Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: VJt0Y6GdakZbqjDjHg15bE8REAj/y1XES42IomLAqE0=
Subject key identifier: 6C:0F:1B:9F:6D:A0:FE:3C:CD:12:BA:7F:D5:52:C1:24:D3:D2:B9:A6
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019FACE454443352452F6DF376A25C619026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 08:01:12 +0000
Manifest this update: Wed 29 Jul 2026 08:01:12 +0000
Manifest next update: Thu 30 Jul 2026 08:01:12 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: owmXgWuVJedz33nKjav+AskRHCU4Qxd2MWVfCk5nh3Q=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:54:44:33:52:45:2f:6d:f3:76:a2:5c:61:90:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jul 29 08:01:12 2026 GMT
Not After : Jul 30 08:01:12 2026 GMT
Subject: CN=6c0f1b9f6da0fe3ccd12ba7fd552c124d3d2b9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2f:a9:48:f7:0e:c7:49:f7:a4:35:b3:b7:e8:
d5:1a:12:b7:3d:86:8f:ec:d1:10:a2:70:a0:35:eb:
30:bf:0d:86:75:1f:8c:ee:21:3b:8c:71:ed:e0:06:
b1:73:3d:b6:17:2c:d5:d0:45:8a:7f:51:8e:47:6e:
25:34:14:db:3c:71:f0:4a:6b:cf:45:ef:00:7a:f5:
e9:a7:e1:ff:a5:80:5e:08:b3:02:d9:67:66:fc:79:
1f:69:42:e8:02:73:1c:7f:5d:a3:ee:da:16:55:7a:
f4:15:fa:eb:52:d2:0c:ea:64:a7:77:78:ff:38:de:
76:9c:f8:d2:e4:82:3e:f0:b7:95:b2:db:b6:82:2b:
1a:28:1c:a4:65:d1:bd:68:bc:2d:5b:92:ef:cc:ae:
19:a6:bd:9e:34:5d:5a:8a:49:91:6f:e4:1e:e6:06:
8e:80:5b:8f:46:ab:a6:ce:93:5c:04:20:b0:bb:4f:
3c:48:60:46:1d:99:ed:47:4e:5c:20:d8:aa:25:72:
ea:e6:bd:18:1c:3f:c0:e0:27:e0:c7:4f:8a:68:7d:
01:fc:8c:b3:bf:a5:52:12:1b:8a:eb:58:82:fa:e9:
1c:6e:a5:98:30:ac:11:6f:3f:53:0d:e2:08:b5:b5:
4a:15:86:08:a0:00:43:ef:03:f8:ab:14:c2:e5:ae:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:1B:9F:6D:A0:FE:3C:CD:12:BA:7F:D5:52:C1:24:D3:D2:B9:A6
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:c9:a2:6b:2e:bd:6f:72:f2:db:09:57:0d:e1:2e:e0:27:
87:80:8d:74:c3:0e:8b:c9:1a:18:b7:10:f6:f2:e4:75:9b:f6:
59:19:5c:64:f2:07:13:ba:96:96:f8:9f:6b:70:e6:8a:06:55:
95:65:de:b5:86:41:e6:da:d5:b8:bc:83:d5:28:f5:28:7b:97:
49:78:3d:54:72:1a:46:c6:75:4e:ad:dd:b8:31:1e:6c:3b:dc:
fc:ca:f4:61:9b:16:a6:3b:23:59:64:92:91:1b:fc:f6:95:4a:
f3:86:d8:ae:48:35:96:6e:6c:62:50:96:3d:9d:cb:62:28:c5:
04:54:fb:a2:c4:b5:bb:3b:9f:81:2d:82:be:e7:f9:3d:cc:c2:
b4:88:1b:f8:e9:67:91:e8:db:da:5d:81:b7:f8:ab:6e:75:42:
dc:b4:b1:c4:e0:2c:68:ed:3e:1b:ca:db:84:ee:e5:c7:8c:e6:
16:98:88:01:57:d7:23:ab:9e:64:1b:f6:3e:db:11:32:8b:14:
0f:b8:5e:4a:c9:79:0e:1a:1d:62:f1:7f:ec:8c:6a:b8:25:2e:
b3:74:71:58:46:63:d3:2f:4a:71:ce:8f:44:3b:b6:60:db:7f:
34:59:73:4b:a3:82:08:a7:45:53:ea:d4:01:b7:b9:5b:67:da:
fa:c9:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:26 2026 by rpki-client