Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: DQxx7la85Jc2QE+Ht8STR0U82F17lgHzoWdLGN5mMGk=
Subject key identifier: C1:6D:93:D5:C8:5A:25:85:2D:81:E2:7E:22:87:48:06:D4:6B:1E:11
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019D25F1C5B0AEE386A9D245407E7E285211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: F81FR3hnBEyAvPvqQHiJHyPiqTBUPm3OlZCUJoOl1w0=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c5:b0:ae:e3:86:a9:d2:45:40:7e:7e:28:52:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=c16d93d5c85a25852d81e27e22874806d46b1e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:27:65:61:32:90:12:e8:a9:1c:94:2d:06:
fa:b9:fe:c7:25:06:67:46:72:8b:35:27:b9:6a:2e:
2c:8b:89:64:eb:61:27:b3:6c:fc:fb:dc:cf:75:70:
47:c1:db:76:db:7f:82:a6:1f:d4:85:63:1c:d9:f5:
c2:4b:50:31:d9:e0:15:1b:07:ae:75:44:cf:4e:8a:
46:67:e0:3d:14:1c:a1:be:07:61:46:78:5b:4e:56:
75:5f:7f:94:0f:32:e4:44:b7:c9:68:77:e0:f8:e9:
aa:3f:cd:d6:2d:47:64:56:c6:5b:da:1c:00:71:4a:
bf:b5:13:65:31:72:27:b7:d2:94:af:35:c4:26:ba:
d5:a5:31:fe:e5:ee:4c:f3:19:73:db:bc:a0:b6:6b:
48:51:f4:66:0d:d4:3b:af:60:5e:6e:d6:ab:d2:cd:
57:d8:44:f7:45:d5:51:4a:37:49:e6:70:dc:c7:1c:
07:39:1b:3e:04:9f:a8:b1:96:94:18:7c:8b:71:58:
bb:21:b5:aa:d6:3c:85:b2:5f:5d:49:19:e9:91:63:
78:69:26:47:af:3a:b4:7a:40:1c:9d:bd:e7:89:39:
d6:4d:ac:24:a2:55:17:a1:f3:d2:36:34:d8:4b:e2:
09:4d:28:42:b7:a1:cf:dc:41:a6:b8:51:76:60:9e:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:93:D5:C8:5A:25:85:2D:81:E2:7E:22:87:48:06:D4:6B:1E:11
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:a2:79:47:2e:e1:e3:60:f6:59:57:3f:7a:f7:13:6f:09:
4d:9d:1c:7b:a8:0b:46:f9:ce:01:bd:8a:a5:4d:f1:93:b8:59:
cb:05:40:46:e5:b8:71:13:07:3b:37:8a:40:3a:c6:8d:76:ff:
2b:0a:39:7f:18:8b:0d:b5:b2:18:bb:78:43:44:12:ce:54:2a:
ed:cc:2a:67:bb:15:0d:fd:bb:ac:0c:2d:2b:79:7e:82:a9:e5:
a5:5b:a8:d2:4a:1f:fb:b2:1b:e1:4c:9b:79:22:01:ac:8d:cc:
65:50:5a:2d:0f:bd:e0:79:fd:ed:d7:3f:99:fc:6a:70:d6:60:
03:35:82:5f:65:f0:52:1b:db:be:e5:b1:30:2a:8b:7d:87:1e:
46:4b:5f:17:00:2f:3f:75:45:81:d0:cd:3a:59:5b:16:54:3f:
64:e2:60:cc:ee:19:bd:4b:98:d7:d7:05:5f:2e:68:ef:12:ca:
ce:66:74:2f:72:b0:ad:8e:28:2d:0c:63:90:b8:37:90:1a:7b:
f9:7e:04:05:2a:2a:47:4e:39:eb:e3:6b:72:01:c3:31:f1:ed:
9b:5e:a2:23:44:17:e7:a3:f6:8e:67:70:48:5b:4e:d1:6f:54:
00:c2:f4:50:47:7d:ca:ee:70:f6:87:6f:3a:27:4d:59:ef:f4:
fb:12:29:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8cWwruOGqdJFQH5+KFIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh
ZTk5ODAwHhcNMjYwMzI1MTcwMTM0WhcNMjYwMzI2MTcwMTM0WjAzMTEwLwYDVQQD
EyhjMTZkOTNkNWM4NWEyNTg1MmQ4MWUyN2UyMjg3NDgwNmQ0NmIxZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8InZWEykBLoqRyULQb6uf7HJQZn
RnKLNSe5ai4si4lk62Ens2z8+9zPdXBHwdt223+Cph/UhWMc2fXCS1Ax2eAVGweu
dUTPTopGZ+A9FByhvgdhRnhbTlZ1X3+UDzLkRLfJaHfg+OmqP83WLUdkVsZb2hwA
cUq/tRNlMXInt9KUrzXEJrrVpTH+5e5M8xlz27ygtmtIUfRmDdQ7r2Bebtar0s1X
2ET3RdVRSjdJ5nDcxxwHORs+BJ+osZaUGHyLcVi7IbWq1jyFsl9dSRnpkWN4aSZH
rzq0ekAcnb3niTnWTawkolUXofPSNjTYS+IJTShCt6HP3EGmuFF2YJ6HfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFtk9XIWiWFLYHifiKHSAbUax4RMB8GA1UdIwQY
MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct
Y2ZhOGY5ZDlmODFjLzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj
LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBGieUcu
4eNg9llXP3r3E28JTZ0ce6gLRvnOAb2KpU3xk7hZywVARuW4cRMHOzeKQDrGjXb/
Kwo5fxiLDbWyGLt4Q0QSzlQq7cwqZ7sVDf27rAwtK3l+gqnlpVuo0kof+7Ib4Uyb
eSIBrI3MZVBaLQ+94Hn97dc/mfxqcNZgAzWCX2XwUhvbvuWxMCqLfYceRktfFwAv
P3VFgdDNOllbFlQ/ZOJgzO4ZvUuY19cFXy5o7xLKzmZ0L3KwrY4oLQxjkLg3kBp7
+X4EBSoqR0456+NrcgHDMfHtm16iI0QX56P2jmdwSFtO0W9UAML0UEd9yu5w9odv
OidNWe/0+xIpEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:30 2026 by rpki-client