Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: Tn+LDGgRKjt1F0Y+nZAyIkCx+9jjI2a9kTEjxO8zkJM=
Subject key identifier: 16:BB:6F:43:6C:AE:4A:5D:6F:94:BC:7C:A8:2D:3E:EC:C2:B1:2B:6C
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 01A15176C3174B69EFB6C739AE575B5AE168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 1839
Signing time: Mon 19 Oct 2026 00:01:40 +0000
Manifest this update: Mon 19 Oct 2026 00:01:40 +0000
Manifest next update: Tue 20 Oct 2026 00:01:40 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: Ik2OaILqhCdfNq-06I4Cq0Y22cQ.asa (hash: vilGb0G2dWsSUB/y/NcWpZIkxcNLagnLK2paHPZtJZk=)
3: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: rsOi4Wu65er9F4Lt277ctSdu4yYt9u7lGB7dd63gwKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:c3:17:4b:69:ef:b6:c7:39:ae:57:5b:5a:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Oct 19 00:01:40 2026 GMT
Not After : Oct 20 00:01:40 2026 GMT
Subject: CN=16bb6f436cae4a5d6f94bc7ca82d3eecc2b12b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:6e:c8:14:3b:e5:40:9c:59:cb:44:a3:bb:
90:d1:7a:53:a5:70:ef:14:af:55:4a:54:4a:13:af:
aa:75:81:ba:42:0b:ef:4a:b8:67:79:22:1a:4b:da:
e9:54:cb:88:d1:72:bc:f3:41:dd:99:a3:20:aa:a0:
bd:8d:55:30:2c:94:84:67:50:82:d0:5e:b9:77:33:
c0:fa:1d:5b:a0:ba:e4:6b:29:ff:e9:46:93:1b:5e:
ae:7d:1a:fc:de:75:64:11:1f:80:88:45:87:a9:20:
26:8e:69:62:b2:60:a8:4f:9b:18:f1:ff:35:87:2c:
43:9f:c2:1b:6e:ba:54:11:dd:49:cb:74:14:1e:fb:
49:e6:a5:92:78:a7:e1:3c:c0:39:ad:79:77:d9:5b:
e5:99:07:2d:81:f8:4f:24:70:3a:5d:9c:b4:b2:72:
91:a7:c7:40:9f:ba:88:ec:3a:01:6d:e3:66:f8:35:
d9:e1:2b:94:fd:7f:0a:cf:c5:53:d6:93:76:34:cc:
35:e7:89:22:bc:af:7a:45:98:12:0e:da:db:13:31:
99:de:f9:7c:a4:e4:8d:91:3c:3f:21:a2:b8:80:bf:
5d:8d:e0:e4:2d:b5:ae:b1:80:d0:fd:b2:c1:e1:b5:
40:3a:d5:0f:12:36:4c:b5:e7:7f:dc:8f:e1:ae:fb:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:6F:43:6C:AE:4A:5D:6F:94:BC:7C:A8:2D:3E:EC:C2:B1:2B:6C
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c4:a1:4c:80:37:8e:c7:f8:2f:8e:a7:a8:92:b4:23:ff:01:
6d:f3:d2:69:20:4b:8c:e0:79:e6:89:a5:20:16:0c:80:f5:8e:
44:49:c9:e0:2f:05:61:06:b5:c6:36:44:31:f7:e6:75:db:9b:
a5:b7:0f:a9:87:a1:a9:2d:6f:02:02:9b:85:1c:78:3a:56:61:
e5:8a:c1:1d:27:6a:2b:73:6f:0e:85:fa:28:f8:a5:ea:77:f6:
da:1b:3b:57:fc:c8:b5:9e:c0:f0:e2:65:b1:3d:bd:ad:50:3c:
b6:65:40:16:ba:ee:2d:75:f7:50:54:62:d4:d0:75:15:eb:b4:
41:b0:8f:59:d2:58:9e:17:fb:b2:0a:de:bd:33:4a:05:74:cb:
00:d0:35:5f:d3:3c:44:da:e3:ce:0c:cb:65:84:a7:15:1f:ea:
83:8f:8a:94:8d:58:21:11:6a:89:09:8e:32:f3:b1:f8:c8:a3:
2e:d6:af:36:0e:2e:fd:c8:e0:ba:b2:c2:f1:d2:e7:20:c2:e6:
d1:cc:59:f3:85:ce:ce:ba:28:be:30:b0:ee:71:20:10:91:d8:
72:9a:cd:66:55:84:79:3f:81:f7:da:99:5e:ae:0a:bc:f4:cc:
17:f2:30:8b:96:47:6b:32:0f:4b:f8:72:ce:fe:94:c7:5d:f3:
63:78:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:01 2026 by rpki-client