
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: 9WSgc/lTcJWxBe7Ih3KrFyi96TEmOJVl7kvsTZGtawE=
Subject key identifier: B6:6B:67:7E:F1:60:22:3E:8F:71:DE:0B:C5:E3:09:FC:A0:43:13:E9
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 01A0024A7BD066104A95B741EE2598A91C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 16E8
Signing time: Fri 14 Aug 2026 22:00:30 +0000
Manifest this update: Fri 14 Aug 2026 22:00:30 +0000
Manifest next update: Sat 15 Aug 2026 22:00:30 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: OhCn7wIude29wcx6gzSz/uVdEuB8zgPo/24DqwFQgqE=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:7b:d0:66:10:4a:95:b7:41:ee:25:98:a9:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Aug 14 22:00:30 2026 GMT
Not After : Aug 15 22:00:30 2026 GMT
Subject: CN=b66b677ef160223e8f71de0bc5e309fca04313e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:a5:a4:72:0b:92:02:e8:40:e4:8e:14:2b:
54:1d:f1:5c:e7:19:81:23:2a:64:23:3d:6b:bb:e3:
22:3c:bd:7f:68:8d:2c:84:9a:c0:9b:3f:f1:c5:ae:
8d:49:5e:f5:1c:33:2e:0e:5b:e5:ce:a7:ee:b8:98:
9c:e1:36:38:15:a2:d7:d0:b1:e4:6e:9b:6a:9d:d8:
f4:22:a7:85:f9:ad:4f:1d:70:e7:d9:99:6c:9a:87:
cf:08:b7:5f:02:26:40:25:32:75:46:b6:90:1e:29:
6c:9f:e3:42:19:b7:95:5f:31:09:99:37:07:ec:78:
8b:7e:d5:0b:f6:0f:e0:25:f2:68:0a:06:3c:37:cd:
2e:77:90:d1:a9:01:3b:a8:aa:dd:13:09:d3:70:ce:
8c:bf:3c:94:10:c4:25:a7:c6:71:33:c9:f9:5f:3f:
7d:e3:74:47:de:aa:a8:cd:97:8b:ce:d9:d6:16:6e:
8e:40:98:73:01:20:47:79:cd:92:0b:93:db:11:d8:
5e:d6:02:de:11:bb:60:45:94:45:3c:7b:de:35:02:
27:4c:41:05:4d:0a:31:b6:7b:e3:3a:2d:e0:ef:ec:
48:52:ef:09:a3:c0:7e:63:87:c1:94:47:f0:3d:56:
6d:b3:d0:e4:ea:17:09:16:33:58:86:f7:73:de:91:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:67:7E:F1:60:22:3E:8F:71:DE:0B:C5:E3:09:FC:A0:43:13:E9
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:f9:90:22:09:f2:8f:f0:98:5c:b9:5d:1a:54:c8:cf:06:
fc:12:4a:51:a2:71:28:4f:55:02:97:43:22:6b:e4:ce:66:78:
91:d2:79:7e:8d:d7:b1:43:95:1a:b8:70:23:c6:c1:c9:6a:d3:
44:a6:f9:37:07:12:65:33:b7:af:46:96:08:37:ce:1b:8f:91:
64:ed:ee:88:2c:e3:1d:05:c4:e4:45:4b:9b:12:dc:53:72:f7:
4b:cd:69:7d:02:a9:dd:04:e4:f3:66:1a:52:27:21:08:0a:5c:
da:ad:9c:6b:b1:c1:89:fc:38:2e:cb:08:b8:3e:b0:d5:7e:bc:
d0:26:4f:ca:80:7e:ab:41:a2:75:60:bb:49:66:e0:46:40:69:
ef:53:20:71:16:5b:43:38:fd:21:4d:0b:61:d8:30:a7:2b:37:
3b:75:6b:16:28:c6:ba:06:c2:b6:8f:01:83:51:85:5d:95:15:
ef:c1:c1:d3:34:1d:e5:a6:56:4d:1e:e5:44:6b:d4:87:b4:de:
8d:4f:81:52:27:6c:76:cd:69:66:1d:79:f8:95:c3:03:4d:2d:
71:2a:f6:63:b5:9d:cc:53:85:c2:8e:77:e3:d4:ec:9c:45:85:
72:e2:b9:ed:9c:e0:e8:ff:33:fb:6d:dd:cc:51:7c:a5:8d:1a:
c2:69:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:17 2026 by rpki-client