Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: 8gG1+g82Yy+qIWQeM4Ji/BaQkwVFzlf/OX0kjqTJ2kQ=
Subject key identifier: 05:4B:A3:8B:FF:F3:AC:29:0A:A7:33:EB:AD:6C:12:E4:31:CC:FF:43
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019CAA58FF71CBB5DB8284500B41B962DD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:25 +0000
Manifest this update: Sun 01 Mar 2026 17:01:25 +0000
Manifest next update: Mon 02 Mar 2026 17:01:25 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: lx2cXiCYh44to6gfdSTyv6ia10eDHdHOOR5+iJCxma8=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ff:71:cb:b5:db:82:84:50:0b:41:b9:62:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Mar 1 17:01:25 2026 GMT
Not After : Mar 2 17:01:25 2026 GMT
Subject: CN=054ba38bfff3ac290aa733ebad6c12e431ccff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:3e:ab:a7:62:f4:b9:5d:18:84:9d:a6:cc:
c8:37:bf:47:4f:ab:0b:b9:00:57:18:98:2e:7b:eb:
6c:8f:99:d9:14:29:dc:46:f4:ae:bf:d1:10:69:3b:
b5:e1:7e:a1:ae:4d:52:e0:76:38:80:40:fa:ae:4b:
99:23:06:22:a7:d1:21:72:f3:6b:31:18:61:56:d4:
83:7e:45:0f:a0:5c:66:fb:09:f2:b6:60:20:c8:51:
33:65:80:57:74:e6:06:97:43:5f:cc:df:e0:c9:b6:
4c:ca:7d:05:fd:4f:fc:2d:8b:52:9d:02:ed:0c:58:
e3:bd:b7:0d:45:10:ad:bc:af:cd:e3:38:ad:b7:ca:
02:bf:1f:51:46:27:15:2e:49:6c:88:e2:7d:9f:21:
c4:95:4b:65:72:db:e2:81:cf:e1:a1:e9:3a:c8:c5:
8c:ed:da:dc:70:31:6d:8f:ce:77:99:07:66:60:8a:
54:7f:2f:ea:a9:42:f6:e7:ee:1a:bb:e5:8c:ec:cd:
b9:66:fd:45:c7:49:ff:2c:6c:c7:d1:bb:5b:20:a7:
11:49:4a:95:08:d2:45:57:52:05:54:42:46:32:ff:
cc:cd:04:a4:a4:c9:fe:93:3e:35:dd:ad:61:4a:a7:
a4:9d:04:b7:50:87:a3:3f:c3:48:73:75:47:84:91:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4B:A3:8B:FF:F3:AC:29:0A:A7:33:EB:AD:6C:12:E4:31:CC:FF:43
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:2a:bc:fa:a5:a8:c7:69:d9:61:00:81:95:66:ee:64:bc:
00:e7:3a:a8:a2:2a:77:e5:d9:83:c1:70:87:a2:e6:94:db:b8:
24:4f:28:c9:f3:a2:75:cd:6a:e4:94:8e:1f:a1:6c:75:84:9c:
11:fd:9b:2c:fa:a4:0b:df:e2:7d:91:ad:8b:97:e1:5e:ec:61:
04:3c:e1:7c:7a:9e:7b:d1:e1:03:0d:20:88:24:cb:11:72:f9:
cf:12:3e:a1:1e:61:73:ce:30:ae:de:07:f6:1c:ae:ac:de:fa:
1c:f7:58:4b:4c:74:d0:9d:53:ab:79:39:d4:b0:85:c0:44:9b:
d7:12:2b:c2:d2:d6:8c:e2:52:50:ff:35:94:40:8d:2a:ca:1e:
da:55:61:f2:35:08:31:c2:ce:ce:4a:f1:eb:4c:4c:53:67:96:
21:39:63:1a:0b:b9:ca:f8:76:2e:ac:1a:45:06:ba:b5:0f:3c:
8d:1a:72:25:b7:ff:3d:fc:d3:cb:bd:b9:f4:30:2f:52:94:88:
f0:7f:a7:85:67:36:93:3b:f3:6e:45:47:3c:a4:0c:be:c0:55:
77:94:5e:ff:2f:67:9e:1f:f0:e9:5c:6b:04:62:5c:b9:aa:a2:
16:d5:ce:24:88:e4:d3:d7:16:20:20:72:5e:57:8a:29:4e:0d:
e6:64:a5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWP9xy7XbgoRQC0G5Yt2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh
ZTk5ODAwHhcNMjYwMzAxMTcwMTI1WhcNMjYwMzAyMTcwMTI1WjAzMTEwLwYDVQQD
EygwNTRiYTM4YmZmZjNhYzI5MGFhNzMzZWJhZDZjMTJlNDMxY2NmZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU4+q6di9LldGISdpszIN79HT6sL
uQBXGJgue+tsj5nZFCncRvSuv9EQaTu14X6hrk1S4HY4gED6rkuZIwYip9EhcvNr
MRhhVtSDfkUPoFxm+wnytmAgyFEzZYBXdOYGl0NfzN/gybZMyn0F/U/8LYtSnQLt
DFjjvbcNRRCtvK/N4zitt8oCvx9RRicVLklsiOJ9nyHElUtlctvigc/hoek6yMWM
7drccDFtj853mQdmYIpUfy/qqUL25+4au+WM7M25Zv1Fx0n/LGzH0btbIKcRSUqV
CNJFV1IFVEJGMv/MzQSkpMn+kz413a1hSqeknQS3UIejP8NIc3VHhJH7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVLo4v/86wpCqcz661sEuQxzP9DMB8GA1UdIwQY
MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct
Y2ZhOGY5ZDlmODFjLzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj
LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcUqvPql
qMdp2WEAgZVm7mS8AOc6qKIqd+XZg8Fwh6LmlNu4JE8oyfOidc1q5JSOH6FsdYSc
Ef2bLPqkC9/ifZGti5fhXuxhBDzhfHqee9HhAw0giCTLEXL5zxI+oR5hc84wrt4H
9hyurN76HPdYS0x00J1Tq3k51LCFwESb1xIrwtLWjOJSUP81lECNKsoe2lVh8jUI
McLOzkrx60xMU2eWITljGgu5yvh2LqwaRQa6tQ88jRpyJbf/PfzTy7259DAvUpSI
8H+nhWc2kzvzbkVHPKQMvsBVd5Re/y9nnh/w6VxrBGJcuaqiFtXOJIjk09cWICBy
XleKKU4N5mSlsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:52 2026 by rpki-client