Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: kXymhMgXdyh9P6oVYIQF40NZbFcmc6xMT0DcUCc2/ds=
Subject key identifier: 99:83:0B:12:AA:CF:9E:F4:71:74:86:88:CD:07:77:D7:B3:12:96:8A
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019E3072DD45E60C8B64B261E0CE777797C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 11:01:34 +0000
Manifest this update: Sat 16 May 2026 11:01:34 +0000
Manifest next update: Sun 17 May 2026 11:01:34 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: IyWFMs2Qd83xhIu7BvRCG5ZDN85d+OZPpN0o1/TyLY4=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:dd:45:e6:0c:8b:64:b2:61:e0:ce:77:77:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: May 16 11:01:34 2026 GMT
Not After : May 17 11:01:34 2026 GMT
Subject: CN=99830b12aacf9ef471748688cd0777d7b312968a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:74:a2:f8:88:cd:75:41:30:e3:35:08:4d:
0a:3e:d2:0a:54:be:a6:ba:41:60:66:e6:b6:d4:a5:
a2:9e:57:94:c9:80:a7:9e:37:68:0a:27:54:9c:03:
8b:53:55:55:e4:ff:8e:80:45:8f:d7:99:ed:ca:96:
fc:d3:f7:c3:8e:66:51:31:56:75:af:d9:46:2e:7f:
dd:2a:54:02:57:a2:51:6d:63:9a:d9:ee:a6:cd:d4:
85:3d:b7:a7:cb:b3:b9:4c:b5:f7:d5:1b:f9:1d:4d:
8d:35:e3:1e:b4:ea:be:d0:6e:f7:11:34:fa:4b:0b:
16:2a:b5:d7:25:fc:57:ec:fa:68:a1:7c:54:dc:d7:
95:0e:a4:1a:b8:3e:79:ea:0e:65:65:a5:93:34:8b:
95:8e:46:c8:e0:73:57:af:73:1b:cf:f0:86:3e:c9:
9c:ea:42:86:a1:f6:50:06:39:4a:39:ef:76:f5:3d:
78:6c:1a:77:97:dd:83:fd:69:1d:cf:e7:0b:8d:a0:
d3:2a:be:84:e1:c2:a2:07:23:15:36:47:fe:80:f2:
25:98:7e:8f:19:a7:f8:59:2c:22:c7:f2:73:5a:a4:
9f:ce:cd:78:bb:37:12:fe:3d:eb:b6:d9:e7:cc:7f:
b7:50:ed:ec:04:3a:08:90:33:10:c9:4c:44:84:86:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:0B:12:AA:CF:9E:F4:71:74:86:88:CD:07:77:D7:B3:12:96:8A
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:53:b0:f2:ef:fe:28:b5:ee:37:16:b8:ab:8b:b1:38:72:0e:
d9:62:7f:d3:84:e1:fa:24:7f:c3:d9:b2:59:e0:2a:f2:a5:33:
ae:ac:8f:a4:f0:cb:de:b7:bc:4e:8f:e6:cc:a9:c6:ac:30:45:
bf:29:39:0b:fd:7b:41:51:21:37:0e:ad:a1:1d:82:2f:78:fa:
21:12:99:96:14:21:ec:c0:f7:a1:40:b7:95:88:72:b7:34:c5:
23:86:6e:a8:dd:bc:79:1a:3f:e4:90:4e:09:b8:7e:70:9e:2f:
d1:4a:ec:26:e7:68:a7:99:e1:82:3e:41:12:43:4b:af:ca:21:
09:83:26:58:01:91:6f:39:2b:b7:fe:06:4a:2f:57:02:50:7c:
71:52:9b:c2:2d:57:de:57:77:33:8d:04:bf:50:13:a7:e4:17:
1a:65:9a:cf:78:ba:a8:fb:15:39:67:7b:c9:d9:65:46:a8:2f:
4b:ab:23:da:cc:b3:88:84:e6:cb:a8:23:83:76:f3:a5:a3:0e:
7c:04:23:59:d0:69:3e:0f:ed:42:01:a9:c6:a0:3f:96:cd:c1:
e1:be:5c:2f:7b:fd:82:e0:c5:60:04:65:75:c6:18:8d:f8:a0:
11:64:fa:52:db:4e:39:19:a1:6e:1f:83:20:f3:18:fc:57:4f:
b6:ea:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:19 2026 by rpki-client