Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: kaCwEJucq+A3g25mDnmSvju4Xu90B6fdP2yDRrkTBJM=
Subject key identifier: 59:48:25:80:9C:76:E9:5C:D8:AD:19:CA:7F:C1:5F:9C:C7:E5:BE:2E
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019CAD59DB5E4037B0A060ACDB9E6122D663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:01:13 +0000
Manifest this update: Mon 02 Mar 2026 07:01:13 +0000
Manifest next update: Tue 03 Mar 2026 07:01:13 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: Hw4zRsk2i5rMGw89sv+g5h6QAhjdupaizT7Uo4b0H2k=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:db:5e:40:37:b0:a0:60:ac:db:9e:61:22:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Mar 2 07:01:13 2026 GMT
Not After : Mar 3 07:01:13 2026 GMT
Subject: CN=594825809c76e95cd8ad19ca7fc15f9cc7e5be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:7a:6f:7e:59:d5:e3:ec:3d:2d:c9:5c:c1:
06:cc:82:b0:cf:ae:3d:96:ae:aa:33:10:6e:43:0a:
e6:ff:76:63:58:86:cc:5d:b8:ce:e1:5d:f6:56:a1:
2a:ef:b8:f3:f8:a9:1e:f8:8f:20:1b:47:99:af:80:
b8:3c:2a:d3:a7:b9:f3:de:08:9d:19:ad:2c:7b:a8:
29:97:94:50:ce:32:be:6d:e8:82:7b:b8:da:ac:d7:
32:91:44:c1:66:de:3d:08:3d:10:f6:2d:7e:e9:61:
af:a4:ca:8d:90:50:f9:12:97:59:bc:ab:90:a4:8e:
fd:5d:b7:75:22:05:29:47:5c:60:d8:c0:4e:56:24:
b2:df:7d:00:59:b8:5c:1d:0b:46:da:4b:83:32:53:
8b:f4:31:66:b1:ba:d6:e0:5d:a0:03:dd:5f:6a:31:
e9:58:68:d1:ee:df:45:64:dc:9f:3e:57:cd:d2:dc:
8a:cb:ea:6c:2e:cb:5b:ea:79:59:a4:ec:e4:be:fb:
f3:f5:dd:47:b2:e3:5a:c1:27:81:2a:09:71:fa:0e:
1f:7f:f1:6c:ca:22:21:7c:85:4c:9b:ca:96:73:73:
31:00:3e:6a:af:42:ff:cf:5f:f4:9a:68:6e:ef:64:
fb:6e:b7:20:7b:9d:f5:e5:1d:15:a2:a9:b2:b9:fc:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:25:80:9C:76:E9:5C:D8:AD:19:CA:7F:C1:5F:9C:C7:E5:BE:2E
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:32:34:5c:19:c4:6d:40:97:b8:11:94:f6:c5:e8:59:ed:
13:78:4d:28:80:fe:82:f8:8a:0a:1f:3f:0f:dc:36:39:e9:b0:
b2:c3:53:54:38:ae:d5:a5:e7:0f:1e:aa:b5:20:71:05:2f:85:
80:d0:75:48:dd:6c:60:03:d7:7c:8e:7a:3a:18:6d:41:76:5a:
32:0d:b4:8c:bb:48:51:07:dc:12:e5:ea:b2:57:29:2d:22:22:
14:8e:8a:97:ee:b4:4b:a9:b5:45:5d:fe:5c:ff:fb:6e:37:fe:
4d:61:ba:1f:33:0e:e0:df:11:07:17:aa:02:51:5a:eb:fe:c7:
a9:10:6a:c3:e8:1a:f6:6c:f9:fe:ab:9b:dd:54:63:7d:7c:d4:
86:0b:c2:c2:97:e0:a9:8b:74:03:37:5d:26:25:15:99:49:8c:
6a:bc:70:3a:0d:bc:81:e7:bf:21:6f:e7:c4:28:a4:cc:d5:ef:
df:1f:99:bb:01:39:07:36:6c:0a:50:d5:47:29:1f:66:b2:27:
d2:8e:b3:fd:c8:2e:33:66:f7:9a:19:ce:e2:c2:30:d2:40:41:
20:e9:81:4e:c2:35:69:be:72:af:e2:87:56:5c:b9:01:94:b1:
95:48:cc:6d:3a:27:70:7d:d8:46:bc:3e:4d:14:25:e5:bd:78:
95:0d:ea:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWdteQDewoGCs255hItZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjYwMzAyMDcwMTEzWhcNMjYwMzAzMDcwMTEzWjAzMTEwLwYDVQQD
Eyg1OTQ4MjU4MDljNzZlOTVjZDhhZDE5Y2E3ZmMxNWY5Y2M3ZTViZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYV6b35Z1ePsPS3JXMEGzIKwz649
lq6qMxBuQwrm/3ZjWIbMXbjO4V32VqEq77jz+Kke+I8gG0eZr4C4PCrTp7nz3gid
Ga0se6gpl5RQzjK+beiCe7jarNcykUTBZt49CD0Q9i1+6WGvpMqNkFD5EpdZvKuQ
pI79Xbd1IgUpR1xg2MBOViSy330AWbhcHQtG2kuDMlOL9DFmsbrW4F2gA91fajHp
WGjR7t9FZNyfPlfN0tyKy+psLstb6nlZpOzkvvvz9d1HsuNawSeBKglx+g4ff/Fs
yiIhfIVMm8qWc3MxAD5qr0L/z1/0mmhu72T7brcge5315R0VoqmyufxLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlIJYCcdulc2K0Zyn/BX5zH5b4uMB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAngyNFwZ
xG1Al7gRlPbF6FntE3hNKID+gviKCh8/D9w2OemwssNTVDiu1aXnDx6qtSBxBS+F
gNB1SN1sYAPXfI56OhhtQXZaMg20jLtIUQfcEuXqslcpLSIiFI6Kl+60S6m1RV3+
XP/7bjf+TWG6HzMO4N8RBxeqAlFa6/7HqRBqw+ga9mz5/qub3VRjfXzUhgvCwpfg
qYt0AzddJiUVmUmMarxwOg28gee/IW/nxCikzNXv3x+ZuwE5BzZsClDVRykfZrIn
0o6z/cguM2b3mhnO4sIw0kBBIOmBTsI1ab5yr+KHVly5AZSxlUjMbToncH3YRrw+
TRQl5b14lQ3qhg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:17 2026 by rpki-client