Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: 56BniqK7pYcdATh9G32YQWQ49yB23g77Yx9xY9wtHJE=
Subject key identifier: EC:65:CE:41:FF:38:2E:39:C5:9A:6D:18:E6:5E:38:A3:BD:0E:68:7B
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019D2703B951B2266483C7E87DFD4EF8A858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 13E3
Signing time: Wed 25 Mar 2026 22:00:48 +0000
Manifest this update: Wed 25 Mar 2026 22:00:48 +0000
Manifest next update: Thu 26 Mar 2026 22:00:48 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: 34X5C+oRKN7W+4rORYZA1g3PH0XQHuJSuAdvWNXrVVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b9:51:b2:26:64:83:c7:e8:7d:fd:4e:f8:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Mar 25 22:00:48 2026 GMT
Not After : Mar 26 22:00:48 2026 GMT
Subject: CN=ec65ce41ff382e39c59a6d18e65e38a3bd0e687b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:e8:c3:79:1d:cb:e1:c4:3a:11:a6:5b:19:
68:32:86:7f:30:32:cb:52:ad:c0:1b:0b:d2:19:f4:
5d:29:76:71:f8:89:77:20:8a:77:96:c8:bf:e2:c0:
69:78:7c:18:22:89:87:c9:e0:a3:06:69:b1:a6:5e:
0a:7e:29:7a:94:19:f1:63:13:f9:32:d2:29:be:01:
3e:03:d4:44:da:00:81:67:4a:63:9c:06:2f:b5:5d:
71:9d:a9:7f:f4:15:ac:c9:b6:70:0a:85:90:57:7c:
98:51:95:7b:1e:73:ad:19:38:72:b8:9a:fb:23:36:
82:57:ac:2a:9f:19:0c:3c:2a:50:59:02:3b:28:35:
40:92:c1:23:eb:43:a5:1d:48:bd:fa:32:01:f6:e0:
86:e0:27:ae:c7:3e:64:72:fe:cd:be:d9:1f:79:06:
2a:4f:dc:98:de:fa:d5:1c:0e:ec:8c:ef:30:fd:a9:
5b:7a:14:dd:65:7e:f0:cb:73:86:ec:fa:53:d1:e5:
4b:05:b3:9d:ff:84:5c:43:90:5c:15:77:c8:11:df:
34:20:c9:a6:38:70:07:c8:0e:b6:ef:b9:71:9d:cf:
da:74:0a:58:ab:be:26:71:c3:ab:24:ff:c7:71:07:
e3:9e:e8:d5:6a:29:0c:ec:ca:cc:14:d3:9d:b3:8c:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:CE:41:FF:38:2E:39:C5:9A:6D:18:E6:5E:38:A3:BD:0E:68:7B
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0c:e6:1b:68:c9:1b:84:17:06:42:8e:9f:5f:ee:bc:16:26:
f2:5d:69:c0:55:3c:0f:46:e0:db:61:31:96:3f:f0:3f:22:c1:
42:b9:0d:c1:e2:5d:13:1a:dd:ea:76:d9:12:ca:33:57:31:6e:
50:f2:be:a1:85:4c:dc:f1:3b:1e:db:09:6a:07:8a:77:64:34:
55:e5:e8:7b:ff:9c:7d:ae:a2:e0:43:aa:19:03:0c:f8:bb:17:
94:e4:b7:09:a1:14:3f:1c:f6:ea:bf:9c:c3:46:56:27:a6:79:
c0:82:ed:e8:5e:08:65:6f:85:74:af:e3:4a:9d:19:31:2e:11:
15:15:89:36:b1:5f:d0:de:3c:35:ba:1c:c1:5f:35:e1:f9:74:
86:17:22:2e:48:69:9f:cc:d5:96:ba:67:eb:8f:a1:74:5f:36:
10:ab:54:26:99:ba:c9:e1:5d:24:2a:e8:cc:5c:fb:f2:b4:a1:
83:b4:09:e1:94:d2:3e:38:6b:ad:10:1b:89:b5:a1:72:1e:2c:
29:8a:9b:2a:a2:88:84:f5:87:e1:00:24:e2:f7:11:ce:c3:8e:
20:66:39:f5:44:fa:91:62:73:2e:39:48:b2:8d:c6:d2:9f:54:
1b:8b:f1:c9:79:ca:49:7d:31:a4:6c:e3:47:d3:39:f0:17:08:
cc:a4:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:44 2026 by rpki-client