Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: kYe5oQFutik2taVjneaT2D59SPChnEFdOCtGq/5vqwM=
Subject key identifier: 19:36:1C:80:62:50:69:C7:20:73:69:64:96:77:2F:0D:69:57:65:A9
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019D38663FFB46BD10FD83853AEC68A5CCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 13EC
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: A8fUTmCa9FqzCsjS4zhwyBN9i334M5bJhrsoAXHERS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3f:fb:46:bd:10:fd:83:85:3a:ec:68:a5:cc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=19361c80625069c72073696496772f0d695765a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:f2:16:36:69:6f:25:70:63:bf:9d:c3:52:
4c:43:59:b8:f5:e8:83:dc:60:91:9a:7b:b2:ba:38:
8b:cb:3f:21:3e:f4:7b:64:9a:d6:70:8b:c1:52:9b:
7a:c0:75:16:58:c4:09:27:32:8c:c8:6f:d8:d9:6e:
71:2f:50:31:2c:b1:88:66:76:37:be:8a:d3:7d:89:
bd:11:3f:38:60:23:fb:ff:4b:4f:90:43:5b:4d:17:
8a:37:9e:11:57:10:2a:78:15:e0:b2:ad:7b:78:67:
cf:24:6f:a2:bc:fb:07:89:77:ba:86:9d:d4:e8:42:
73:f5:56:1a:7e:69:3a:99:ba:f1:49:fd:04:14:fa:
44:95:ae:b4:12:c6:7e:78:00:37:ba:3a:32:83:80:
b3:12:63:ad:f1:02:19:0b:7a:5d:3a:d4:3a:1a:39:
d9:bd:bc:ef:f5:3e:6a:fc:35:98:8b:b3:8e:61:4f:
39:07:00:1a:13:ba:08:0a:9e:25:80:6d:4c:59:d5:
0a:4c:19:0d:86:23:d2:62:d8:2d:48:35:70:1b:5a:
2b:80:59:cf:4f:5c:cc:69:b7:c8:58:29:9c:4c:be:
10:80:e8:86:f1:2e:c3:1b:01:ba:48:2d:84:44:66:
31:33:92:9e:e3:d7:10:92:c1:6f:6c:b4:cd:61:0b:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:1C:80:62:50:69:C7:20:73:69:64:96:77:2F:0D:69:57:65:A9
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:6d:00:fe:33:d0:0e:d5:27:0a:38:98:e3:89:c1:f5:7e:
97:e8:d4:ec:6d:42:84:02:c6:8b:df:36:71:0d:14:ee:ae:22:
0a:46:2d:06:31:39:06:e1:91:f7:af:1c:12:6d:25:ce:a9:dc:
0e:95:f3:d0:78:ef:f2:69:e4:24:89:50:c0:10:45:92:b1:1a:
9c:5a:90:5d:f6:5c:c5:0e:08:0d:bd:fb:0d:d5:a6:c7:19:fa:
5f:0e:30:6e:a1:7f:2c:bd:9e:ef:03:a9:8d:cc:74:55:4c:9a:
1d:39:b2:26:1f:c4:fc:8d:22:f3:3f:6f:98:2c:39:15:eb:be:
e8:10:c1:3b:7b:18:5b:eb:83:8c:4d:a9:ab:5b:d6:58:04:da:
80:b0:fe:60:84:45:93:6d:eb:3e:be:17:fa:2c:33:e2:b7:3f:
ab:cc:5a:5a:06:1a:e2:70:62:f2:0c:b0:fe:25:ba:4d:b6:c0:
ad:68:5b:a2:48:d7:26:75:66:04:89:e7:d1:4a:89:da:18:37:
ee:fe:c5:48:88:93:76:f7:6a:48:bd:c3:38:b3:5a:64:86:07:
48:13:25:d8:55:bf:71:a4:4a:a4:94:4f:4b:14:86:40:47:b5:
4c:68:0a:7e:10:24:aa:5d:e0:0d:30:3b:bd:31:a7:b3:cc:42:
b3:cc:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:58 2026 by rpki-client