Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: XPJZye8CR8kjK08L1L+Xr71PGtu2tlk54w/SwjgDAlM=
Subject key identifier: 67:92:43:5E:91:F2:AC:25:FA:3C:E5:93:40:05:31:6D:4D:1E:2B:E9
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019F10E53744FAB88C3DBD62D43808A17480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 166B
Signing time: Mon 29 Jun 2026 01:01:24 +0000
Manifest this update: Mon 29 Jun 2026 01:01:24 +0000
Manifest next update: Tue 30 Jun 2026 01:01:24 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: posFqAo/VAofMH2Do10+UwGih+bf3InN8vAGCo7RGMY=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:37:44:fa:b8:8c:3d:bd:62:d4:38:08:a1:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jun 29 01:01:24 2026 GMT
Not After : Jun 30 01:01:24 2026 GMT
Subject: CN=6792435e91f2ac25fa3ce5934005316d4d1e2be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:f3:78:85:45:8e:ae:74:17:c7:2c:f7:9d:
7e:74:0b:a3:12:02:c3:40:42:1c:dd:15:e6:9f:5f:
46:d2:77:04:d7:3b:38:db:9a:14:9c:68:bc:0c:39:
4e:3f:40:db:c2:80:02:a0:22:a0:87:b4:8c:9b:79:
e0:e6:2d:9c:29:d0:88:9c:56:e8:80:7d:6d:b9:de:
f1:df:5a:21:8b:27:c3:b4:ec:74:2b:78:d9:61:ff:
e1:c2:5d:c9:40:44:cc:90:0c:51:bf:20:31:b8:91:
96:11:36:5e:84:67:ee:c9:f1:c6:09:e1:09:fd:88:
18:24:53:4a:a5:28:f8:61:55:30:a4:29:88:2b:74:
a0:47:30:71:f9:ce:75:89:72:dd:cb:0a:ce:35:f5:
8c:82:72:a9:94:f7:0f:7b:08:00:a9:4d:84:6b:2d:
09:a3:eb:dc:f1:7b:64:52:2e:45:39:5a:e2:c8:32:
be:3e:2c:08:2b:0b:ff:20:c4:55:3b:46:93:aa:e6:
b9:7e:f6:b3:b1:8f:10:a7:9b:1f:79:5d:8c:4a:bb:
ee:3c:a9:4f:9c:34:3f:85:2f:ba:75:d0:84:c2:fc:
1f:36:3a:f0:56:35:43:da:f1:d6:b5:51:c8:7a:cc:
1b:12:80:37:85:89:a1:f4:df:d6:10:e1:be:0e:25:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:43:5E:91:F2:AC:25:FA:3C:E5:93:40:05:31:6D:4D:1E:2B:E9
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:7d:b6:86:d1:36:ea:1d:2d:92:c9:7e:e9:01:bb:d4:2a:
ee:a1:ad:16:e1:ca:02:24:47:ff:dd:53:73:1e:24:e0:db:5a:
36:cd:fb:53:8e:e3:f9:7f:d2:0c:fb:91:68:33:b3:ab:95:e0:
d7:ca:de:f2:16:6d:e5:ae:69:e1:0a:8c:0e:6c:e7:3f:59:5c:
7e:a5:65:93:81:5d:9e:95:0b:b1:31:3e:ef:4c:b1:d4:c1:96:
9c:68:2d:a4:2d:44:78:70:cc:4d:97:51:1c:7e:17:d8:4e:54:
00:3f:84:87:e2:29:d3:6d:a6:02:cd:d2:eb:99:bb:cd:0b:a6:
cd:86:90:c8:dd:bc:bf:7c:65:05:c9:2e:b6:04:66:8d:e0:3d:
cb:1e:67:66:7b:b0:f0:87:3f:96:4b:95:da:7c:87:3d:57:53:
04:32:71:af:0b:7f:b3:b1:0e:24:28:fb:e6:5f:3c:e9:e7:bd:
5a:7b:b1:29:bd:57:98:5d:5d:ab:36:69:6c:02:71:87:c0:62:
23:a8:aa:50:09:32:f6:b7:1a:08:52:32:62:52:56:5d:ac:ae:
30:3e:fe:1f:89:d9:0d:dd:36:fd:aa:0f:ad:cb:16:52:06:f3:
6e:21:41:11:f9:ea:b5:3d:e2:7c:52:dc:0c:97:38:c6:5b:7b:
fa:f1:d5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5TdE+riMPb1i1DgIoXSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDNlM2Y3MDI0NTg5Yjk2MmFkZTgxY2Y0NDU2MzA2ZjRk
MzVlNjgwHhcNMjYwNjI5MDEwMTI0WhcNMjYwNjMwMDEwMTI0WjAzMTEwLwYDVQQD
Eyg2NzkyNDM1ZTkxZjJhYzI1ZmEzY2U1OTM0MDA1MzE2ZDRkMWUyYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAbzeIVFjq50F8cs951+dAujEgLD
QEIc3RXmn19G0ncE1zs425oUnGi8DDlOP0DbwoACoCKgh7SMm3ng5i2cKdCInFbo
gH1tud7x31ohiyfDtOx0K3jZYf/hwl3JQETMkAxRvyAxuJGWETZehGfuyfHGCeEJ
/YgYJFNKpSj4YVUwpCmIK3SgRzBx+c51iXLdywrONfWMgnKplPcPewgAqU2Eay0J
o+vc8XtkUi5FOVriyDK+PiwIKwv/IMRVO0aTqua5fvazsY8Qp5sfeV2MSrvuPKlP
nDQ/hS+6ddCEwvwfNjrwVjVD2vHWtVHIeswbEoA3hYmh9N/WEOG+DiV4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeSQ16R8qwl+jzlk0AFMW1NHivpMB8GA1UdIwQY
MBaAFEBD4/cCRYm5Yq3oHPRFYwb0015oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUt
OGVmODg4N2UyZDFjLzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jZTE1MzctMzg5Mi00Njg0LWE2NWUtOGVmODg4N2UyZDFj
LzEvUUVQajl3SkZpYmxpcmVnYzlFVmpCdlRUWG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmJ9tobR
NuodLZLJfukBu9Qq7qGtFuHKAiRH/91Tcx4k4NtaNs37U47j+X/SDPuRaDOzq5Xg
18re8hZt5a5p4QqMDmznP1lcfqVlk4FdnpULsTE+70yx1MGWnGgtpC1EeHDMTZdR
HH4X2E5UAD+Eh+Ip022mAs3S65m7zQumzYaQyN28v3xlBckutgRmjeA9yx5nZnuw
8Ic/lkuV2nyHPVdTBDJxrwt/s7EOJCj75l886ee9WnuxKb1XmF1dqzZpbAJxh8Bi
I6iqUAky9rcaCFIyYlJWXayuMD7+H4nZDd02/aoPrcsWUgbzbiFBEfnqtT3ifFLc
DJc4xlt7+vHVmg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:12 2026 by rpki-client