Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: g6fWB5FlRuMk6alhVfs/gaZDxAweT0qGptedyqA1J6s=
Subject key identifier: F4:DB:11:BA:A2:6C:3C:AD:E9:B9:6D:1D:02:77:87:C3:69:E6:8E:B1
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019F12656D326350A0897DAF9813502AC5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 060F
Signing time: Mon 29 Jun 2026 08:01:04 +0000
Manifest this update: Mon 29 Jun 2026 08:01:04 +0000
Manifest next update: Tue 30 Jun 2026 08:01:04 +0000
Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: c2k2A3b0Ff8/cNTHaOkbiNUP1zDtw+1vQ2jiRjx2N2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:6d:32:63:50:a0:89:7d:af:98:13:50:2a:c5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Jun 29 08:01:04 2026 GMT
Not After : Jun 30 08:01:04 2026 GMT
Subject: CN=f4db11baa26c3cade9b96d1d027787c369e68eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:e1:2c:35:3c:35:39:15:4d:82:18:90:12:
28:aa:1c:cf:dd:1c:1a:bc:cd:60:b9:44:dc:78:33:
f9:c2:2c:12:bc:94:96:e3:ae:f5:8c:32:96:5a:45:
f1:88:57:14:9a:d0:b9:97:19:98:27:3a:1b:66:f0:
1e:f9:2b:9a:23:03:1a:13:0f:b0:b7:fd:bb:df:be:
a8:72:27:e4:6c:60:b0:05:f9:02:37:cc:95:c1:ae:
69:e5:94:6d:3b:38:51:e1:04:d9:ef:2b:aa:3a:8b:
1b:b4:6b:78:f9:4e:a9:43:1a:8a:12:fc:69:b8:b2:
6f:08:16:da:cc:49:fa:07:c8:e6:34:94:1b:9e:43:
6c:70:c7:f7:c5:e1:48:61:3d:1c:a9:06:7c:84:9f:
04:e8:64:5c:39:60:64:3e:7e:f0:9a:c2:e3:28:e3:
42:4c:66:a7:0a:e2:e4:a4:62:22:4f:60:52:11:ae:
c2:2d:8d:9e:6f:06:a0:00:ff:6f:3e:10:3e:e9:4a:
fd:47:36:19:5a:42:53:16:c2:ea:54:02:85:0d:8d:
bf:f4:1b:82:e5:6f:08:aa:2f:2e:c5:1b:5c:bf:46:
b7:32:36:29:b4:eb:dc:5d:c4:87:6c:28:c6:9c:8d:
26:0f:c7:8e:d5:0f:ec:52:1f:9f:5b:1e:8e:b5:3b:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:11:BA:A2:6C:3C:AD:E9:B9:6D:1D:02:77:87:C3:69:E6:8E:B1
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:75:ca:21:1d:44:10:a0:73:db:52:71:46:79:e6:09:d5:27:
2c:4f:7d:0e:7d:92:73:cf:2b:bb:a0:9c:4a:e9:49:8a:09:72:
ed:54:69:ad:21:37:37:55:00:3f:d3:89:37:e8:17:64:65:be:
d5:7e:ca:71:28:22:21:67:f0:65:ee:a3:80:fc:08:07:d6:cc:
02:fe:f4:32:51:3b:c8:8a:b3:82:5f:28:ac:1b:a1:fe:5a:d8:
e7:57:58:61:c1:f7:cc:18:20:26:c3:1a:bf:fe:a6:90:73:22:
cf:12:9b:d1:0d:1a:69:04:7c:09:07:2f:9f:14:08:74:b8:28:
a2:77:68:61:5d:59:5e:6b:67:f2:53:41:a3:78:24:4d:50:56:
c8:2a:76:c3:50:a1:01:66:fb:15:1f:db:89:1b:22:c1:cd:42:
d8:73:70:e9:ee:34:67:bf:6d:93:18:76:d7:cd:94:31:dd:97:
c1:c3:2d:e9:db:0d:6e:bd:58:62:7b:5c:bc:ff:c0:6d:dc:e1:
ff:b3:ce:36:c5:b3:20:b3:55:93:26:26:da:9c:ed:c4:f1:e2:
77:ee:43:d1:3a:35:35:d1:f6:e1:3f:9c:f5:9e:e0:6d:8b:67:
42:17:32:bf:80:ee:4f:a3:72:33:e3:b1:7b:75:5f:bd:1b:96:
cd:4b:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:28:48 2026 by rpki-client