Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: BPppAlSBKbz2UxKovyBVImpke4YM2sb/OUDFQd7r3tM=
Subject key identifier: E6:7D:D3:F5:85:25:86:1B:2C:D7:DB:B0:AF:6C:79:CA:86:CD:D5:85
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019F1A1F84FF1A00C54476EE29312583F37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 20:01:40 +0000
Manifest this update: Tue 30 Jun 2026 20:01:40 +0000
Manifest next update: Wed 01 Jul 2026 20:01:40 +0000
Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=)
2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: eUoCer8SW8lSG0NOGWo4uHr1mKDiOAIe4hpS862FoJE=)
3: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (hash: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:84:ff:1a:00:c5:44:76:ee:29:31:25:83:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jun 30 20:01:40 2026 GMT
Not After : Jul 1 20:01:40 2026 GMT
Subject: CN=e67dd3f58525861b2cd7dbb0af6c79ca86cdd585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:0d:74:0d:22:ea:85:58:9c:cc:df:08:eb:
e2:41:ca:af:bf:1f:c7:c1:c4:d7:fd:4a:56:72:a0:
b5:2d:af:b2:b9:3d:0c:35:42:97:ce:c9:c1:7f:f2:
4a:60:8f:73:5c:26:a9:42:69:fd:df:34:c3:3a:c3:
e8:cf:83:10:6a:03:9e:d9:b3:e6:9c:b6:9b:0b:79:
0a:e5:4d:29:23:9c:28:98:ae:c8:9c:0f:53:db:96:
ee:0a:a2:b9:25:34:0a:fa:1b:20:4a:9e:7c:57:7b:
45:8c:00:06:5c:f0:c2:34:23:71:2b:82:e2:02:99:
c8:04:d3:2e:d6:3d:32:ce:53:9a:f6:01:26:1b:ab:
6e:5f:8b:bd:03:d1:cc:54:65:d7:e8:5f:01:44:52:
48:07:f2:71:1d:8c:4e:f9:86:3e:b6:57:7c:c6:b8:
fc:7d:26:a1:c0:9c:48:ac:c7:96:e7:6e:a6:6d:c9:
be:75:fd:14:11:7f:3b:f3:cc:59:39:e4:95:f2:d9:
fa:fb:3b:10:76:5f:8b:06:ca:97:e5:48:86:bf:06:
85:b9:73:a7:c8:d8:90:20:31:56:78:e1:3f:03:7f:
d1:1c:70:97:3b:3b:26:9b:aa:9c:38:f6:29:92:f5:
1d:a2:e2:89:24:95:c6:2e:27:bb:bf:c4:8d:a9:be:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7D:D3:F5:85:25:86:1B:2C:D7:DB:B0:AF:6C:79:CA:86:CD:D5:85
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:89:61:82:0f:0e:b1:a5:ac:4f:14:90:0a:21:b1:95:5d:
86:cd:81:a1:e5:45:50:32:0e:cd:7e:1e:2a:ae:c4:97:db:57:
5e:53:28:a5:0a:ca:26:d4:fd:95:68:54:89:ce:75:e3:36:26:
fd:19:67:1d:77:d8:51:0f:58:6c:6b:05:e7:38:ea:dd:a3:ba:
59:c5:cb:cc:7b:47:74:7b:63:51:2a:83:db:45:91:d9:1d:7e:
8f:80:6a:67:fa:75:4a:4c:f2:bd:41:a3:b0:24:28:b2:47:c1:
2a:75:6f:17:c4:31:29:c3:dc:7b:c2:bd:28:34:52:62:42:13:
0b:48:20:29:36:48:e6:f7:e0:ac:a5:af:21:c1:02:4f:6d:93:
49:84:08:11:60:8b:df:31:39:16:25:de:eb:7e:64:89:97:2e:
52:1a:e0:a5:4e:b9:65:4f:3a:c9:63:5c:0d:72:0c:18:9e:bc:
3d:5f:a3:5c:05:7d:17:bf:45:54:61:ee:12:9a:94:21:34:23:
28:de:35:1f:66:ea:27:5b:22:20:37:2f:5f:96:d8:46:ac:57:
e6:e1:a2:f4:00:26:73:92:19:9a:fb:df:9a:ee:53:f5:15:94:
b7:0d:0d:33:97:d1:a1:f3:8e:b3:88:d3:4b:87:de:e0:74:c0:
4a:09:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:32:22 2026 by rpki-client