Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: /YxwIl2TyWSmJlpsc/BwB7aV/oc9IvsNnUsxu7oxgkg=
Subject key identifier: AE:79:BE:FA:1A:FA:D8:B8:EB:C6:97:09:F0:58:9D:36:81:1E:A2:D0
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019D3752F11C6B6FC99912020C00957F8B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: KUghUYR1Ze7BGFnzxpLpfV8UP0cGjRU0VcftGvOecT4=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f1:1c:6b:6f:c9:99:12:02:0c:00:95:7f:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=ae79befa1afad8b8ebc69709f0589d36811ea2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:08:ed:cc:88:18:b3:58:c2:a9:bd:5e:af:
b0:bb:0c:6b:90:2d:61:12:a7:37:04:2d:cc:f3:42:
ee:bc:9c:48:f6:8f:fd:5e:b4:1f:cb:4b:d0:01:41:
44:00:2a:03:76:ac:89:9d:17:18:f4:4f:cf:a5:b5:
b9:99:bc:69:df:6f:45:ff:01:e3:45:a4:3a:d2:d0:
35:e4:f7:36:ea:5f:f6:a2:d0:d4:aa:6f:c2:64:a8:
cc:aa:75:31:5e:e6:6a:fe:bc:fa:73:52:28:76:ea:
ad:76:fb:cb:20:11:4b:23:cd:32:85:47:d7:e5:7c:
86:47:a1:ea:f2:3b:36:ff:9d:d1:11:21:e2:3c:6a:
bb:f8:34:b4:fb:fa:1e:6e:a2:f8:f8:89:a0:c8:01:
53:02:f2:9a:ba:1f:46:73:9c:42:dc:16:08:6f:c3:
3b:0c:c7:40:7b:d3:ec:71:36:b8:fc:9a:af:14:c4:
28:95:6f:6f:73:9f:71:12:83:61:71:0a:6f:3c:52:
26:ca:83:9c:41:70:e2:a1:e7:94:42:69:7e:84:5e:
f6:21:19:cb:fb:b9:49:0c:31:b9:28:f0:f8:c2:6a:
dd:9d:3b:7a:aa:93:33:c2:21:78:1d:19:7a:82:e1:
79:7d:5c:6a:de:f5:76:48:34:c4:ec:17:5d:18:e9:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:BE:FA:1A:FA:D8:B8:EB:C6:97:09:F0:58:9D:36:81:1E:A2:D0
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:47:79:cd:8d:bb:99:9b:c8:9e:f9:e1:7d:45:bd:9d:72:f1:
fc:ac:82:48:2c:7e:3a:db:a9:16:d2:ea:29:5d:17:31:56:39:
1d:f3:a6:98:98:85:1e:51:a7:ea:74:66:78:fa:59:10:4b:41:
01:25:ca:aa:68:81:ea:ca:6d:f7:71:15:81:68:a7:8b:64:09:
d1:60:e6:91:fe:c3:68:8a:bc:14:7c:32:f2:36:da:93:23:18:
93:d3:6b:3f:2d:d8:25:f8:fd:e0:b3:dd:d1:6a:ba:51:31:1b:
f7:32:8d:53:72:86:21:16:27:2e:cc:18:f3:55:c9:b0:cf:2d:
b7:dd:fa:4f:2c:9a:b2:40:92:32:bd:80:5e:22:5e:56:b4:54:
ac:79:e0:98:84:4e:56:44:ff:ba:3e:71:22:76:6d:3f:e7:89:
29:9f:6a:b7:ab:89:80:f1:b0:a5:4f:f1:f9:05:6d:57:86:5e:
8d:a2:2e:a8:a4:76:a5:f3:7c:c9:9d:b0:90:c4:13:bb:2a:0a:
89:26:a3:7b:18:e7:9b:fb:cd:ee:b3:24:0d:d3:ec:ff:8e:85:
55:a9:c7:fe:eb:38:cd:5d:04:10:02:29:1d:ce:44:59:fa:c3:
7f:5d:15:77:d6:db:9b:c9:5e:fc:e6:1c:e1:fc:3b:ff:68:65:
d2:5c:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:12 2026 by rpki-client