Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: veK3L202CgcztXI8AdWwbTxvDaNcs1JGsUEfFg5f75E=
Subject key identifier: 28:A8:1A:2A:7F:09:62:BD:F4:0B:E7:C3:D2:0D:47:7D:E3:5C:10:4D
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019FF948AC3DD54D8187BADEFB9BC5E1A0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 1559
Signing time: Thu 13 Aug 2026 04:01:57 +0000
Manifest this update: Thu 13 Aug 2026 04:01:57 +0000
Manifest next update: Fri 14 Aug 2026 04:01:57 +0000
Files and hashes: 1: 6WHEwN_y9ku19xFK-FapqSTdGE8.asa (hash: LKOVLUoj9fYPN7Jzk60IfzzlFLSHK4SKShzxWMNxkjg=)
2: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=)
3: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: ZNNyQ7ImPI+0E+nqNQ8zwuCaSYlEXSlZHneQZJlx3cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:ac:3d:d5:4d:81:87:ba:de:fb:9b:c5:e1:a0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Aug 13 04:01:57 2026 GMT
Not After : Aug 14 04:01:57 2026 GMT
Subject: CN=28a81a2a7f0962bdf40be7c3d20d477de35c104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:78:41:a5:ac:6b:18:8f:32:c0:26:54:ff:
37:b3:89:c2:d3:1c:30:a2:61:86:05:2a:84:1b:61:
ae:24:58:c5:c1:71:46:55:05:ad:f8:ad:bd:fe:f2:
74:0a:37:d9:f8:b2:a2:53:6b:f1:5c:dc:b9:2e:e9:
81:1b:f8:b2:54:18:c4:89:9a:66:de:1d:82:b2:5c:
e0:bc:f9:fd:56:4f:25:59:b2:d8:35:4c:0d:86:c0:
fc:9d:fa:0f:b5:18:8a:1c:f1:3e:19:10:b8:9a:53:
30:71:c3:96:86:a2:d6:3b:b5:ed:f7:06:b9:99:99:
c4:5f:fb:55:25:c4:51:fe:67:96:ad:9e:0d:f8:29:
9b:35:26:2b:7d:84:01:75:de:9c:51:e4:40:ee:7e:
a6:ed:bb:73:e8:09:29:4f:b2:e8:5e:1d:7f:02:89:
d7:7c:53:1f:82:29:4f:f3:8b:2c:6f:ad:70:4a:ca:
41:ca:0d:5a:71:d5:4e:48:6f:7a:1e:cc:4a:68:a4:
a5:56:2e:57:77:69:9d:98:4a:9b:68:8d:34:63:e8:
aa:c8:e1:60:f6:30:5f:67:e2:21:7c:5a:2b:95:79:
29:03:f8:dd:5a:65:a7:0c:35:28:20:ca:18:75:04:
20:70:30:ce:56:8a:d9:c1:3b:72:0b:8a:51:9f:2d:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:1A:2A:7F:09:62:BD:F4:0B:E7:C3:D2:0D:47:7D:E3:5C:10:4D
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:d5:1c:16:90:b7:7c:ed:6e:36:5e:61:31:ef:06:7a:ed:
a9:e8:54:6a:b4:83:cb:58:b7:b4:e0:0b:ed:ed:a0:c7:15:bd:
47:39:79:c6:ca:e9:a3:16:da:d6:4c:d8:b2:97:21:21:22:6b:
fa:4a:5d:57:41:b0:58:50:a2:39:cb:a6:b5:cc:f0:e3:66:9a:
a5:8b:24:70:92:fd:74:e3:7d:bb:aa:52:9b:0e:d0:6c:00:84:
fa:65:92:78:65:ee:c1:53:73:de:b8:27:3a:4d:86:75:37:47:
8a:b2:bc:9e:3d:42:e6:16:9e:cb:16:fc:a3:ca:45:8a:34:11:
17:c1:c9:7c:08:e5:b1:9b:8a:4d:6a:b6:42:8c:80:18:92:23:
dd:17:ee:94:b4:17:7a:21:0d:64:f0:70:03:c2:5e:b7:f1:04:
6c:50:28:bb:32:57:19:2f:ab:ba:93:6c:98:4c:2e:51:e6:8c:
f5:13:b5:88:c3:ca:fe:07:f0:37:f6:fb:cc:31:9c:df:9a:fa:
f6:e3:4e:d3:27:f2:d2:f5:0b:41:f8:b8:d5:3f:f2:77:1d:ca:
81:59:35:33:cd:c0:92:36:03:a3:15:7f:02:28:5a:db:61:2d:
58:31:28:64:fc:4c:7f:bf:6a:bc:4d:dd:8a:ab:ab:75:62:74:
a1:df:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:46 2026 by rpki-client