Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: t1g3Amby498voh+Gbs/+UMc+FOVwUzE++RdbXYIVStE=
Subject key identifier: FF:3F:6A:E3:9B:39:09:A6:8B:DE:A0:CA:D6:56:75:9C:82:FD:5A:A2
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 01A14C190BD529A6270E8DE3395C155D65A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 23:01:12 +0000
Manifest this update: Sat 17 Oct 2026 23:01:12 +0000
Manifest next update: Sun 18 Oct 2026 23:01:12 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: msHDUhevCW1pdOBtGP0lJ1QkcJbSDAjlT+TXhuDIaKY=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:19:0b:d5:29:a6:27:0e:8d:e3:39:5c:15:5d:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Oct 17 23:01:12 2026 GMT
Not After : Oct 18 23:01:12 2026 GMT
Subject: CN=ff3f6ae39b3909a68bdea0cad656759c82fd5aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:ea:74:c8:7a:fe:28:14:e1:7b:93:d2:41:
e3:a7:77:75:b3:9b:cb:08:7c:69:0a:6b:d6:0f:fe:
39:ed:f3:be:44:4c:5b:f7:4b:6c:6e:0c:59:23:d4:
47:49:92:53:b8:25:2f:56:5a:08:04:11:ea:6e:ef:
cd:65:76:5c:c0:a9:25:b4:6d:50:dc:58:9a:d1:5b:
94:bd:c7:82:c6:00:60:73:b8:0b:2c:f5:e0:37:59:
df:e1:35:65:3b:8f:89:9d:5d:eb:23:54:a9:8c:d6:
53:83:92:0c:92:1b:15:c0:30:61:e2:05:65:f8:be:
19:3f:0c:3d:d8:d0:82:dd:2c:54:69:c1:8f:8c:b2:
53:bb:f3:a9:dc:35:51:de:d6:68:63:7c:24:59:4e:
4a:e1:1e:f5:61:db:dd:44:43:72:fd:3b:74:c8:ac:
1c:3e:51:59:ca:96:3c:fa:04:a6:00:6e:98:30:74:
87:10:52:1e:0a:6a:20:f2:56:1e:3f:fd:0e:35:cc:
1a:ba:05:83:32:af:53:a7:64:4e:62:57:cf:f8:df:
48:1b:3a:ba:d4:c4:9b:ee:16:17:c6:75:84:1d:1a:
42:11:b2:4f:c5:8a:0c:d8:98:c8:00:a3:9b:61:45:
df:8f:f6:54:bf:bf:d7:51:03:64:e9:14:73:30:f6:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:6A:E3:9B:39:09:A6:8B:DE:A0:CA:D6:56:75:9C:82:FD:5A:A2
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:80:93:07:66:fd:b0:92:bb:75:84:c9:1f:e6:99:f6:db:63:
b3:20:fb:cf:c1:fd:3a:07:ba:cf:d7:e5:b3:0b:f1:89:15:94:
ca:71:00:48:ca:be:49:d3:a1:4f:dd:96:0b:4a:c4:c4:24:9d:
9c:84:65:07:8f:11:38:40:0f:43:12:67:1f:ab:ce:66:00:7f:
c1:df:bf:da:10:89:5b:2e:bf:9a:5c:67:f9:1b:40:00:9a:30:
1c:55:3f:53:79:a0:7a:fd:3e:5d:ea:12:80:ab:8d:28:aa:2c:
a6:f5:e9:17:fd:aa:3b:f9:01:6f:19:5f:86:59:0a:d3:e2:1d:
ef:18:64:07:6c:ab:cc:47:58:b8:8e:ef:24:1d:7c:2a:97:93:
a9:c7:68:8a:66:f5:76:ee:1e:fc:03:a1:5b:f7:18:95:93:11:
a3:da:37:dc:d4:41:c1:62:b4:a4:8d:06:95:c6:3c:ae:3a:04:
94:12:4d:19:a1:9c:09:c9:7d:a3:f3:f5:dc:57:af:2c:b2:be:
7d:a8:33:4b:77:1b:3b:82:32:eb:c3:c5:e2:bd:62:9a:28:2e:
43:dc:93:49:9c:c5:32:7d:da:5d:ad:ef:38:99:42:2c:47:97:
9d:c3:8a:b6:42:af:24:27:8a:60:ff:05:13:fb:73:45:91:88:
71:be:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:00 2026 by rpki-client