Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: rHt+p3s4Ya7p8jfX/9S3dvk1iNCkVzyy1v24LGK678g=
Subject key identifier: DF:00:01:FE:68:BE:16:B4:E7:44:21:CA:C3:49:BC:7F:54:30:0D:D8
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 019EB9FD84255C546D22625B743E29385282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0945
Signing time: Fri 12 Jun 2026 04:00:59 +0000
Manifest this update: Fri 12 Jun 2026 04:00:59 +0000
Manifest next update: Sat 13 Jun 2026 04:00:59 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: grxdHSPn601XoqMZWmvj5vYONtP7W8nIYsYcObchaB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:84:25:5c:54:6d:22:62:5b:74:3e:29:38:52:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Jun 12 04:00:59 2026 GMT
Not After : Jun 13 04:00:59 2026 GMT
Subject: CN=df0001fe68be16b4e74421cac349bc7f54300dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:d7:6c:cc:48:2d:77:f7:9b:84:4d:37:43:
79:08:0e:17:22:fb:7e:1b:b7:d4:56:fa:c4:05:be:
0e:dd:26:4f:d4:35:b2:87:95:34:e8:49:c3:c9:85:
06:e6:9b:7f:6b:45:90:8e:b2:d3:b2:57:7b:2e:5b:
47:27:ff:70:a1:ed:40:7a:f3:1a:fb:76:77:8a:ec:
bb:da:f7:cd:1f:60:77:19:2f:c8:dc:26:ce:5d:23:
68:71:cd:e4:0a:2f:05:ef:62:43:e6:3a:a6:a1:74:
b4:9b:22:97:48:ec:a6:f8:18:cd:50:c0:38:e4:73:
b8:94:e1:ea:0e:6f:80:52:d5:f6:c9:39:c0:4b:41:
b8:64:63:82:44:4a:6d:2e:ba:79:5d:cf:24:65:7f:
1a:6d:55:dc:bb:95:ca:ea:eb:71:88:95:17:92:67:
be:61:9e:1c:c8:7b:0b:b6:d3:de:3d:41:a2:63:e8:
1f:dc:85:3b:12:db:42:c0:85:f8:f8:24:6e:ce:ac:
9f:df:27:3e:96:99:d0:d5:17:03:e9:ec:a1:d1:1c:
d5:a7:37:e7:82:97:07:fd:3f:41:74:c4:0c:e5:78:
5d:36:0a:f8:11:1a:34:e7:8e:d8:a9:c0:df:57:19:
85:55:6b:54:65:b3:fa:75:c5:98:18:a4:0d:4b:54:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:01:FE:68:BE:16:B4:E7:44:21:CA:C3:49:BC:7F:54:30:0D:D8
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c4:59:36:9e:33:83:8a:f5:36:17:a8:ac:2d:f6:bc:34:40:
32:89:6c:d4:c7:2a:5b:7a:56:1e:ef:9f:48:ee:1f:18:3d:c9:
3f:35:09:88:b7:45:dc:93:66:9e:d0:c4:c2:f9:c8:d5:43:69:
fc:3f:4b:7e:c0:b0:cd:67:53:8e:59:04:53:53:6c:71:59:2e:
1c:65:00:ac:93:42:14:3b:e5:67:72:75:fa:29:fc:cf:8b:54:
be:ff:1d:83:19:ff:d2:cd:c0:2a:8a:7b:93:de:de:aa:74:3c:
2a:e5:5d:fb:61:dd:5f:03:22:7a:c0:f7:7e:19:6b:01:8a:5c:
cb:72:df:78:7f:86:4d:44:c4:c9:cd:f2:1f:c8:c2:6a:9f:ea:
84:5c:c8:11:e9:a8:27:d6:fc:ba:54:d3:0d:ad:55:8e:2a:58:
26:5b:5e:25:8d:c6:f2:68:eb:92:88:5c:f3:a2:cc:cf:93:e2:
d9:96:f4:f0:b1:7b:15:db:17:87:80:44:f4:a3:02:c2:27:45:
69:de:43:8c:11:80:94:8d:eb:4f:07:1b:1b:da:5f:98:2c:79:
48:c4:10:36:68:1f:09:8e:b7:8a:57:fd:4d:6a:fb:e4:11:8f:
c0:e8:01:ac:67:bf:f7:37:53:f0:73:6b:b9:5b:ec:ef:3e:b7:
d9:2e:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:06:21 2026 by rpki-client