Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: TM/H/T7bO7HkOXwCodH3JMZrycfbEugKDTOlJxM4SM4=
Subject key identifier: D8:C5:7B:77:7C:D4:DE:88:39:9A:77:0D:3B:C2:D9:E7:72:9C:8C:B3
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019EBF5AEE5881DAF0EC8D16CD5432619381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:01:07 +0000
Manifest this update: Sat 13 Jun 2026 05:01:07 +0000
Manifest next update: Sun 14 Jun 2026 05:01:07 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: m1CzhEPDFJ7ilw9ImAyJwcf5P1297hVOp5hdb8AIkaI=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:ee:58:81:da:f0:ec:8d:16:cd:54:32:61:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jun 13 05:01:07 2026 GMT
Not After : Jun 14 05:01:07 2026 GMT
Subject: CN=d8c57b777cd4de88399a770d3bc2d9e7729c8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:1f:37:eb:81:d0:8c:bd:0e:b6:88:47:74:
8b:5f:34:a9:7e:dd:1d:ec:cb:f0:2d:d3:f2:0f:c7:
d2:71:4b:bc:29:df:f3:37:e8:ff:85:70:96:0b:4c:
23:0c:a2:24:ad:96:e7:a5:68:24:36:6e:14:6e:d8:
4a:25:2e:95:a1:9a:76:62:6b:22:ec:f5:d1:45:42:
54:0e:0b:64:ed:0b:7b:c7:dd:bc:2f:71:e8:f8:18:
6b:5f:a6:5a:ac:97:32:70:21:20:a7:86:95:d7:7c:
7e:32:89:60:37:f1:fa:58:5d:be:82:31:ba:20:34:
08:ed:a8:f6:9a:e0:fa:09:5e:d7:f9:ea:99:40:e6:
40:eb:dc:54:ba:e1:bd:d2:28:e2:5e:b9:9a:58:c4:
ad:3c:0e:89:fb:13:da:42:e2:a6:6b:f1:23:3f:48:
8f:f1:3c:3a:64:d2:37:26:4e:05:d7:38:bb:c9:57:
e6:c9:02:3a:1b:47:cc:b9:ef:cc:e1:47:6e:46:cd:
c2:f8:c4:8c:10:35:97:6f:91:ee:35:d9:56:21:da:
27:50:b3:a9:90:d0:eb:08:b1:04:1c:9f:98:10:d5:
41:6a:16:cc:c9:3f:f1:06:db:26:df:9e:83:c4:54:
17:7f:a4:42:b8:58:b8:c9:49:e1:57:0a:a6:63:52:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:7B:77:7C:D4:DE:88:39:9A:77:0D:3B:C2:D9:E7:72:9C:8C:B3
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:a8:8d:ce:d2:f2:81:43:26:9b:eb:54:2a:8b:9d:b2:9a:
c2:59:68:de:b9:55:7d:94:82:4c:d8:86:46:66:9e:28:58:5a:
f0:e7:ed:a4:eb:35:bb:24:fa:bc:4a:de:70:55:22:80:c6:1e:
cb:75:02:84:d8:b3:ad:9c:e0:88:cd:94:88:e3:59:2d:0c:69:
ef:37:9f:c7:64:31:7d:8e:1f:2e:d9:d0:61:6d:f7:83:90:01:
a8:7e:e4:5d:6a:e5:ba:b5:9b:db:51:43:c8:0d:07:4b:d8:a1:
ac:de:5c:47:42:44:d8:a9:68:1c:0e:a0:b8:c0:21:5b:5f:33:
43:24:a8:af:85:67:35:72:8c:8a:90:35:50:35:f3:f2:4d:af:
f4:0c:a7:ce:08:1e:7f:a0:d7:83:1d:30:f2:4f:62:53:00:69:
41:20:65:80:10:09:bc:93:6a:76:f9:8b:82:c5:55:8e:13:fe:
80:85:be:1c:4e:fc:f9:db:1f:b3:b8:cb:54:f1:59:39:52:18:
80:54:e0:7c:0a:03:9e:55:ce:c4:e7:9d:2e:fd:94:e3:6a:41:
7b:0e:28:3d:ca:62:cf:c0:ae:08:d1:75:2b:20:30:cc:d4:56:
dd:e8:bb:11:1e:37:f5:13:67:56:0f:8e:f2:59:83:49:e3:80:
79:16:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:36 2026 by rpki-client