Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: xDAZacMnto/RQ2+ZzGZK/JsEE/hR6vDQ3yb4FHoAO5A=
Subject key identifier: 31:5C:98:C2:C0:EA:85:40:09:B1:53:BD:4F:E8:D3:98:4C:BC:87:3D
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019CA97CBF111CD58D2A39CAF4BE7388267F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 13A2
Signing time: Sun 01 Mar 2026 13:00:50 +0000
Manifest this update: Sun 01 Mar 2026 13:00:50 +0000
Manifest next update: Mon 02 Mar 2026 13:00:50 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: sTQNfntPDqfLGLNQCQ3NwFD/b2ePJQAGqizcZLWq8P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:bf:11:1c:d5:8d:2a:39:ca:f4:be:73:88:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Mar 1 13:00:50 2026 GMT
Not After : Mar 2 13:00:50 2026 GMT
Subject: CN=315c98c2c0ea854009b153bd4fe8d3984cbc873d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:9c:23:f7:68:f1:d2:62:ce:60:a3:bf:0d:
b4:21:df:c4:a0:14:3f:86:92:36:6c:7b:b7:36:d4:
51:22:8f:56:e9:75:c7:64:5c:d0:07:b5:93:a2:89:
0b:2e:36:86:c9:43:61:7b:0b:28:1d:b0:ed:f3:ea:
7f:50:dd:cc:49:d9:88:a6:e1:59:bb:80:9e:e1:06:
8c:b9:49:2d:a8:e8:80:cf:fb:d8:9a:50:72:cc:eb:
17:9a:4c:a0:19:3f:a1:12:66:ee:b5:8c:8e:c9:6c:
04:f8:fb:6d:8f:49:75:dc:1f:48:64:bc:a2:08:c1:
63:c9:1b:7b:08:86:c3:dd:83:2c:06:0e:ae:dd:15:
c1:86:df:4e:b7:ad:35:39:96:92:77:90:ef:47:ee:
74:18:dc:08:97:06:eb:c0:c0:57:bf:af:99:82:a4:
6f:4a:0f:9b:74:5e:00:07:47:6c:ce:a1:5d:e4:c8:
07:8b:02:69:ca:15:ee:f6:c1:58:01:83:7a:be:e9:
65:98:5d:38:8a:34:6a:a8:b4:31:33:74:3b:3e:a2:
ce:e9:71:21:21:be:f9:4e:ef:9e:65:59:44:15:e1:
17:3b:95:be:92:da:1c:e2:9a:df:70:15:a2:3e:89:
96:21:3e:a5:97:29:95:43:f8:54:03:27:3a:c7:f3:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5C:98:C2:C0:EA:85:40:09:B1:53:BD:4F:E8:D3:98:4C:BC:87:3D
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:3e:d3:ef:8c:a7:ec:6d:6c:7a:7b:26:eb:a5:ed:eb:f6:77:
e0:b7:ec:05:9e:69:68:36:84:85:63:7f:d1:69:54:17:c3:d7:
fc:33:9d:b8:3d:c3:5f:2f:75:83:de:67:9b:aa:83:b9:57:31:
94:c6:77:88:2b:e6:d0:39:45:52:ea:d3:97:aa:ad:23:4c:cb:
fe:a5:27:27:fc:18:b9:87:ab:1c:fb:03:f3:65:ea:15:bc:ba:
1e:4a:5f:52:d2:00:a0:b5:e0:3c:99:55:d0:49:7c:71:e4:26:
c2:76:cc:f6:84:c4:8b:b1:9d:40:4e:21:50:61:cc:20:9a:49:
8d:b0:62:aa:88:ca:8f:df:ac:d4:a9:f0:0f:69:8c:d2:0d:a7:
1c:03:4d:d8:03:3e:8d:ac:58:5c:45:c9:2f:96:f0:28:13:25:
08:bc:7d:a2:56:44:e4:f4:e1:32:68:6b:06:f4:d5:77:42:ad:
16:49:b7:ae:69:cf:b1:31:b7:e5:dc:5c:ce:c3:66:3d:8b:5f:
c0:42:d3:6c:93:6c:7d:cf:83:1b:ff:99:b6:d3:c7:67:09:9b:
d9:5a:b0:31:8e:85:16:1d:ac:dd:54:e4:f0:05:57:d6:ec:8f:
73:a9:94:ab:90:3d:b7:5d:4e:1e:61:1b:e1:9b:fc:aa:5f:05:
8b:21:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:03 2026 by rpki-client