Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: JcRFPjkzZ4EUIPCp5JlB0GSLz5EQSaAiM/aOVyC3Y/0=
Subject key identifier: C8:B1:CD:78:24:DE:BD:B9:83:F7:CA:CC:1D:A2:A6:33:C2:68:8F:3B
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 01A0D83C40D5A4CA596328311A64A5A6B2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 11:03:42 +0000
Manifest this update: Fri 25 Sep 2026 11:03:42 +0000
Manifest next update: Sat 26 Sep 2026 11:03:42 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: wgrYoNLNrdAbEnB0iFeGn3xgeyGDY244EX7GIGh8Yi8=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:40:d5:a4:ca:59:63:28:31:1a:64:a5:a6:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Sep 25 11:03:42 2026 GMT
Not After : Sep 26 11:03:42 2026 GMT
Subject: CN=c8b1cd7824debdb983f7cacc1da2a633c2688f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:2e:99:db:7e:91:51:83:15:f2:47:b6:71:
37:48:84:c5:17:3d:6a:08:da:62:01:17:a4:6d:b5:
c8:fa:42:ef:15:d4:12:ba:cf:8e:0c:c9:11:85:94:
0e:b5:c6:06:6a:5a:a8:d0:76:5b:76:a4:84:1d:0d:
df:09:02:af:9e:c0:42:c0:95:8c:a2:30:51:04:70:
53:4b:1f:50:9b:bb:9e:e7:67:fe:bd:79:59:8c:05:
12:f9:8e:6d:bc:2a:07:d3:92:c8:18:2b:ff:b2:2a:
19:aa:a1:10:11:2e:a4:0a:76:14:cb:52:39:7b:e1:
62:bf:c3:73:60:18:10:2c:3e:08:2f:30:cd:f1:8c:
b5:c5:8f:39:8b:be:8f:18:96:50:db:01:a0:90:04:
71:9b:a0:60:ba:bf:69:33:cd:0a:75:86:c0:d7:5c:
83:bb:af:e2:9b:0d:82:6d:37:7f:62:d3:e3:00:cd:
3c:0e:07:c8:1b:8c:eb:72:b0:7f:2e:f7:4c:6f:b1:
15:51:3c:5d:9b:ec:b8:59:c7:55:14:80:4d:fa:51:
e4:e5:ca:44:79:69:1b:5d:2f:ef:38:47:52:31:ef:
3a:d0:54:4b:29:41:f0:9a:0e:32:d9:4e:4a:02:8b:
88:65:34:9a:5e:1c:b2:3b:f2:a7:61:0d:ce:35:fc:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:CD:78:24:DE:BD:B9:83:F7:CA:CC:1D:A2:A6:33:C2:68:8F:3B
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:01:81:b5:c5:52:2c:ae:ff:93:ec:fa:a2:4e:bf:b5:bd:90:
0c:25:19:8d:19:37:b4:2d:50:e7:aa:f2:f4:a0:08:cf:3b:13:
a9:70:89:d9:cb:7e:ae:53:a8:69:f4:9a:3f:26:cf:08:a8:12:
63:3d:98:80:25:45:e8:b3:27:06:f5:f0:35:4d:e7:dc:0a:24:
f8:b7:07:05:ab:86:d4:e6:40:47:51:2f:7f:76:7f:13:f6:3b:
f3:2b:57:bf:30:70:e8:0e:cb:ba:42:bf:02:ab:31:01:b6:bc:
3c:3b:55:ef:1f:92:8c:7c:ae:68:23:97:9a:41:a5:c0:d5:6b:
fd:d3:3b:30:83:ae:5e:92:5c:d2:b9:48:e6:96:37:f7:1d:a1:
28:08:8a:d9:f8:02:e1:5f:40:ef:76:62:ae:42:c6:7b:40:76:
c0:7d:bf:e8:9b:90:fc:29:86:60:a1:2a:d8:d4:d7:b1:b9:02:
43:f7:c1:cb:69:e6:28:31:b8:a7:c6:6e:47:86:3a:03:3a:0e:
8c:11:74:42:80:40:89:e3:c9:c6:a6:d4:b8:ad:ac:3a:6a:6e:
9b:81:e7:1d:63:53:0e:23:74:95:4a:59:c7:32:fd:f5:ec:1e:
93:1f:83:5c:5f:ec:24:e8:74:a6:23:e9:fa:2b:30:6b:50:3b:
56:d7:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:07:30 2026 by rpki-client