Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: xwHkJ1JMXfYP3FKpGdOCF5+N9/QxyhIJozqDtBw7wic=
Subject key identifier: 8A:BD:88:1C:10:BC:FF:6C:9D:0F:E9:7C:14:B9:86:23:44:F0:0C:0E
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019E1F1165B349318F96F617ECAA6BACD598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:01:34 +0000
Manifest this update: Wed 13 May 2026 02:01:34 +0000
Manifest next update: Thu 14 May 2026 02:01:34 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: TyyfgQQFelvqPzWFojRZ9KVzuRLLg43QQsqsSfD2j7g=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:65:b3:49:31:8f:96:f6:17:ec:aa:6b:ac:d5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: May 13 02:01:34 2026 GMT
Not After : May 14 02:01:34 2026 GMT
Subject: CN=8abd881c10bcff6c9d0fe97c14b9862344f00c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:cf:f9:d5:a7:91:92:43:57:24:73:40:92:
78:e3:62:f3:95:85:06:ab:e4:54:0a:b2:ff:f2:54:
d1:0b:1b:00:4e:03:1f:ee:f8:99:20:c4:51:08:36:
89:79:25:47:77:72:de:0e:8b:1d:01:18:28:32:cf:
36:d5:a7:72:ad:98:d8:ad:0b:b5:38:9d:f4:a4:0b:
d6:a4:64:5c:20:15:6f:71:b5:5b:dc:b7:19:f1:b8:
57:99:1f:09:ce:2d:90:d6:f6:9f:76:03:c0:32:5f:
75:96:cb:14:7c:15:d3:fa:cd:2b:4a:09:0d:97:96:
d1:92:6c:ea:71:17:88:52:14:15:82:f1:0f:e1:eb:
e9:59:98:58:8d:51:49:6b:13:29:c4:48:3f:ee:b0:
17:b3:5d:90:80:ae:24:62:8d:6c:a0:9a:61:27:73:
fa:d1:73:3d:0f:92:2a:4d:8d:0f:7f:18:b5:db:6e:
3e:e2:f2:10:75:8d:95:75:de:d8:ca:3a:bf:3a:6f:
98:ed:7f:02:d6:03:8f:b5:0a:00:6a:22:07:38:3a:
df:74:1b:43:99:8f:9b:70:bc:6f:a9:cb:cc:37:5f:
03:cb:f6:b5:b4:94:d1:51:76:e0:da:b1:5c:bb:7a:
8b:dd:06:ca:bf:16:7d:b3:6c:92:20:e2:ee:cc:b5:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:88:1C:10:BC:FF:6C:9D:0F:E9:7C:14:B9:86:23:44:F0:0C:0E
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d5:a9:05:f5:26:d9:0c:68:ab:7f:39:0e:0e:45:7d:3e:ec:
ea:15:b8:62:db:d1:55:7d:b7:03:52:9e:05:cc:61:33:3a:8b:
92:5b:ed:91:4a:7c:92:1f:4d:f8:29:e3:06:fd:a6:43:a9:3c:
7a:6c:96:71:23:ad:ca:56:05:29:24:a7:0a:f5:ab:ba:7a:b8:
1c:5c:c4:c2:54:8f:1c:fa:ca:9a:55:22:69:3f:05:2d:ba:75:
ec:16:c2:dc:88:f8:d6:a0:40:23:73:68:8a:ce:d9:92:94:88:
de:92:96:63:bd:dc:73:46:6d:b0:56:5e:6a:a7:98:a3:b4:da:
f9:09:c0:4b:34:00:87:3e:a9:f4:70:93:ce:6e:af:dc:bf:b7:
9a:69:d5:b1:81:20:06:1d:eb:3a:34:31:64:af:e1:d8:d9:00:
9a:91:c6:73:e2:78:f2:dd:7f:b2:6f:1f:0f:d0:17:cb:77:69:
ef:a0:7a:e8:37:57:6e:71:d4:a5:6b:85:1d:e9:ac:6d:77:b9:
38:44:d4:d8:86:dc:95:b5:08:e6:a2:26:23:ac:4a:70:48:29:
ac:7a:99:84:67:5c:3b:c0:94:c3:13:d0:6e:ae:fa:cd:4a:d4:
81:52:dc:80:1b:1d:d1:eb:70:9c:8b:ce:25:5e:79:b5:db:25:
ac:21:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:53:16 2026 by rpki-client