Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: hzMPkV4ychUzVqf3jZ+TkDCFUWVcZA7Epj8qVkMryWw=
Subject key identifier: A5:34:FB:35:73:41:65:2C:A1:32:86:95:6E:96:82:8A:E5:AC:2C:71
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019E9BF2ED70D6C2B5BBDCC020210998D547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1946
Signing time: Sat 06 Jun 2026 08:00:49 +0000
Manifest this update: Sat 06 Jun 2026 08:00:49 +0000
Manifest next update: Sun 07 Jun 2026 08:00:49 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: +HA0HYNG2D4qr6WVlMKl2hA3HueGs4ZvOF54R4wfg2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:ed:70:d6:c2:b5:bb:dc:c0:20:21:09:98:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jun 6 08:00:49 2026 GMT
Not After : Jun 7 08:00:49 2026 GMT
Subject: CN=a534fb357341652ca13286956e96828ae5ac2c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:01:9f:e7:4c:b2:76:4b:ab:a7:8a:b7:50:
4f:cf:9c:68:85:b2:25:cc:38:c4:4c:87:99:18:00:
db:a4:af:75:5b:22:5c:25:8c:48:15:85:88:fd:92:
93:98:a3:4c:b8:90:5b:b4:ba:19:02:df:da:e8:4c:
a8:6b:d0:a2:fd:2a:cb:88:5a:0c:b8:3a:8c:19:01:
aa:c2:85:05:91:c2:fb:2a:72:18:09:89:2e:58:5e:
45:76:bc:58:f3:4e:bf:9c:50:d0:04:47:ed:0f:63:
fc:f0:33:aa:ef:b7:45:df:11:af:80:a7:2a:d3:96:
a9:b4:6a:a6:16:c3:b5:cd:68:8e:c0:39:dc:b9:df:
21:58:7c:80:ad:ad:57:d0:b0:c0:a1:28:a4:4f:5d:
33:48:7b:f0:9c:f7:41:d7:f7:4c:94:15:15:f0:e6:
05:fb:97:42:11:45:ca:be:3b:dd:4e:96:14:c0:68:
81:27:0f:04:59:64:4b:32:bb:9b:8b:77:19:6b:c6:
e3:5b:6d:4b:92:a7:e5:c1:4d:ee:a1:29:bb:88:b7:
ba:55:f2:d8:96:08:3d:6a:d9:71:07:86:70:a2:f2:
23:87:c3:88:a4:55:fc:9f:f9:ef:d8:f1:52:53:32:
7b:c4:aa:78:6f:4a:3f:36:30:cc:0c:36:d9:b4:55:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:FB:35:73:41:65:2C:A1:32:86:95:6E:96:82:8A:E5:AC:2C:71
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:9d:49:ee:e0:0f:0d:6c:b7:42:26:f4:b3:7d:a0:94:71:
44:91:36:1f:d4:36:11:6b:53:94:9c:76:ce:64:af:9e:fa:ed:
e0:b5:04:b7:94:6c:d9:ab:68:c7:d2:43:01:3a:17:61:c5:93:
a5:09:60:7b:f0:45:03:b8:3d:0a:f1:be:c4:e5:89:b7:24:b0:
96:76:43:16:ab:4c:fa:45:23:bc:f5:18:ec:e0:3f:1d:36:2a:
53:b3:58:62:bd:83:c9:11:02:70:b0:3a:9a:9a:8c:41:32:7f:
dd:cd:9c:17:8e:e0:c2:90:50:6c:d9:ba:39:1f:b1:72:29:5c:
73:f1:d7:26:54:d2:02:45:6b:4b:f4:e2:fb:0a:48:f9:cc:ee:
cf:80:6b:8c:65:e7:65:61:06:03:eb:aa:80:0f:d0:8d:8c:80:
31:cf:91:b4:4c:a5:96:d6:e4:08:57:05:2d:54:ac:5d:05:4c:
01:ba:cd:b9:33:39:fe:62:13:8f:25:65:1f:cc:02:3a:b4:7c:
a1:52:0b:bd:a2:38:af:f8:db:cb:c8:ac:e2:86:78:76:f6:9b:
4f:04:7e:bc:bb:a5:94:33:2d:26:ee:18:d5:fb:28:78:12:9e:
7b:58:5e:e5:30:98:2d:b4:07:83:ba:7d:2c:b0:19:14:95:f7:
e4:ea:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:04:23 2026 by rpki-client