Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: GS+xe8HTVEjUXvZltrP6+mAfsZrP0T2K2jhCzE8miQg=
Subject key identifier: 3E:CE:80:21:03:FC:72:26:54:B8:EA:12:C1:76:88:50:3B:E3:86:CB
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 01A104A5289FB19834631B934C59DD30A83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1A85
Signing time: Sun 04 Oct 2026 02:01:34 +0000
Manifest this update: Sun 04 Oct 2026 02:01:34 +0000
Manifest next update: Mon 05 Oct 2026 02:01:34 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: dhDLGgUi6vyYirqgK0JyWnTNyjfZzvlmWzbOpf5eR3E=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:28:9f:b1:98:34:63:1b:93:4c:59:dd:30:a8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Oct 4 02:01:34 2026 GMT
Not After : Oct 5 02:01:34 2026 GMT
Subject: CN=3ece802103fc722654b8ea12c17688503be386cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:87:62:aa:d6:88:c1:7a:94:df:46:3b:55:
de:0b:40:f7:f7:3d:85:3b:9c:98:03:4a:24:d0:5d:
fa:dd:ac:4c:8e:2c:c6:06:1b:bc:41:39:64:9b:33:
87:f0:b0:bc:52:79:a3:83:31:cb:ba:7b:bd:25:b5:
3c:88:2a:f2:85:48:62:4f:06:c2:80:39:f3:dc:09:
ba:d4:f3:ce:79:de:96:c3:86:15:a1:f8:0a:11:e5:
f6:00:02:ab:7a:7a:9f:c5:82:53:5b:b5:a7:62:91:
38:7e:35:6a:16:15:55:c2:06:88:b5:12:5d:49:e3:
64:fe:1f:0c:4b:2a:6a:5a:cc:8c:06:d3:e6:d0:df:
99:99:03:56:7d:72:c6:d9:ca:18:0f:00:7f:4e:b5:
5f:a4:27:c3:2e:87:51:4b:c5:5a:8c:f8:d3:10:6e:
a5:94:13:a1:76:56:1c:96:ca:21:23:9d:91:19:ae:
76:10:01:21:6f:2f:9a:82:fe:5d:f7:1e:54:f5:58:
d0:e2:61:d5:5e:73:55:b6:c6:d5:12:05:33:b7:4d:
c6:7a:45:d3:a8:c8:ac:1a:9a:8c:f9:6e:ff:df:c6:
e1:60:2f:c8:b3:ab:ba:e1:bb:72:21:b4:a8:30:ba:
42:1d:a3:43:3a:31:05:d1:30:e5:71:6a:63:b2:ff:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:80:21:03:FC:72:26:54:B8:EA:12:C1:76:88:50:3B:E3:86:CB
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:f9:cd:8e:80:e4:de:aa:2b:c2:7a:18:8b:21:24:06:c5:
24:9c:74:b2:ac:2a:d1:ca:7e:bf:dc:12:65:59:48:7a:77:59:
33:8c:1c:9d:32:4d:66:ed:ef:42:4a:30:28:56:3b:ec:9a:04:
71:ea:7b:81:e7:87:d4:b9:7a:90:2e:8c:28:44:3a:50:77:90:
4f:59:b1:7e:c5:65:65:b3:9b:b0:e5:07:c1:14:9f:90:4e:ad:
62:61:21:a3:12:73:c5:03:a7:2b:01:d4:03:d2:b1:af:a0:1e:
ee:b7:82:1c:26:20:d2:c1:de:6a:5e:4c:a2:60:c7:f8:92:c8:
cf:83:85:e3:fe:c0:9e:c2:a3:be:0c:97:51:47:d9:c0:0b:4d:
23:41:f5:4a:38:09:09:38:4b:32:96:8a:76:d0:15:51:f7:15:
10:54:6d:54:af:c8:96:ec:8d:2a:79:ee:17:c4:f5:4a:ca:60:
39:1e:3a:60:a9:35:92:0e:4f:d2:41:29:c5:6d:7c:31:a5:80:
2e:ac:49:19:59:93:48:66:d1:1a:56:b7:dd:4d:b8:f7:03:d8:
2b:93:88:c8:5c:0c:9c:66:b0:d0:50:6d:e4:79:a0:d2:5e:bf:
15:63:bc:f9:c1:7a:08:dc:64:cb:e7:ef:ca:fb:4f:8a:26:b9:
e0:39:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:01:32 2026 by rpki-client