Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: 2Q6WiMjKBkw0mN1PrEWv7EYRKreqzFE6ClXYN21Arh8=
Subject key identifier: 95:F7:11:1E:C0:66:CF:8E:90:D8:65:1B:93:1B:47:8A:45:D9:16:28
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 01A1815094C09B7151471379970510698352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 1624
Signing time: Wed 28 Oct 2026 07:01:44 +0000
Manifest this update: Wed 28 Oct 2026 07:01:44 +0000
Manifest next update: Thu 29 Oct 2026 07:01:44 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: 0j65xI+OnILqnGbM2g+wjTyMfs4c9gSqzlqxeiQwudw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:94:c0:9b:71:51:47:13:79:97:05:10:69:83:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Oct 28 07:01:44 2026 GMT
Not After : Oct 29 07:01:44 2026 GMT
Subject: CN=95f7111ec066cf8e90d8651b931b478a45d91628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:9e:bc:65:15:e3:05:91:83:a9:97:32:74:
2e:62:de:1b:03:b1:62:7a:81:6f:2a:bd:f5:06:f2:
31:b3:50:96:7b:3a:a4:e6:f9:d6:97:7b:2c:9a:ee:
01:6a:d7:dc:de:b2:eb:f8:42:60:81:40:a6:76:d2:
73:79:70:3c:03:f2:f6:ef:ac:2d:43:df:ad:7f:7e:
7e:62:f8:5d:2a:2e:19:13:1b:cf:04:e7:7a:33:56:
91:88:65:4f:11:e5:8e:fc:ca:1c:09:c0:26:81:6e:
8d:79:9d:06:99:2f:b6:28:e1:f2:20:0c:1a:25:60:
f2:3c:e2:7b:c0:7e:bf:23:a6:66:8c:ca:b7:19:b6:
7a:8d:96:3c:59:e2:33:f8:e3:58:53:b1:1e:6c:80:
ee:15:68:4b:cf:88:34:72:1b:34:6d:0b:29:fc:42:
db:06:0d:a9:d3:21:17:e5:bd:29:46:e5:38:4e:9c:
8f:cd:72:8c:8d:00:2e:ff:f5:a4:05:16:42:37:b8:
44:ad:dd:9e:cc:27:b7:64:0b:78:64:43:0f:7b:83:
bd:e0:87:4d:a2:ba:08:34:5f:b9:d0:d7:ab:f5:cb:
6b:5b:3a:78:dd:05:27:bc:de:48:fd:dc:8c:a3:75:
f6:d3:48:b6:1c:41:ba:b7:3b:53:78:ea:21:8c:25:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:11:1E:C0:66:CF:8E:90:D8:65:1B:93:1B:47:8A:45:D9:16:28
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:eb:7f:f4:3f:ed:88:00:c6:a0:9d:a4:b4:a4:a2:a8:5c:fb:
af:e7:a9:85:01:ed:bb:6c:06:bf:ab:a5:87:82:3e:6a:d5:e5:
83:23:de:27:18:c0:5d:9e:24:95:dc:fa:cd:9a:9a:79:e2:6b:
92:1a:00:23:92:ea:02:6c:13:60:c6:9b:ff:b0:05:14:b7:1c:
f5:16:88:8d:b3:46:c0:06:ee:0f:6a:99:ab:ad:22:c0:18:36:
58:f4:72:3a:a7:76:a5:cf:5a:bd:ee:2c:13:a8:0b:63:c5:c6:
60:a0:d6:b9:16:95:80:3d:ac:c9:c8:30:d0:fb:83:ad:19:56:
73:8c:5c:74:47:7d:f9:50:e2:95:71:7a:0c:53:02:20:bc:7e:
d0:ba:55:ec:69:33:7d:8e:c2:3d:c7:13:85:e0:5c:a8:ed:eb:
5b:ef:e4:ac:2b:d2:bb:cf:51:19:ee:df:dc:b0:ab:38:61:a8:
9d:b3:a5:8f:84:88:b8:5c:c9:e6:62:34:6b:8a:69:cb:20:da:
7c:f3:96:b9:f7:83:18:64:22:de:67:66:c8:91:bd:66:c9:eb:
2c:79:1e:dd:34:30:bd:7d:4a:de:cf:80:78:a3:e6:b9:a1:d7:
97:f6:3c:dc:86:08:c0:9a:15:1c:37:bf:a9:ba:5f:df:7f:6d:
8a:d7:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:46:13 2026 by rpki-client