Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: Xm9O05KrhUuV+KqagCHUpqUue/6tRowC3yj8hYsvdt0=
Subject key identifier: E1:09:A7:DF:85:E4:40:B1:78:12:4B:CE:70:05:68:27:61:18:CF:4A
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 019EB733EA1519B27A144084A8A3FD2B0393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0924
Signing time: Thu 11 Jun 2026 15:01:33 +0000
Manifest this update: Thu 11 Jun 2026 15:01:33 +0000
Manifest next update: Fri 12 Jun 2026 15:01:33 +0000
Files and hashes: 1: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: FDs3DCquwTWSVVCT1hH8gBERPZKegXK9Bz9yszLRo3Q=)
2: cnMksPM8qHUJS7PE1xwm-IJZIEs.roa (hash: F0Xawui/3p0KQ1PsdF0IPS6D5QX+wIN0HvSrMKPyjOo=)
3: iXKcLuJmGyAb1eHjCTVSp7W3GfM.roa (hash: fKesRGsQOYtr1MHvJTlZYCSawG7ul48aKfBiS+3ImGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:ea:15:19:b2:7a:14:40:84:a8:a3:fd:2b:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Jun 11 15:01:33 2026 GMT
Not After : Jun 12 15:01:33 2026 GMT
Subject: CN=e109a7df85e440b178124bce700568276118cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:f9:52:01:87:e2:22:be:aa:7b:dd:8e:2a:
5e:21:4a:af:63:da:ac:1c:7d:c9:59:ba:09:07:8c:
f5:28:e6:57:b3:78:b9:d0:03:86:a4:e4:30:78:a5:
e8:c8:5a:e7:1e:d2:dd:2e:00:72:a0:96:d7:89:a3:
81:f8:95:f7:4e:6a:f5:c0:07:4f:ba:fb:a7:37:a3:
56:56:bf:1c:c0:f7:e2:e9:bd:6f:1e:6e:c9:48:32:
ba:65:b0:55:84:bd:59:ad:ac:96:62:84:f0:2b:7f:
04:c5:31:23:15:e9:a6:aa:3e:8c:8a:b8:24:07:4c:
ad:80:ea:68:21:4e:da:a3:fd:be:b2:c9:31:b9:90:
48:7b:5b:fa:8c:7a:7f:30:2b:5c:39:3d:f6:55:7b:
52:39:9b:da:6c:54:65:ff:0f:7a:f7:f0:b9:28:19:
9d:69:41:c1:81:9b:c1:7c:a7:a1:c7:39:3e:dd:fe:
45:69:d6:1d:59:f5:de:e1:b9:ab:dc:4b:c5:1c:69:
45:dc:93:49:6d:d1:d5:d5:e7:4e:f9:e0:93:50:f2:
2b:9a:48:93:38:6e:a6:7e:21:2b:2b:7f:16:c9:d0:
e8:46:e1:85:57:7d:95:88:cc:ab:9f:8a:66:5d:12:
7a:a3:b2:10:ca:cd:f9:e4:0a:d9:b8:2e:c4:37:99:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:09:A7:DF:85:E4:40:B1:78:12:4B:CE:70:05:68:27:61:18:CF:4A
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:c8:f4:49:de:24:a3:a5:c5:a4:28:a3:18:ef:13:a5:f0:
56:4f:19:e2:1f:e9:e9:d2:73:63:43:24:01:57:2d:15:83:e5:
95:6b:ee:0c:98:d5:3e:72:56:33:7b:c1:65:a8:f8:ed:50:b7:
3a:56:f9:ca:c9:2d:e2:f3:ce:11:68:b8:fe:4e:e4:00:de:8a:
19:92:54:e5:16:24:1c:14:21:6f:0b:19:17:19:c2:9c:fa:58:
2e:31:62:b2:80:27:9c:d2:e3:ed:92:6b:12:67:3d:4f:31:22:
ee:39:4a:a8:d3:4b:95:52:2f:e5:98:de:05:67:78:24:e4:eb:
44:7d:00:42:a2:b4:f9:8d:f8:39:0b:6b:ae:6e:c5:d0:69:c4:
96:f5:f0:9e:4e:d3:33:64:df:56:4d:46:18:7d:73:73:55:e6:
a2:70:99:ca:ac:e2:2b:60:5a:d2:57:9a:14:85:59:2d:cf:7d:
b4:94:51:8c:0c:ab:a3:f7:3b:23:b2:19:2d:0f:01:40:eb:34:
4c:6e:00:f7:d0:84:ae:8f:67:c9:44:ac:fb:8c:9e:d5:c9:06:
1a:c0:90:e1:3b:48:a3:82:75:56:77:ec:c7:46:4e:c6:44:78:
e8:2f:83:a7:ef:8d:86:60:21:bd:98:f2:d1:02:33:6a:d3:f7:
6c:83:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:37 2026 by rpki-client