Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
File: QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft (raw, json)
Hash identifier: QQb3ZWzgIshwY8qOJ+cya7cb/HsfhWJBtFkdgEQSqRM=
Subject key identifier: 91:90:BB:E8:C3:FF:58:10:11:B3:92:11:7D:99:0E:35:A1:B9:03:BB
Authority key identifier: 40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
Certificate issuer: /CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Certificate serial: 019F38984C3B8E908F7A1B3B5175AA355DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
Manifest number: 12
Signing time: Mon 06 Jul 2026 18:02:12 +0000
Manifest this update: Mon 06 Jul 2026 18:02:12 +0000
Manifest next update: Tue 07 Jul 2026 18:02:12 +0000
Files and hashes: 1: JhIdpwixHhL4kNaauNM8xdlIml4.roa (hash: iCB8dbhDO0FjWlHMp0rp4KAWeNAdcDsy/o0K/cauhfI=)
2: QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl (hash: Miz8c1nIvDrvC/83AB9gUVCinhFbkCCb3s5KagOovi0=)
3: y6s9GE4v73HgJjdNT9WT8fmSBKQ.roa (hash: IQLDH3j421sCsgVzuO3PB/u22oWNjY8m7UXITCQLVuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:98:4c:3b:8e:90:8f:7a:1b:3b:51:75:aa:35:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40392849ddd30b1deccc7f68d48a68d08265ab0a
Validity
Not Before: Jul 6 18:02:12 2026 GMT
Not After : Jul 7 18:02:12 2026 GMT
Subject: CN=9190bbe8c3ff581011b392117d990e35a1b903bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:69:5d:01:d3:ec:72:14:97:07:40:49:42:f1:
35:e0:25:63:8e:a7:a0:fc:cb:d3:08:a1:a6:b7:7f:
55:86:4c:1b:00:c2:b8:45:ec:28:1e:58:41:66:bd:
71:84:82:95:8b:27:53:56:a8:14:72:fd:ee:44:f1:
c1:31:2c:a1:f4:97:1e:01:24:26:06:4b:02:a5:37:
98:b9:be:90:5f:81:06:38:23:5b:6c:23:9d:df:02:
84:a4:1f:21:45:3e:e8:a3:ed:7f:e0:67:87:df:8d:
66:f6:e6:e5:19:bc:45:33:0d:6d:c0:d9:ce:ee:63:
09:af:6b:05:24:29:f8:a6:e3:fe:8f:b1:4c:84:82:
c5:f5:1f:9a:c0:8a:a6:1f:9b:1f:89:b6:51:3b:c6:
62:c1:31:9c:ec:13:05:46:93:55:19:90:a3:c4:99:
4e:7e:72:39:ba:de:ce:28:bc:98:7f:4c:2f:2a:bd:
51:08:5f:b8:70:68:5e:4c:c8:92:f3:a8:44:03:27:
d7:7b:c3:bb:4a:2c:ab:c6:f1:09:53:fe:a6:27:b1:
7c:f0:bd:8b:14:40:85:2b:3a:72:84:e6:94:ee:bb:
09:7a:1d:30:c5:28:84:61:e6:55:82:8f:60:d7:b3:
94:8e:59:bb:45:56:60:65:50:e8:60:6a:95:48:5f:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:BB:E8:C3:FF:58:10:11:B3:92:11:7D:99:0E:35:A1:B9:03:BB
X509v3 Authority Key Identifier:
keyid:40:39:28:49:DD:D3:0B:1D:EC:CC:7F:68:D4:8A:68:D0:82:65:AB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDkoSd3TCx3szH9o1Ipo0IJlqwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/QDkoSd3TCx3szH9o1Ipo0IJlqwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:40:4a:c6:ab:ab:1f:b7:87:05:e8:d9:70:53:5b:cd:ab:76:
90:76:08:9b:81:b6:0a:47:f5:a9:33:94:43:21:62:e7:4b:36:
51:34:aa:82:93:6a:78:2f:ed:3c:e9:c7:29:67:55:b9:ce:40:
bf:84:04:b7:ea:6e:85:f2:ed:ba:84:1e:a6:c4:8c:e6:e1:86:
82:58:b7:23:7d:98:8b:cc:8b:ec:a3:be:17:19:01:fa:39:d3:
60:60:be:3f:a9:55:75:7b:35:cf:13:2f:e5:98:ac:dd:e6:70:
84:44:fe:ec:85:5e:bb:d4:28:7f:65:33:49:35:e5:03:90:42:
6c:71:22:20:92:f6:29:27:95:38:43:01:1a:4f:ff:23:20:93:
3e:b5:9f:dc:18:3a:4b:16:ba:fd:7f:80:b1:6a:87:46:db:f9:
9b:0b:98:ef:44:1f:d9:c4:f7:ad:4d:55:66:fa:74:cd:84:e2:
8b:6b:b2:27:6d:c5:a4:69:60:8e:b8:ee:19:e6:79:9b:07:e1:
6b:4a:04:9f:85:2b:3a:f0:00:a8:81:7c:6f:78:2d:23:4c:85:
78:fe:cd:a8:62:80:58:eb:4e:7b:b7:5d:f7:3b:92:f3:cb:b0:
1c:d3:0c:e5:c5:68:df:fe:6f:31:b1:50:5b:8b:e8:54:27:ad:
73:a6:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:11:54 2026 by rpki-client