Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
File: QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft (raw, json)
Hash identifier: 58bQaAZzQ9nj2RQxZ6V9uULIiiBfPVcdIk/djOriImo=
Subject key identifier: 21:27:E6:91:36:F6:F1:1E:68:94:12:BC:05:43:E8:1B:1F:83:1A:7D
Authority key identifier: 40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
Certificate issuer: /CN=404284388e4d8b78e562e7b140dc358d4114c027
Certificate serial: 019FA2CE6DE88B5C08BAD785C0974796C5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:05 +0000
Manifest this update: Mon 27 Jul 2026 09:01:05 +0000
Manifest next update: Tue 28 Jul 2026 09:01:05 +0000
Files and hashes: 1: QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl (hash: GDzbrFuQPxSRwpNuA7Dzp7kZz6oIAJrGENap1X5jhRo=)
2: b9pucImMRklKE9H42beKCpH3jZQ.roa (hash: XLI5TKkW0eaR8i+yOT6IlSkbxxb0vfR2ygO3TPOk8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:6d:e8:8b:5c:08:ba:d7:85:c0:97:47:96:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404284388e4d8b78e562e7b140dc358d4114c027
Validity
Not Before: Jul 27 09:01:05 2026 GMT
Not After : Jul 28 09:01:05 2026 GMT
Subject: CN=2127e69136f6f11e689412bc0543e81b1f831a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:8c:ef:40:7d:fb:96:be:34:39:8f:1c:c5:
7f:1c:84:07:c7:e2:d5:84:ec:24:34:65:69:4a:d1:
df:b8:9e:51:00:f1:b3:8c:4b:6b:99:c9:fc:66:e1:
1a:da:19:7a:95:68:49:7f:99:bd:10:e7:75:49:d4:
0b:a6:fe:c6:b5:81:3e:6e:a9:d2:4e:cd:65:f8:ac:
8e:ca:55:34:3f:d6:d5:94:52:2e:e9:9f:f3:e5:95:
95:72:e2:57:a9:af:ae:b0:03:c2:58:15:42:35:5d:
31:11:4b:fc:1b:0b:68:bf:90:13:c9:c9:c0:89:90:
ea:7d:0e:77:41:24:33:4d:1e:93:24:a1:7e:7e:ff:
03:2a:87:a1:81:81:53:56:15:b7:97:de:94:94:1e:
0e:80:0c:43:90:7e:22:37:19:88:1b:ea:d2:41:f8:
a9:47:25:9d:fd:c7:78:2d:bb:a9:00:c2:55:f6:fc:
11:66:14:9f:cf:e7:08:f3:94:07:29:d2:f9:b3:b0:
49:4e:07:ad:8b:78:61:c3:ce:ae:fe:fc:12:08:74:
3c:8e:49:d0:f2:22:e4:9d:02:99:dc:e2:9f:46:53:
76:18:05:6c:ab:f0:86:a0:63:e2:1e:09:b3:e7:2b:
8c:37:ed:42:18:3d:38:33:44:ef:2e:fe:65:ca:ed:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:27:E6:91:36:F6:F1:1E:68:94:12:BC:05:43:E8:1B:1F:83:1A:7D
X509v3 Authority Key Identifier:
keyid:40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:1e:31:ef:d8:22:b6:17:39:99:f0:bb:83:25:12:d6:fa:
76:14:e4:20:11:ab:88:85:25:73:4d:03:b4:8a:3b:9a:aa:b0:
55:2d:a3:eb:de:f8:93:fe:c3:3e:bc:58:c7:96:f2:4b:c9:72:
58:a9:08:72:1b:f7:28:a4:af:4f:11:ee:dc:f9:ac:6a:e1:8d:
4f:b7:c6:df:44:3d:85:9d:b6:8e:49:33:cc:ae:88:4a:53:69:
11:00:b7:da:4a:3a:7e:eb:b0:01:2d:75:ba:4e:b1:38:45:78:
79:cd:41:48:bd:8c:74:da:88:0c:8c:8f:e0:d2:3a:44:26:d9:
89:a6:7b:f1:d5:c4:4a:c1:0d:14:09:bd:85:02:49:97:e4:07:
79:a5:ca:a6:c0:a9:da:15:3f:e2:85:fd:ef:50:86:97:85:a0:
19:6f:a3:f4:0c:fe:2b:05:83:38:e2:f1:9f:ad:c2:5e:c5:da:
a4:b1:9c:a5:6d:a0:f8:d6:78:40:d3:78:2a:f3:d9:60:ed:97:
19:72:cb:df:58:75:a6:e4:b5:dc:ba:ac:72:2b:1c:56:0b:75:
79:67:63:4d:62:5d:b5:32:fa:c6:2f:23:f4:24:c0:6e:e4:c5:
1d:f7:ba:ea:ed:43:4c:7d:60:7f:28:cc:39:c8:ff:29:ec:07:
ce:f9:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:35 2026 by rpki-client