Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: 9qOceyOp2w/RJH1wjnkcLWu9BPM+zCPAyW88I0fFS9s=
Subject key identifier: 9F:0F:CE:0D:A0:B5:42:9D:1F:D1:99:A0:79:88:91:12:2D:38:F9:17
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019E83EB722B0853A0484E74354582AEB72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 0519
Signing time: Mon 01 Jun 2026 16:01:45 +0000
Manifest this update: Mon 01 Jun 2026 16:01:45 +0000
Manifest next update: Tue 02 Jun 2026 16:01:45 +0000
Files and hashes: 1: Is0EtUEGPtj5iPMrI__B634d_Gg.roa (hash: UcnAE32bQjXyoFuSdzK7Ox1KjdWOO+CqE8BXmt6ncsQ=)
2: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: ir1Tl59OFaJuF6rTlILBIJh/u4LJRv8a8FHymJ/W5ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:eb:72:2b:08:53:a0:48:4e:74:35:45:82:ae:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Jun 1 16:01:45 2026 GMT
Not After : Jun 2 16:01:45 2026 GMT
Subject: CN=9f0fce0da0b5429d1fd199a0798891122d38f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:a9:e5:99:a4:1a:8a:a6:b7:bb:fe:b5:4e:
01:9f:d1:77:95:cb:d9:87:aa:db:27:dc:1f:12:31:
9f:09:c6:c9:ea:46:1a:96:22:75:31:72:73:e2:7d:
94:ec:56:79:13:14:a2:7d:5c:4c:cb:4d:2a:83:ab:
05:de:bf:55:5e:aa:b1:96:d7:5a:76:28:f1:67:00:
92:76:c0:ba:7e:e6:e6:0c:19:5f:b6:66:cb:c8:32:
62:e1:03:25:13:4f:38:5c:43:eb:21:e2:7b:c2:7b:
64:93:bc:b2:7e:83:d8:0a:c0:d0:11:03:8c:1e:5f:
34:9c:cc:99:59:e0:ee:eb:5d:0b:ff:95:d6:82:5c:
80:25:ff:67:22:19:fd:1f:36:73:b3:26:ab:e7:ff:
22:e1:c2:4d:b1:e6:b9:d3:e4:4a:32:d2:20:c9:1e:
fb:36:f1:21:16:80:0f:96:9a:f1:35:7d:94:c1:53:
db:e6:c4:ac:58:b4:61:35:22:ad:7a:52:75:14:99:
cc:a8:3c:d2:75:02:9e:c6:8e:cb:1b:12:ee:0d:0a:
78:32:58:2f:47:af:88:ed:3e:c3:08:52:e0:9c:7d:
36:96:38:fd:ee:ea:d2:4c:30:60:d8:ef:74:b8:4e:
c0:f0:cc:bf:77:55:80:d6:64:fa:d6:1a:5a:51:aa:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:CE:0D:A0:B5:42:9D:1F:D1:99:A0:79:88:91:12:2D:38:F9:17
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:2e:95:16:ac:ec:65:4a:9a:10:07:5b:bf:be:36:1a:8e:
79:5a:78:53:22:09:5d:35:13:29:c7:96:bc:da:51:6c:09:a6:
a0:e4:47:46:aa:0c:1c:96:4d:5b:71:a2:ff:b9:1e:0b:21:d7:
04:01:24:24:b4:5d:cf:68:95:d8:69:40:40:3e:41:30:e3:f0:
ae:df:b7:fb:8b:7b:49:94:22:3b:c6:ad:f8:96:32:86:da:72:
cf:40:e9:df:1b:0d:47:26:38:c3:5c:c5:4a:8a:8a:26:e2:ec:
4f:da:2d:b5:db:bb:c4:87:60:06:cf:ff:c0:87:04:5c:33:9f:
1c:bf:0c:1e:0c:2e:5f:37:29:d7:9d:36:19:58:1f:88:4c:fe:
50:5f:83:9e:28:d6:e5:80:1f:c0:90:e9:c6:99:d8:ff:c5:fc:
8b:a0:2f:e7:48:40:61:3a:4a:1e:ed:38:9d:00:af:80:be:a4:
3c:d3:3f:59:e6:ed:cf:64:9b:65:7f:6d:a0:24:2d:9a:76:27:
4e:17:c0:56:e7:74:46:01:11:99:a1:87:0e:c9:1d:7a:d3:c2:
2e:1f:29:f9:de:ce:9f:cf:a0:62:2d:b6:96:df:ba:f4:86:4f:
c1:9c:70:66:dc:c6:5d:21:96:37:ce:ff:15:ea:6f:a0:69:a1:
5a:bd:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:28:36 2026 by rpki-client