Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 1JsWExvTIL5xUK7T3mbOtlGpFImnlOIv3HrtD5B0NY8=
Subject key identifier: 94:CD:58:48:CC:1A:67:40:50:44:32:2D:DB:15:A6:A7:DC:3F:34:50
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019E3ED29745A2DF78B5CC98F364944C907E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0D85
Signing time: Tue 19 May 2026 06:00:49 +0000
Manifest this update: Tue 19 May 2026 06:00:49 +0000
Manifest next update: Wed 20 May 2026 06:00:49 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: MrZdRS+NybmD9iwa9/HrCn8m5ZTH6eBejcXwJC6RsLM=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:d2:97:45:a2:df:78:b5:cc:98:f3:64:94:4c:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: May 19 06:00:49 2026 GMT
Not After : May 20 06:00:49 2026 GMT
Subject: CN=94cd5848cc1a67405044322ddb15a6a7dc3f3450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:9e:6a:5f:4a:71:22:dd:05:96:15:9b:43:
1b:e4:d1:3e:10:80:43:a9:92:93:3c:3c:fb:85:fb:
0f:5b:c4:3a:7d:1a:fa:0d:67:ca:28:b7:05:51:21:
42:ce:4c:4d:ac:f2:d9:49:f4:b9:bc:22:bb:82:be:
72:53:42:81:e5:41:45:c5:eb:70:65:f1:ae:ae:88:
07:a2:61:f7:78:b0:73:07:ae:72:06:de:82:1b:fe:
d8:c0:2b:e2:36:46:c0:24:9a:10:dd:11:0f:5b:4d:
37:83:f6:bc:76:3c:11:cf:7b:f5:43:98:10:ec:5c:
24:ab:35:b1:e4:70:ff:2b:e5:84:39:43:d5:83:65:
65:d6:ce:03:36:87:25:31:81:6b:95:23:10:68:b9:
f3:d7:55:56:a2:8b:8e:c9:f6:ef:de:b1:da:54:c2:
26:cd:be:d8:d4:c7:bc:67:0c:bc:4f:ff:14:46:8b:
5a:b9:44:e7:15:c5:41:26:35:08:47:14:31:7f:f3:
54:81:3c:06:ea:a6:dc:82:51:8b:8a:6e:58:57:5e:
b3:62:67:55:fa:93:3a:03:0b:31:05:da:1a:f9:38:
dc:26:71:c0:69:58:7f:59:56:33:bc:c7:2f:1f:84:
85:7e:0a:c0:56:e4:05:1e:9c:57:ba:32:4c:d8:32:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:58:48:CC:1A:67:40:50:44:32:2D:DB:15:A6:A7:DC:3F:34:50
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:96:35:41:07:2b:1e:67:06:84:8a:02:4f:33:24:6a:18:59:
3a:c8:26:ee:09:5c:7f:10:77:9f:b8:21:7a:28:8b:8a:0e:85:
b2:ba:64:f3:b4:78:88:86:04:cb:6a:04:fd:d4:39:ce:9b:65:
a8:f4:72:cf:15:35:cc:de:7d:66:ff:64:c5:85:f3:43:32:e9:
3c:f8:3f:11:60:1f:cf:93:c1:0b:02:40:9e:8b:ea:8a:15:c7:
6e:5e:37:cd:db:8f:d1:7d:e8:33:46:dc:d7:88:c3:d7:7d:a7:
e0:11:1a:61:52:ca:51:60:8e:bc:bb:5f:00:54:3b:2a:b5:15:
6a:77:09:18:a7:34:cb:ef:66:6d:88:94:26:82:a7:9b:82:d7:
09:55:e0:e7:50:4a:32:dd:dd:96:6f:c9:d6:69:17:84:1d:d1:
ac:fe:af:49:aa:11:fd:7b:7a:a4:8a:be:ce:56:e0:71:09:df:
43:a4:ec:aa:38:d3:70:ba:a7:f4:33:61:88:85:50:2e:64:6b:
4a:57:34:31:56:eb:d6:1d:21:b1:b9:50:18:e7:48:72:5b:90:
28:d7:c9:6d:7e:19:f9:d7:b7:13:b7:12:59:0f:67:58:bd:8a:
de:ad:22:f0:6e:ad:0d:62:94:e0:96:ef:72:f8:2b:c4:d3:e0:
c5:95:17:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4+0pdFot94tcyY82SUTJB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2NlNzhmNGFjM2JhOTAyYTBjMzhkYzAxYTBjNWYyMTI2
NTE5YjAwHhcNMjYwNTE5MDYwMDQ5WhcNMjYwNTIwMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg5NGNkNTg0OGNjMWE2NzQwNTA0NDMyMmRkYjE1YTZhN2RjM2YzNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsimeal9KcSLdBZYVm0Mb5NE+EIBD
qZKTPDz7hfsPW8Q6fRr6DWfKKLcFUSFCzkxNrPLZSfS5vCK7gr5yU0KB5UFFxetw
ZfGurogHomH3eLBzB65yBt6CG/7YwCviNkbAJJoQ3REPW003g/a8djwRz3v1Q5gQ
7FwkqzWx5HD/K+WEOUPVg2Vl1s4DNoclMYFrlSMQaLnz11VWoouOyfbv3rHaVMIm
zb7Y1Me8Zwy8T/8URotauUTnFcVBJjUIRxQxf/NUgTwG6qbcglGLim5YV16zYmdV
+pM6AwsxBdoa+TjcJnHAaVh/WVYzvMcvH4SFfgrAVuQFHpxXujJM2DKpfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTNWEjMGmdAUEQyLdsVpqfcPzRQMB8GA1UdIwQY
MBaAFEB8549Kw7qQKgw43AGgxfISZRmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMt
YTk3MWEzMzRmYWE0LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMtYTk3MWEzMzRmYWE0
LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJY1QQcr
HmcGhIoCTzMkahhZOsgm7glcfxB3n7gheiiLig6Fsrpk87R4iIYEy2oE/dQ5zptl
qPRyzxU1zN59Zv9kxYXzQzLpPPg/EWAfz5PBCwJAnovqihXHbl43zduP0X3oM0bc
14jD132n4BEaYVLKUWCOvLtfAFQ7KrUVancJGKc0y+9mbYiUJoKnm4LXCVXg51BK
Mt3dlm/J1mkXhB3RrP6vSaoR/Xt6pIq+zlbgcQnfQ6TsqjjTcLqn9DNhiIVQLmRr
Slc0MVbr1h0hsblQGOdIcluQKNfJbX4Z+de3E7cSWQ9nWL2K3q0i8G6tDWKU4Jbv
cvgrxNPgxZUX5w==
-----END CERTIFICATE-----
Generated at Tue May 19 10:59:59 2026 by rpki-client