Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: yxRCCKDhYA0jbbHrd79wgaSM9cFc+gvmMlA1lr75W4Q=
Subject key identifier: 98:D2:3D:E1:CC:DB:CC:D5:04:59:A1:A9:32:32:0E:64:B2:25:70:15
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019E1E6C23A16B62540D8C96BCF84826820F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:03 +0000
Manifest this update: Tue 12 May 2026 23:01:03 +0000
Manifest next update: Wed 13 May 2026 23:01:03 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: rLJd5h1fwVhr3HPesltQszFQRliZSzNfyIf0/Bdbmoo=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:23:a1:6b:62:54:0d:8c:96:bc:f8:48:26:82:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: May 12 23:01:03 2026 GMT
Not After : May 13 23:01:03 2026 GMT
Subject: CN=98d23de1ccdbccd50459a1a932320e64b2257015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:ee:7c:fa:38:28:df:22:ee:e6:6e:2c:47:
c3:16:8a:5e:e1:e4:e9:19:db:03:0a:99:9a:fc:6e:
54:dd:9f:14:3a:c6:13:4f:b9:33:02:d5:de:f0:93:
b2:d6:49:c0:d6:f2:37:ab:e9:3c:c7:4c:ea:51:38:
da:be:09:31:14:64:57:f7:5e:53:bd:d8:7f:11:18:
d9:d3:4e:44:6d:70:13:22:cf:8c:eb:59:80:62:b1:
fb:c4:3d:cb:9b:b0:21:94:22:66:f7:26:99:0a:97:
55:9a:7d:46:4f:1a:8a:8d:43:3b:05:46:0e:93:a5:
c3:04:cb:9f:62:07:55:0e:e9:3d:b7:47:83:4f:ae:
30:48:b1:73:ed:07:76:5c:58:3a:19:5e:46:dc:c2:
97:dd:4c:e6:1c:a9:8f:98:89:f3:4c:9e:f2:dc:bc:
6e:78:2a:60:ef:b7:8a:d5:29:88:8b:0e:a4:5b:e8:
d6:17:0e:3a:34:79:a7:07:ab:bb:1d:93:1c:fb:43:
2b:1c:0a:78:6f:ba:57:6d:34:39:5d:16:83:b2:8f:
f0:36:36:9f:f9:8b:d9:04:24:87:42:18:5e:88:a0:
9e:75:55:ad:0b:91:cf:a2:20:cb:d5:bf:cc:55:ec:
f2:0c:a8:e5:fd:26:00:df:a2:c1:19:e8:0f:a7:3a:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:3D:E1:CC:DB:CC:D5:04:59:A1:A9:32:32:0E:64:B2:25:70:15
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:00:30:7c:cd:6e:57:76:d6:dd:75:de:9c:71:cf:c6:f8:10:
e8:93:f3:4d:80:a9:f5:f8:07:4d:37:72:a2:7d:2c:32:f6:eb:
8f:20:b8:48:bc:52:51:83:bd:cf:7a:7a:3d:82:cf:d6:8a:ee:
d5:3c:e0:84:2c:4a:09:59:80:3d:9c:28:f0:c4:7c:73:81:69:
b2:85:a0:13:d3:4d:20:45:eb:17:6f:cb:c7:31:ba:be:1a:f4:
94:ed:94:17:04:c4:77:f8:2b:63:76:b9:0e:9e:b6:15:fd:c3:
62:ad:03:d9:1f:7a:2f:50:8f:0b:34:5c:cd:13:b8:14:23:a8:
49:3a:37:55:68:6f:25:88:5d:ec:67:3a:c5:23:b9:72:f1:5f:
a9:09:a9:72:b8:41:31:31:85:9a:71:6e:0e:ac:73:45:4a:f1:
c4:e9:6c:4c:66:5d:ba:c1:5d:3f:02:11:78:b0:da:67:cd:2f:
65:60:bb:24:04:de:ed:0e:11:bf:62:5a:fa:b1:97:3f:c5:38:
4e:88:29:72:a2:a4:65:c8:2f:67:38:e0:47:e4:e2:d0:6b:41:
df:4c:8f:4b:fd:23:44:10:00:32:ad:f8:fd:9e:6d:29:9e:a9:
e0:b5:6a:c5:96:fe:7f:03:9c:da:a5:09:f9:eb:2d:33:cc:c4:
ee:80:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:56 2026 by rpki-client