E4:C2:C9:16:FC
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8f:8a:21:b1:ad:c2:f8:93:bd:1b:7d:c7:11:6f:4a:b7:f1:
1c:f9:5b:dc:57:52:bb:6d:f2:b4:4b:bd:7f:07:52:2a:05:c9:
fd:05:0b:39:47:bb:c5:65:77:28:3d:f1:ca:30:d0:c6:93:72:
fb:80:d9:d1:26:5e:11:6e:82:86:c5:59:3c:53:0a:7a:9e:49:
3c:a3:d9:3d:b9:41:39:3e:15:9f:e5:b0:e6:da:60:a4:50:18:
0e:eb:24:a9:da:cf:45:1a:78:77:54:bb:9a:c0:62:82:86:44:
8b:fe:4e:7d:70:31:27:51:c6:0f:db:15:4f:9c:60:6f:ea:89:
7b:dc:c1:4a:52:30:55:11:3d:14:d8:b6:d1:63:85:c3:ff:b6:
db:9e:0f:84:d1:ce:5e:71:df:f5:e8:ea:a2:1a:8b:ae:e6:8b:
b1:2a:c6:30:b9:fc:11:f4:d1:68:5c:eb:03:10:66:4c:2f:16:
16:b5:ce:3f:99:b1:fb:3c:a9:08:f6:14:00:70:a1:c3:8a:89:
65:51:38:39:e6:1e:35:12:68:fe:c4:cf:e8:08:ff:96:b0:fe:
e5:13:66:55:1c:60:36:aa:2f:fc:c4:85:73:cd:70:64:34:12:
ab:bd:a6:27:e6:0c:05:cf:b6:dc:df:33:e0:a8:ec:35:36:82:
74:c4:73:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65WFvufkEbcvLXJKXikbZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx
NjE4MjIwHhcNMjYwNjEyMDEwMDM1WhcNMjYwNjEzMDEwMDM1WjAzMTEwLwYDVQQD
EyhkMmMxODliN2QxZGRjYWEyNzRhNzczNDg4YjJkNmJlNGMyYzkxNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BKwhcjeTUAnxXgANJD94bJxlSeQ
m8fSsDyJaQPlwWzMsAbL+oY/hyHfESmw2zfWh5rxKxAFZ4mT+DRxOr3WGPVDHVob
tuWpeKMkeGY3DAxm5dHK9qfg5AfWr+ota4y7zzGDHqot6HyVJ+hRBUMWJc1RbkRo
K5ChmCGYu+I3huEWK++Mf0qyiWpoP2EFPFbWaGTZLfs4y79dUU0t/oX/sJSGPy9M
wBrVxHyD/2Og1GySD2vPculvORuZplb8rQe8C+kNQCa3IU+DTWwNQ7z/W2FtDhvx
8ZU5QxIW50On19YgLusat9v4tPFJ3RZ6AaJ3oGIgTyW3r0ksEGfMNZtTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLBibfR3cqidKdzSIsta+TCyRb8MB8GA1UdIwQY
MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt
Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw
LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY+KIbGt
wviTvRt9xxFvSrfxHPlb3FdSu23ytEu9fwdSKgXJ/QULOUe7xWV3KD3xyjDQxpNy
+4DZ0SZeEW6ChsVZPFMKep5JPKPZPblBOT4Vn+Ww5tpgpFAYDuskqdrPRRp4d1S7
msBigoZEi/5OfXAxJ1HGD9sVT5xgb+qJe9zBSlIwVRE9FNi20WOFw/+2254PhNHO
XnHf9ejqohqLruaLsSrGMLn8EfTRaFzrAxBmTC8WFrXOP5mx+zypCPYUAHChw4qJ
ZVE4OeYeNRJo/sTP6Aj/lrD+5RNmVRxgNqov/MSFc81wZDQSq72mJ+YMBc+23N8z
4KjsNTaCdMRzaA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:00:39 2026 by rpki-client