Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: q1yrodHtfam4ZxYG8Zsg86oI2wmmrH5GArAKxo5TTSI=
Subject key identifier: 68:75:57:4F:4B:2E:98:C9:A3:AF:3E:EB:1A:A2:04:EC:00:62:45:35
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 019E235BB79C6FC28497F02A45CD0874374B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 17A1
Signing time: Wed 13 May 2026 22:01:13 +0000
Manifest this update: Wed 13 May 2026 22:01:13 +0000
Manifest next update: Thu 14 May 2026 22:01:13 +0000
Files and hashes: 1: Fs69o1yumuB_h24l2rSGVDLaJIQ.roa (hash: vdZ0BN7jIBHTZi6LLJoCAqiuS0RkgBp+kjGpn9OHcoM=)
2: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: EjzsPTmTPjgcnQcVCbIhm9Zq/LuElf+j6fW+s95hTcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:5b:b7:9c:6f:c2:84:97:f0:2a:45:cd:08:74:37:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: May 13 22:01:13 2026 GMT
Not After : May 14 22:01:13 2026 GMT
Subject: CN=6875574f4b2e98c9a3af3eeb1aa204ec00624535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:01:8f:15:86:56:8a:1a:e9:08:27:7c:b4:
a1:a4:38:8c:71:20:5b:05:52:74:52:ff:6f:79:b5:
76:71:dd:7c:81:25:6e:c2:7e:e5:4d:84:03:f8:e9:
62:2a:5a:b7:39:3d:85:70:29:1a:2a:87:19:92:b1:
e5:28:5b:d1:7a:b2:d1:a9:2a:2a:48:9c:18:8d:81:
08:c0:09:7e:34:93:81:a5:59:c5:56:41:88:b9:3b:
52:c6:bd:93:4d:8c:e5:1b:58:57:1e:e1:e7:02:fd:
cf:00:95:6b:c0:bf:2c:db:1f:7d:a3:94:db:54:2e:
96:19:1e:dc:9c:ee:b4:12:6b:f0:b1:31:23:6b:a1:
b7:5c:db:72:52:f9:89:98:c7:d7:29:b6:c6:b8:2d:
2a:55:df:ac:0d:fe:d5:72:ad:e7:0d:fe:cc:9b:b0:
d6:c7:45:aa:9e:a5:ec:33:bf:76:88:e3:d6:a4:4e:
0b:ce:6f:e1:a9:a8:94:a4:98:8e:2d:3c:09:08:91:
90:5b:76:a5:8b:34:fb:38:8f:15:07:a9:8b:c1:41:
98:9b:2b:4c:61:e6:d5:5b:30:51:f2:c2:45:33:0f:
b0:12:e6:4f:fc:6c:af:ef:51:b2:f0:d7:68:b8:8a:
e5:18:8f:c8:d7:ae:4a:f2:af:2d:f0:c4:51:d7:a3:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:57:4F:4B:2E:98:C9:A3:AF:3E:EB:1A:A2:04:EC:00:62:45:35
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:03:7d:1b:c3:f0:a9:40:bc:85:1c:d5:d1:e3:0a:d2:e7:
62:ff:94:24:95:2e:1d:c5:e4:5e:70:1b:ff:a7:fd:93:cb:50:
73:5e:54:f5:e4:71:b8:d1:ac:46:2c:0a:21:29:c8:4b:51:17:
c8:fe:d4:da:ae:a6:c2:51:97:27:c1:0d:16:13:a2:61:ee:fd:
df:8a:4a:01:f9:7f:94:f0:35:8e:0b:61:41:e7:8f:5e:2b:bb:
35:a9:be:44:26:96:90:22:99:38:c7:08:e8:08:47:d6:e5:b6:
0b:9f:66:a1:76:5b:fe:6e:c0:e0:3c:e9:83:fc:6b:34:e2:a4:
8f:f8:21:bb:1b:49:ef:b7:b3:e4:14:e8:3f:91:22:38:ed:a6:
6e:9d:ec:9d:5b:05:d8:53:f0:ab:4f:0e:ae:ad:b6:62:d5:6a:
59:7d:33:49:44:9e:50:d9:63:2f:e7:5d:47:d4:bc:69:5c:2a:
d2:75:4c:4b:33:1e:86:b2:15:01:ab:f4:d7:4d:d9:1e:d0:59:
e4:27:a6:c6:10:9e:d9:ac:76:c9:98:d9:65:85:26:51:6f:68:
1d:14:3c:0c:db:50:e2:f2:4d:b0:54:46:f3:06:09:0b:85:55:
d1:e0:6e:a7:d5:9a:5c:22:43:83:5a:98:47:b6:00:f1:20:60:
6e:0b:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:55:27 2026 by rpki-client