Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: 7vWG4v8ku88MLYiDbrGS5QEpn9g+3wilNfgURAugIMU=
Subject key identifier: 18:24:94:A1:36:FC:D0:1A:93:A4:3D:0D:11:61:7A:63:CA:AB:6F:36
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 01A13523100D75389BF945CC543CA5ECF55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 12:00:52 +0000
Manifest this update: Tue 13 Oct 2026 12:00:52 +0000
Manifest next update: Wed 14 Oct 2026 12:00:52 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: sucE7syWpA4NckooR1SIYytE/DVQj3Q8JiQOrVYPRG0=)
2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:10:0d:75:38:9b:f9:45:cc:54:3c:a5:ec:f5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Oct 13 12:00:52 2026 GMT
Not After : Oct 14 12:00:52 2026 GMT
Subject: CN=182494a136fcd01a93a43d0d11617a63caab6f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:c7:d3:4b:7a:94:9f:14:eb:a3:ab:a1:85:
20:4f:d0:24:98:da:f4:31:83:be:f5:e8:9c:36:81:
81:98:41:91:2a:e2:c4:df:1d:7c:e0:d6:3e:c0:ca:
03:58:2d:38:52:a7:2b:e2:69:dc:d8:c7:b9:99:51:
7b:bc:62:c5:54:87:fd:f2:81:d6:1b:03:23:95:75:
35:07:f9:2c:39:6c:db:9d:ec:ed:c9:cf:4f:cc:ba:
9a:69:94:ea:57:c1:32:10:8a:20:04:06:d1:31:68:
f4:c4:79:b3:96:20:f8:26:4b:b2:04:14:64:a6:58:
7d:4b:e3:25:9b:05:9d:46:4b:c3:b3:80:20:10:80:
79:58:39:eb:b7:21:1b:f9:c2:4c:ee:71:82:3d:95:
a6:fe:62:46:1d:e0:26:80:3b:82:d7:78:26:eb:8f:
57:31:d4:fc:96:2d:a9:54:6f:0c:f1:49:b6:31:ec:
ee:f1:c9:c5:3f:83:21:7d:65:5d:53:a3:5e:de:aa:
e8:b4:59:6b:8d:f6:50:9d:7c:99:b0:a0:99:e9:2e:
84:f1:84:3c:50:19:33:4b:f6:e8:03:ee:cb:5e:ab:
fd:eb:38:30:32:59:0b:eb:12:ba:1b:24:54:0d:ac:
ad:16:d5:9b:cb:43:41:ed:fe:17:10:34:d2:22:ca:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:94:A1:36:FC:D0:1A:93:A4:3D:0D:11:61:7A:63:CA:AB:6F:36
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:6a:58:4c:40:b6:aa:fa:bb:64:fb:fb:12:f0:d0:54:24:
a8:74:b6:a2:ef:13:98:d8:c8:69:87:52:11:67:d1:bf:11:93:
5f:ce:c0:f0:41:f8:d0:b9:a1:22:bd:9c:ad:80:7c:35:53:53:
78:a4:dd:42:29:bf:d7:7e:64:47:30:a7:7e:8c:ba:36:5d:15:
f4:3b:4d:35:50:2a:1e:04:c3:58:1c:df:8b:f9:f6:d7:dd:85:
e6:ac:5c:f4:c6:86:fa:ba:14:b3:88:46:32:f2:e1:1c:85:66:
57:18:bf:b6:9a:08:82:4a:29:9b:4c:c0:06:c9:2d:db:57:05:
96:b2:35:1a:2d:fb:c2:c9:87:13:60:62:79:8c:70:96:34:5d:
28:2e:15:1d:eb:00:b2:fa:21:45:69:38:4a:1c:df:ec:e4:98:
3d:28:a8:30:4f:d9:fc:49:8b:5c:cf:7a:a7:5b:0d:4a:96:32:
99:d9:d7:e7:e7:84:b0:0f:22:08:ee:22:f5:22:db:af:e1:60:
3d:0e:ad:54:e7:2e:83:d5:3d:35:ea:75:d5:ec:ce:77:be:20:
ba:7d:aa:08:6e:09:41:25:e6:1d:52:05:f0:37:a7:f3:e2:53:
9d:c6:1b:2b:c8:e9:1f:ab:dc:1f:53:f8:2b:f5:af:25:61:74:
23:80:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:35:44 2026 by rpki-client