Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: Xdp7ILyBx8Q75qNOlARJpgLF5PB8dFNqKAhkTJy6Nus=
Subject key identifier: 99:5A:61:33:0E:76:5C:6E:59:4C:D4:22:A1:E6:C6:5F:38:F9:2E:D5
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019EE443AC6A0C7B44F0FAD071231EE9C259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1973
Signing time: Sat 20 Jun 2026 09:01:40 +0000
Manifest this update: Sat 20 Jun 2026 09:01:40 +0000
Manifest next update: Sun 21 Jun 2026 09:01:40 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=)
3: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: JvYjNWXLqiNvEdPMsjPSFtW3jgB0W32ZGUxCogfxfDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:43:ac:6a:0c:7b:44:f0:fa:d0:71:23:1e:e9:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jun 20 09:01:40 2026 GMT
Not After : Jun 21 09:01:40 2026 GMT
Subject: CN=995a61330e765c6e594cd422a1e6c65f38f92ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:e3:b4:42:cc:9a:1a:fb:66:6c:c1:23:53:
97:ec:10:77:c6:ee:83:f9:c0:ec:9d:b5:77:1a:19:
4d:90:84:c1:d3:5a:cf:46:02:d2:a7:7b:f4:07:4a:
9b:cd:f3:4b:0e:65:96:67:49:9b:3c:c9:53:43:db:
23:cc:b4:97:66:fb:c7:2d:7b:13:a3:4c:04:37:d7:
77:e8:81:48:da:37:ee:db:cd:e5:b8:7f:56:43:1f:
de:6f:39:99:79:38:12:3f:7d:8f:2d:63:e5:2d:65:
f6:e1:a7:2d:38:d8:50:65:00:ae:39:fb:47:ae:e7:
a4:73:4e:18:70:26:f3:32:03:46:3c:6a:b7:ed:06:
68:46:fe:6d:af:ec:0f:40:04:af:c4:f3:c7:b4:fa:
f3:25:e6:a3:99:e6:cc:a7:c8:5d:79:42:b2:01:e3:
b5:68:de:fd:92:3f:ea:1a:96:ad:07:a3:94:67:06:
5d:a5:24:d3:a9:5a:a8:37:eb:a3:46:50:5c:38:7e:
08:dc:31:4e:65:5d:12:e1:14:5f:bc:14:ce:03:1d:
6b:e8:fa:7e:6a:0b:08:a1:33:21:58:c6:ce:4c:97:
f3:d0:83:47:0c:7b:21:b9:89:08:ff:83:24:46:68:
47:a7:df:7e:44:f7:63:75:f7:17:9f:aa:f1:a3:fe:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:61:33:0E:76:5C:6E:59:4C:D4:22:A1:E6:C6:5F:38:F9:2E:D5
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a4:1c:7b:47:59:50:b5:33:7a:a9:c9:d9:e0:d1:7f:23:80:
83:6d:3f:b3:60:59:25:47:49:e2:69:34:62:6a:30:ef:b2:6f:
e5:e3:5d:25:a5:56:fe:4e:71:44:26:95:13:ec:62:73:f0:4a:
76:96:eb:08:2c:69:6a:d6:63:83:dd:25:f7:d7:a0:9d:5e:21:
1c:b9:a5:09:10:95:82:32:f9:3d:fd:f7:c9:6d:df:eb:12:5b:
4a:49:f3:37:77:ee:f4:c6:49:57:4f:7f:33:d8:6c:d5:a8:ab:
75:ef:82:53:8f:df:1d:af:75:4a:05:90:a9:37:49:47:73:89:
d8:31:f6:64:ce:41:eb:6d:3f:42:16:6b:7a:39:59:7a:fd:34:
c9:3b:ae:89:97:b7:a8:3f:48:d1:ec:ad:e8:13:80:e0:90:a5:
cd:2d:b9:78:1f:ec:8f:cc:6b:8b:a8:00:9f:09:10:bf:80:ec:
af:5a:2f:e2:6c:db:48:e6:93:c7:e5:9b:3e:59:b4:14:fc:bb:
6b:46:b1:0b:6c:f1:67:2f:23:f2:7e:2c:34:c0:ba:ad:00:91:
33:5b:b1:68:52:fe:1a:99:76:0d:69:23:b4:8c:e3:a6:ee:5f:
74:74:35:de:0c:cf:2f:3e:8b:65:0d:26:2f:d1:13:21:2c:da:
f3:89:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 12:47:00 2026 by rpki-client