Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: ia6rleAztGML/NpnLa/ByaSWXlwEaS9OwZx3tOXDGtU=
Subject key identifier: C3:A7:49:FF:AB:F5:2D:33:A0:53:A2:06:D0:8B:9C:2F:B0:9F:A8:08
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019F12D38A00D759A9880DB632589BAD0BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 166C
Signing time: Mon 29 Jun 2026 10:01:21 +0000
Manifest this update: Mon 29 Jun 2026 10:01:21 +0000
Manifest next update: Tue 30 Jun 2026 10:01:21 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: 2NekbjxiEFwWqHBNtG6KWiEGwje8DcE4OGXpS0N8Hw0=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:8a:00:d7:59:a9:88:0d:b6:32:58:9b:ad:0b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jun 29 10:01:21 2026 GMT
Not After : Jun 30 10:01:21 2026 GMT
Subject: CN=c3a749ffabf52d33a053a206d08b9c2fb09fa808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:0c:a6:ff:8b:b3:31:47:26:12:8e:91:c2:
5d:8c:db:5e:37:78:d2:2c:79:c4:9a:89:6a:2d:da:
ac:40:71:3f:7c:e9:c4:4d:7f:72:f7:c8:ee:c8:b8:
a0:b5:ad:63:f8:a8:b0:5e:5d:2c:fc:56:ea:9d:6c:
ed:68:2f:26:c3:35:e4:68:21:27:99:04:5e:6a:c5:
ec:df:c2:19:7a:c2:22:ae:53:57:cf:81:c3:1a:5b:
68:e2:ea:b4:63:f6:26:aa:9f:dc:ad:74:bf:14:dd:
1f:9e:f2:76:c2:76:05:73:da:19:90:8a:3e:b2:bd:
03:18:c4:cc:39:a0:fd:1f:8c:e6:b3:98:85:1a:2b:
d0:1d:c9:43:18:36:5a:dd:f9:fd:c5:15:54:ff:31:
4b:ed:06:c9:96:f4:23:18:2a:5b:56:d9:8d:ab:50:
ee:6d:90:64:14:2f:96:04:cf:09:6a:88:a8:24:05:
0b:6e:26:0c:88:39:7f:2f:c8:ea:9e:8f:28:f8:46:
c9:a3:8e:62:d4:c7:fb:18:4b:ae:5d:e2:3f:28:4a:
f6:77:3b:fd:84:59:14:07:8d:55:83:27:a2:9d:99:
06:f4:58:28:98:b5:39:f4:0d:8d:70:f8:e7:52:c0:
d8:e0:97:d8:34:ab:f1:e1:4d:81:9f:43:d3:3c:69:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:49:FF:AB:F5:2D:33:A0:53:A2:06:D0:8B:9C:2F:B0:9F:A8:08
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:07:16:44:a0:1e:3d:d2:82:68:75:38:04:3d:8c:54:19:ce:
c3:3b:25:84:2d:45:9b:c4:fe:77:b8:dd:5c:d9:ba:5b:c1:c1:
30:df:81:38:d4:6d:2d:c3:82:69:c5:f5:d5:f7:5a:c6:29:a8:
69:45:aa:ee:71:a2:6f:fe:05:81:91:0a:cf:18:f7:68:0d:ec:
d8:14:6d:43:4e:3b:99:df:10:74:53:c6:f6:98:a8:83:fd:ba:
05:82:16:52:00:54:c6:72:e3:4d:55:bc:15:02:a2:c3:66:11:
24:52:d6:ee:de:e1:d9:e7:77:4e:3c:3b:15:21:00:b0:3a:f9:
0c:9f:74:7f:43:4e:00:9e:56:3b:ee:05:b7:c7:59:65:5d:aa:
9b:db:26:6e:95:c8:06:b5:37:4b:dd:e5:4c:9c:6e:63:cf:19:
0c:06:e7:f5:47:8b:67:bb:3f:17:70:d8:b0:d5:b7:88:ba:49:
77:da:c2:83:3e:f1:3b:b8:4e:e3:14:7e:96:aa:04:22:4d:c1:
11:06:37:28:b0:b4:98:de:0b:91:0e:d2:35:17:ad:b5:f2:b0:
2a:26:0f:df:f4:df:a7:9b:4b:18:f0:54:a0:01:80:44:ee:5c:
7f:5c:c7:08:5b:5e:97:7b:ba:3d:b8:36:35:e0:40:d9:92:7d:
ba:4e:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:08 2026 by rpki-client