Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: 1aZ0kp17cekILFwrf3erRK1EESUqBQQR8m0n+ykuhyE=
Subject key identifier: D4:9C:4C:52:9C:B4:32:8F:0B:B9:89:B1:FE:38:40:A2:23:AF:57:A4
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019D98F49EEC44E68E1A6F2BB53D4DBB136E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 141E
Signing time: Fri 17 Apr 2026 01:01:01 +0000
Manifest this update: Fri 17 Apr 2026 01:01:01 +0000
Manifest next update: Sat 18 Apr 2026 01:01:01 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: +eXz4jnssz/tOGK9ybck7CK00NgTh7qcxK9lr04MuzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9e:ec:44:e6:8e:1a:6f:2b:b5:3d:4d:bb:13:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Apr 17 01:01:01 2026 GMT
Not After : Apr 18 01:01:01 2026 GMT
Subject: CN=d49c4c529cb4328f0bb989b1fe3840a223af57a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:0c:3f:0d:43:b1:6f:13:a9:02:4a:a0:aa:
c9:9f:57:6f:01:ce:f7:14:ed:8b:54:95:28:24:90:
e8:0c:39:94:7d:d6:b5:fd:cb:3d:8d:5f:41:74:31:
f0:cc:17:e5:23:95:10:5c:9f:1d:1c:11:51:d8:79:
f8:bf:62:66:0d:f4:b6:f2:22:3e:8b:1e:75:92:35:
f6:84:c4:99:bc:cf:9b:00:4a:a9:cf:9d:8e:f8:a0:
45:35:0c:32:85:b1:df:87:2e:1c:6c:7f:78:78:41:
36:2d:60:d3:0e:e3:e7:0d:e0:8e:27:87:f3:65:04:
dc:78:ea:85:50:94:86:28:54:f4:82:fa:93:dd:50:
57:1f:3c:a7:8b:17:54:ff:12:b2:d1:d3:62:1a:83:
97:5b:15:46:d6:72:7c:54:e6:58:08:5e:77:2f:bf:
ed:b8:e7:14:f1:ee:dd:5f:b9:23:e1:7e:e8:a7:6e:
af:74:e5:cf:79:f7:43:05:20:7f:28:66:4a:7a:52:
a3:b2:b6:2b:44:b2:61:1e:3c:7f:7e:ae:65:c6:72:
87:b3:33:88:2e:01:2c:86:58:68:9c:64:cc:31:84:
0d:0a:c2:99:8e:f2:1e:b9:9e:6f:1a:66:cb:3d:34:
31:70:79:36:c5:29:99:ed:79:fe:89:6e:66:c0:96:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:4C:52:9C:B4:32:8F:0B:B9:89:B1:FE:38:40:A2:23:AF:57:A4
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:26:78:75:8e:e0:6b:f7:a7:88:e2:20:2c:bb:cf:4f:bb:6c:
d7:17:e1:88:61:47:77:dc:da:05:42:39:9d:ec:82:af:3e:26:
19:2e:a5:e6:10:06:c3:18:67:a1:ce:ab:d5:93:c4:66:d6:32:
7b:f5:1a:4b:26:ae:3d:9a:6a:b7:8d:af:d2:4f:df:79:0a:ef:
08:2f:72:8a:e3:07:44:d8:60:91:53:4a:a6:8f:70:2e:2c:6a:
dd:43:84:49:bd:2c:51:bc:7c:ec:3e:6b:05:90:bf:96:8e:32:
7f:e4:fa:6c:21:b6:a0:b9:b2:75:43:df:3f:25:15:40:38:5e:
aa:51:15:ac:16:86:0d:a2:13:0c:90:24:66:27:08:a9:2e:73:
17:24:d6:52:5c:e3:74:dc:8e:3b:e9:d0:93:98:20:c5:90:7d:
5c:99:29:ac:60:16:9f:6f:99:3d:61:0b:41:09:f9:ab:50:d8:
ea:2f:4b:2b:3b:e2:3e:cb:47:48:74:3f:97:6e:1a:3f:4e:01:
37:b2:f0:08:a4:9d:5f:0f:ce:f4:e4:28:2a:f9:01:a2:53:44:
b1:14:bf:c8:12:d0:0c:c4:26:8c:6f:ff:a6:e2:ae:cb:1d:7d:
71:ab:db:c2:21:fd:48:e6:ed:bb:f2:8f:98:8f:66:7f:f7:f8:
3d:07:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:35 2026 by rpki-client