Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: Daic01zzx3fG88GMlvOmSRCAmKrGWuTZXWsNo0C/4ok=
Subject key identifier: 29:20:D4:2E:B4:FC:80:C9:FE:97:25:08:A4:2C:BC:09:4C:E3:C9:6E
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 01A14A2A76A65998F4D4705C91A9EF639FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 14:00:59 +0000
Manifest this update: Sat 17 Oct 2026 14:00:59 +0000
Manifest next update: Sun 18 Oct 2026 14:00:59 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: aidneheMSais7Wavl/zTGHzYHLMNHnOsTolnzspvg8g=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:76:a6:59:98:f4:d4:70:5c:91:a9:ef:63:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Oct 17 14:00:59 2026 GMT
Not After : Oct 18 14:00:59 2026 GMT
Subject: CN=2920d42eb4fc80c9fe972508a42cbc094ce3c96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:89:33:7c:e2:1d:a8:4c:bb:94:e0:00:5f:
ce:4c:95:80:3f:d6:1b:26:9f:08:b1:28:12:ed:dc:
33:4c:cb:c6:9f:53:fc:2c:c5:30:b2:c5:c8:07:88:
e7:70:e7:ab:a0:e4:4f:3f:db:cf:e8:5a:31:c7:d5:
01:3c:1e:d8:c3:80:fd:0a:dc:b5:98:64:87:46:ca:
02:56:05:be:ee:d7:9e:a1:e6:32:81:d8:55:ec:9e:
4c:41:0a:ef:d8:b8:76:03:45:5e:b9:c8:51:16:54:
37:f0:e2:a6:0d:c6:8e:a8:34:7c:8b:6f:fb:44:b4:
2e:f0:87:68:ae:18:4a:b6:e3:9c:af:e2:a2:af:17:
1e:b9:f9:1a:c6:83:51:45:b7:81:7c:c2:f3:8f:90:
0a:83:c8:f3:83:6e:80:0c:e7:e2:aa:68:42:32:14:
d1:90:30:50:1c:78:8a:fa:50:65:ad:79:f9:9f:cd:
78:41:8f:8a:5f:56:f5:33:f5:b6:76:6d:c5:54:93:
36:e5:e5:ba:f9:50:a9:fa:2a:8d:ce:fa:77:d1:84:
b3:46:32:9a:c3:8b:4b:9a:69:50:ed:a7:ce:54:e5:
81:de:63:77:02:c5:b3:79:2b:52:3d:74:5d:8d:ce:
09:4f:8a:af:25:a8:f9:d3:16:a4:0a:b0:58:7a:17:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:D4:2E:B4:FC:80:C9:FE:97:25:08:A4:2C:BC:09:4C:E3:C9:6E
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:62:55:69:1e:9a:48:06:33:78:fa:2d:56:77:10:e4:15:e0:
a0:8d:49:9f:c7:87:40:83:c5:1c:db:42:95:83:89:42:d1:3a:
4d:ae:51:c3:d5:1f:2f:c4:db:02:0c:04:05:16:e7:f4:b0:37:
62:d5:e2:a6:40:ad:ae:8a:3b:ed:87:cd:41:20:37:6b:8a:2b:
78:19:ab:dc:c7:ad:ad:a1:e6:63:36:c5:c5:92:2c:c4:37:a2:
62:27:53:dc:d0:18:df:8d:4e:d5:2d:2e:1b:45:a8:ee:7a:06:
d6:64:12:58:7e:84:54:6b:bb:40:8e:fd:bd:47:15:d8:67:86:
45:b2:97:4d:32:43:68:2f:d0:0e:43:6f:e7:49:9b:6c:d0:63:
72:4c:a2:4c:f7:fa:8b:76:7f:1d:be:db:34:05:48:aa:28:69:
e4:76:3e:dc:d8:cf:95:ae:36:6d:e5:5f:d6:40:f9:62:41:7f:
be:97:c7:0e:e6:04:82:ff:c4:67:41:c6:41:50:27:9f:a3:ca:
c4:87:9f:53:c1:42:af:be:99:17:90:c4:98:ac:6d:cb:06:35:
96:d0:c1:92:be:ad:52:48:60:8d:8d:eb:9f:3c:b5:56:d0:c3:
5e:30:ff:b6:af:fa:9b:4a:2e:71:55:81:95:c1:d1:dc:45:32:
1c:89:b4:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFKKnamWZj01HBckanvY5+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh
ZTk5ODAwHhcNMjYxMDE3MTQwMDU5WhcNMjYxMDE4MTQwMDU5WjAzMTEwLwYDVQQD
EygyOTIwZDQyZWI0ZmM4MGM5ZmU5NzI1MDhhNDJjYmMwOTRjZTNjOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e+JM3ziHahMu5TgAF/OTJWAP9Yb
Jp8IsSgS7dwzTMvGn1P8LMUwssXIB4jncOeroORPP9vP6Foxx9UBPB7Yw4D9Cty1
mGSHRsoCVgW+7teeoeYygdhV7J5MQQrv2Lh2A0VeuchRFlQ38OKmDcaOqDR8i2/7
RLQu8IdorhhKtuOcr+KirxceufkaxoNRRbeBfMLzj5AKg8jzg26ADOfiqmhCMhTR
kDBQHHiK+lBlrXn5n814QY+KX1b1M/W2dm3FVJM25eW6+VCp+iqNzvp30YSzRjKa
w4tLmmlQ7afOVOWB3mN3AsWzeStSPXRdjc4JT4qvJaj50xakCrBYehfPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkg1C60/IDJ/pclCKQsvAlM48luMB8GA1UdIwQY
MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct
Y2ZhOGY5ZDlmODFjLzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj
LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGJVaR6a
SAYzePotVncQ5BXgoI1Jn8eHQIPFHNtClYOJQtE6Ta5Rw9UfL8TbAgwEBRbn9LA3
YtXipkCtroo77YfNQSA3a4oreBmr3MetraHmYzbFxZIsxDeiYidT3NAY341O1S0u
G0Wo7noG1mQSWH6EVGu7QI79vUcV2GeGRbKXTTJDaC/QDkNv50mbbNBjckyiTPf6
i3Z/Hb7bNAVIqihp5HY+3NjPla42beVf1kD5YkF/vpfHDuYEgv/EZ0HGQVAnn6PK
xIefU8FCr76ZF5DEmKxtywY1ltDBkr6tUkhgjY3rnzy1VtDDXjD/tq/6m0oucVWB
lcHR3EUyHIm0jg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:18 2026 by rpki-client