Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: bucGxZU4qrWDf1oI6yJkmzQQnCumX51QgA4VGbcDI7E=
Subject key identifier: F5:9A:94:08:8E:AD:FB:E8:9E:D1:B2:0D:2A:2B:58:13:9D:AC:74:1E
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 019EB8EA785BF9267E5BDE571F86D166F145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 23:00:34 +0000
Manifest this update: Thu 11 Jun 2026 23:00:34 +0000
Manifest next update: Fri 12 Jun 2026 23:00:34 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: NLpB+QpMvzZDaP7IJeBhn0nOaw3mBS5GpTcayJf0BcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:78:5b:f9:26:7e:5b:de:57:1f:86:d1:66:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jun 11 23:00:34 2026 GMT
Not After : Jun 12 23:00:34 2026 GMT
Subject: CN=f59a94088eadfbe89ed1b20d2a2b58139dac741e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:64:ff:bc:12:eb:c9:8c:e5:4a:b6:f2:c5:
3d:25:89:4c:1d:89:0a:78:82:cc:41:2f:e0:e4:9e:
93:35:64:5c:ec:ce:c4:7b:02:dc:cd:f5:2c:fb:40:
17:a9:dd:38:bb:fb:ff:6b:34:a3:6c:c2:bb:98:3f:
79:70:d8:0f:d9:e1:68:99:d7:24:53:95:3a:0a:3d:
f6:e1:22:f9:c7:c0:d6:70:d3:06:36:36:02:a8:97:
2b:56:58:50:6e:bb:9b:cb:04:21:d7:77:41:21:8e:
d1:a9:f1:1a:4a:66:94:f9:89:cf:eb:8e:1e:ee:62:
43:7b:6e:a9:7c:fb:96:ec:e5:cf:ed:7c:58:a4:c6:
69:7f:a6:2a:96:1c:83:30:a2:9d:5b:fe:45:81:74:
ee:62:7a:8f:bf:60:81:32:a1:d1:ad:39:3f:b6:8d:
2d:f4:7e:a3:1c:b2:a1:13:72:8c:db:ef:2f:22:93:
e4:c8:fa:17:52:61:3d:b8:95:67:91:51:34:fd:d7:
5c:ef:f8:1a:81:7a:a5:3a:f1:cf:69:2d:93:4f:36:
34:11:6e:34:95:23:42:71:21:da:a8:21:8c:af:5a:
79:a9:6d:6e:7e:1b:a6:15:35:b1:94:89:e8:51:3c:
4e:19:96:ba:01:f5:24:c4:98:85:08:82:6d:7f:cc:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:94:08:8E:AD:FB:E8:9E:D1:B2:0D:2A:2B:58:13:9D:AC:74:1E
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:fb:02:2a:79:e2:bf:ca:85:e6:85:2e:bc:5f:80:ff:dc:
2c:ea:d9:ac:de:ed:1c:42:76:dd:a5:3c:68:fb:f0:0b:92:8d:
1e:ed:52:d0:69:97:eb:49:95:36:3b:09:80:9b:71:9a:74:34:
d2:ca:d7:b8:8d:c2:f6:28:4c:ab:06:b5:b4:35:06:6b:14:ba:
b1:05:37:48:87:73:79:99:72:e7:1d:5b:ec:78:35:f6:3a:43:
b0:56:54:29:e9:00:77:a2:d7:cd:16:73:51:3d:65:56:9e:26:
79:c3:29:c6:f3:38:2e:c7:e4:77:17:62:a5:96:f3:20:a6:b8:
83:45:61:32:f2:29:11:29:ba:65:fe:b0:14:1a:ef:25:03:3e:
cf:31:75:f1:9e:38:6d:95:b8:8e:e2:26:e1:0f:6b:4b:7c:55:
e5:08:f1:81:49:bf:b2:86:fb:18:ab:97:45:a7:4d:96:a2:45:
8b:b4:e8:63:6d:43:80:92:b2:16:4e:28:99:b1:5d:92:1f:d3:
6d:98:1b:16:48:a9:f1:3c:b0:09:b4:35:12:87:5a:5a:cd:a0:
f2:3e:8e:30:9d:aa:9f:c8:73:15:75:0f:16:e7:a0:c2:50:ad:
a7:a7:c7:1a:f4:f8:b3:99:01:0e:f8:7e:96:34:a4:28:85:43:
67:07:33:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646nhb+SZ+W95XH4bRZvFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjgzZDIxNzM0ZTA1NTVjN2ExM2M0ODU2MWNhMGI3NzU3
YTZhMGEwHhcNMjYwNjExMjMwMDM0WhcNMjYwNjEyMjMwMDM0WjAzMTEwLwYDVQQD
EyhmNTlhOTQwODhlYWRmYmU4OWVkMWIyMGQyYTJiNTgxMzlkYWM3NDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveRk/7wS68mM5Uq28sU9JYlMHYkK
eILMQS/g5J6TNWRc7M7EewLczfUs+0AXqd04u/v/azSjbMK7mD95cNgP2eFomdck
U5U6Cj324SL5x8DWcNMGNjYCqJcrVlhQbrubywQh13dBIY7RqfEaSmaU+YnP644e
7mJDe26pfPuW7OXP7XxYpMZpf6YqlhyDMKKdW/5FgXTuYnqPv2CBMqHRrTk/to0t
9H6jHLKhE3KM2+8vIpPkyPoXUmE9uJVnkVE0/ddc7/gagXqlOvHPaS2TTzY0EW40
lSNCcSHaqCGMr1p5qW1ufhumFTWxlInoUTxOGZa6AfUkxJiFCIJtf8yx0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWalAiOrfvontGyDSorWBOdrHQeMB8GA1UdIwQY
MBaAFEH4PSFzTgVVx6E8SFYcoLd1emoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZnOUlYTk9CVlhIb1R4SVZoeWd0M1Y2YWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83Mzc0NjktYWE2Ni00M2RmLTllOTQt
NzAzOTNmOWY4YWUzLzEvUWZnOUlYTk9CVlhIb1R4SVZoeWd0M1Y2YWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83Mzc0NjktYWE2Ni00M2RmLTllOTQtNzAzOTNmOWY4YWUz
LzEvUWZnOUlYTk9CVlhIb1R4SVZoeWd0M1Y2YWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcL7Aip5
4r/KheaFLrxfgP/cLOrZrN7tHEJ23aU8aPvwC5KNHu1S0GmX60mVNjsJgJtxmnQ0
0srXuI3C9ihMqwa1tDUGaxS6sQU3SIdzeZly5x1b7Hg19jpDsFZUKekAd6LXzRZz
UT1lVp4mecMpxvM4LsfkdxdipZbzIKa4g0VhMvIpESm6Zf6wFBrvJQM+zzF18Z44
bZW4juIm4Q9rS3xV5QjxgUm/sob7GKuXRadNlqJFi7ToY21DgJKyFk4ombFdkh/T
bZgbFkip8TywCbQ1EodaWs2g8j6OMJ2qn8hzFXUPFuegwlCtp6fHGvT4s5kBDvh+
ljSkKIVDZwczlg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:30:11 2026 by rpki-client