Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: Spl4Fu2YyOBdWi35e22+KlwRxqNw97QT6Nb8VI3RQHk=
Subject key identifier: C6:11:45:BD:94:B1:01:39:1B:24:58:C4:48:1A:D0:AD:B1:23:DA:6F
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 01A107A66CE08EE0F4BB2136B81AF056ED19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 15E5
Signing time: Sun 04 Oct 2026 16:01:49 +0000
Manifest this update: Sun 04 Oct 2026 16:01:49 +0000
Manifest next update: Mon 05 Oct 2026 16:01:49 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: BhRL8mUK36/mbuCqBJSnwrEv9WO9SfQIC9wM/vCd+Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:6c:e0:8e:e0:f4:bb:21:36:b8:1a:f0:56:ed:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Oct 4 16:01:49 2026 GMT
Not After : Oct 5 16:01:49 2026 GMT
Subject: CN=c61145bd94b101391b2458c4481ad0adb123da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:96:92:5b:24:22:f2:d9:37:ec:be:c1:e6:
e8:4a:17:1d:14:f7:f0:4e:91:1c:a7:9e:55:6b:f3:
05:0f:c7:9d:3a:e0:41:3a:0f:d0:e6:14:37:3f:58:
8a:bc:8b:ce:8a:e1:f7:cf:0c:80:af:dd:6b:d1:4f:
47:88:19:f0:f9:6e:5d:a0:2c:52:96:c7:d5:1a:56:
6b:26:3e:e2:1d:ff:96:08:bf:fa:1a:6c:76:a3:cd:
2d:6a:52:3f:08:75:79:ed:22:2c:a6:19:e0:11:6f:
56:23:87:ca:8c:fd:dc:5f:62:28:b9:13:a8:ba:c6:
11:8f:af:e6:2f:1a:16:5b:c7:42:c9:9b:5c:ca:8f:
10:ef:c6:e5:e2:fd:27:df:e5:5e:1e:55:37:31:46:
1e:af:49:6b:0a:0e:ce:be:cc:19:7f:43:61:6a:aa:
2c:e3:5d:05:ea:1d:82:49:73:8a:06:d1:a7:a5:98:
03:5a:9b:db:92:9a:67:bc:2a:10:34:32:6d:1f:1f:
b8:cd:e2:7e:f5:fd:71:00:c8:6c:9e:78:00:46:02:
79:14:49:91:49:1f:ea:78:83:49:57:9a:0f:b3:95:
c3:cd:80:81:77:33:8a:90:20:12:bb:0f:23:45:b3:
c1:8b:d3:8e:1e:d6:5d:76:a6:50:41:f4:14:24:f3:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:45:BD:94:B1:01:39:1B:24:58:C4:48:1A:D0:AD:B1:23:DA:6F
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b8:1c:6e:12:7c:3a:b2:4e:c6:87:62:81:0d:c1:66:87:5e:
f5:23:08:58:98:3a:50:00:d2:ea:2d:78:46:f3:b6:58:95:7e:
24:fb:47:f1:2f:d7:41:f3:ff:0a:b1:09:0a:e5:f2:df:94:a9:
53:d2:1d:43:96:3f:d2:9b:03:f6:b5:89:5e:f0:e7:c1:a0:34:
1d:bd:3d:e7:bb:e4:ee:12:bc:bc:00:da:e5:05:4f:af:f0:a5:
49:8a:e0:d1:d0:d1:f2:e8:1b:8b:6f:91:45:d7:c8:b4:be:07:
ec:52:94:e4:61:ec:72:ad:79:cc:62:3f:f2:7a:26:e0:b7:6e:
f3:08:a0:72:b8:3d:c6:2b:37:9e:57:f3:ee:3f:0d:f9:7b:8d:
a3:c5:aa:b7:84:ce:0b:1d:13:1b:c0:74:61:be:ec:2b:30:fe:
32:44:bc:32:a9:22:07:98:25:d5:51:64:39:07:69:53:f3:85:
af:61:d3:b0:5b:78:8f:d7:ef:bc:bd:64:83:e6:d2:20:8b:34:
48:3a:f1:b4:ac:54:2a:2c:b2:b2:61:9d:a3:8d:a6:bc:af:47:
11:92:5f:18:46:ba:d7:a5:5b:ee:28:a1:9e:bc:a8:6f:0d:b8:
84:13:8f:4c:f8:4e:52:a5:b4:af:10:5d:be:c3:86:00:b5:a6:
6d:e5:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:06:49 2026 by rpki-client