Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: IcUPzahOag1pXmFCkzSzrPMbm5pZN852KjY35+XV6iQ=
Subject key identifier: 8C:87:F5:B6:4E:87:E2:97:9A:45:DA:97:15:D9:2D:5A:2E:90:38:01
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019EFC4BCBF856751A7E4031A6B28EDC6B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 14D6
Signing time: Thu 25 Jun 2026 01:01:26 +0000
Manifest this update: Thu 25 Jun 2026 01:01:26 +0000
Manifest next update: Fri 26 Jun 2026 01:01:26 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: 7w3IftsreKSnV8xOT+ewmhpM5r82dK5wL+Brz0xK3TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:cb:f8:56:75:1a:7e:40:31:a6:b2:8e:dc:6b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jun 25 01:01:26 2026 GMT
Not After : Jun 26 01:01:26 2026 GMT
Subject: CN=8c87f5b64e87e2979a45da9715d92d5a2e903801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:86:56:11:85:fe:19:b2:2d:bf:e1:a5:79:
b0:16:d2:df:02:69:4f:ba:57:f0:78:cc:bc:70:02:
05:19:5d:30:d6:29:9b:1f:c1:5b:ec:a5:f1:c3:13:
54:e1:0e:0b:e6:8f:4b:ea:8c:94:d4:9b:28:d3:ec:
52:2b:ff:c2:9e:77:23:65:df:ec:f6:a0:51:b7:39:
ae:40:18:c5:b3:42:7f:d4:3c:99:65:89:3e:a3:0d:
8a:ee:ce:ad:3f:38:82:24:38:0d:e9:72:26:00:ef:
68:e8:09:d4:95:ef:83:1d:38:de:e2:b7:0a:7c:69:
b8:12:ff:7f:f2:0e:f7:b2:5e:7d:03:1a:9f:c4:a5:
93:6b:aa:ac:4e:c8:2a:17:38:81:a4:5d:a6:11:a1:
a2:32:cb:f4:2f:47:14:65:7d:a9:40:35:25:aa:ce:
4e:7f:b7:7e:a1:8f:8c:e5:c0:e0:c1:67:b9:0b:ee:
a8:3c:86:65:32:76:3d:c1:02:10:aa:c6:fa:2e:db:
16:99:03:6b:8e:1f:7e:f5:16:d7:fb:c2:a5:20:96:
7e:de:46:57:65:7f:1f:4e:87:64:cf:95:2b:cb:d1:
52:8f:53:0d:14:09:bd:9b:82:bb:1e:16:b4:ed:da:
b0:43:e3:eb:3b:a1:74:81:7f:61:b8:08:75:a7:17:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:F5:B6:4E:87:E2:97:9A:45:DA:97:15:D9:2D:5A:2E:90:38:01
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:96:b3:63:91:13:6f:26:c1:fd:b3:29:a7:65:e5:67:3d:
77:f3:13:39:79:b1:39:38:19:46:77:80:7b:42:6f:59:64:8d:
6f:1c:ca:1e:fa:ff:c2:62:19:95:ee:bc:76:c1:5e:65:7f:49:
fd:3a:96:ad:4b:c7:f2:93:f7:ba:55:49:b5:e3:b3:02:e3:5c:
5f:f0:8b:27:19:cb:9a:db:20:24:34:f6:12:81:03:cd:bf:96:
d6:bb:be:e9:46:84:dc:38:f7:9f:dc:c5:d0:85:1f:1d:c7:d8:
cb:6e:79:c4:66:50:af:62:d8:17:19:73:e3:be:fe:e7:c1:13:
de:76:c8:9d:fd:1d:84:c1:b2:29:28:0a:44:ec:86:26:11:ed:
87:d1:89:2c:f4:83:7b:90:af:cd:51:82:07:22:6d:75:5b:47:
81:22:53:64:02:0a:07:f4:e8:c3:7a:56:e6:d7:a7:34:74:33:
70:ef:54:fc:01:11:f3:5c:1d:f7:3d:7e:9b:ac:73:9a:d9:91:
85:55:9f:a1:0e:84:e2:a8:86:49:13:33:77:77:64:d3:45:36:
28:65:00:3a:30:3d:54:e8:15:3c:32:25:5e:ae:4e:22:2f:a1:
fd:65:4a:b6:3a:a6:34:08:1e:ea:22:d1:6e:b2:6b:d1:09:c7:
80:46:73:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:45 2026 by rpki-client