Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: x+Epl704mckFjAQNAsMiY0qEJgB3YZTQ6+Q7gWyrNtM=
Subject key identifier: B3:D9:E9:2F:82:7F:1F:09:43:78:52:4B:E8:D2:83:B8:17:D0:0D:B5
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 019D39779668E9E1919ACEAE07E4AE57CF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:31 +0000
Manifest this update: Sun 29 Mar 2026 12:00:31 +0000
Manifest next update: Mon 30 Mar 2026 12:00:31 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: Arsv1YByUuxc/Vb6vvXn5Go1Q4qTSvFSktaeRLB0cOk=)
2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:96:68:e9:e1:91:9a:ce:ae:07:e4:ae:57:cf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Mar 29 12:00:31 2026 GMT
Not After : Mar 30 12:00:31 2026 GMT
Subject: CN=b3d9e92f827f1f094378524be8d283b817d00db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:fb:5b:53:3e:be:46:92:c7:c9:4e:ae:3c:
c6:a9:82:d5:98:35:c7:b6:62:9a:e8:32:76:f1:b0:
9b:60:88:14:5e:d3:53:53:71:1d:4b:fc:9a:5e:72:
7d:b7:a8:57:25:f1:cb:74:25:c4:bb:52:51:76:17:
04:bc:81:93:ca:90:b0:5b:33:a7:28:71:f5:e8:64:
fe:12:d9:61:12:e9:c5:64:a4:b4:b6:68:0c:3c:e2:
ea:cb:58:4f:8a:02:6a:2d:4e:bf:d8:ac:64:8e:3b:
4c:70:b2:e4:56:1d:b1:22:4d:eb:c3:79:46:d3:89:
f8:8a:31:da:43:01:fe:df:96:4c:a1:e0:94:e4:05:
dd:40:d3:1b:64:fa:85:de:aa:9f:89:72:cc:c3:35:
24:48:42:e8:9a:ad:39:39:32:b4:b4:b4:c5:32:c9:
26:01:92:fe:b9:93:8e:93:2f:7f:4f:0b:5f:67:0d:
1c:5d:8d:57:42:7f:a4:fa:85:ef:9a:fb:97:f5:60:
6e:86:13:20:05:08:3f:1f:a0:b1:f7:61:2f:be:1e:
a4:e3:66:d9:e2:a6:7d:28:ab:3e:37:ad:15:38:59:
f7:2d:00:2e:51:fe:a9:5d:be:93:d0:82:fe:6d:ff:
0c:c5:53:fd:e6:14:fe:83:00:cd:79:68:85:e8:8d:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:E9:2F:82:7F:1F:09:43:78:52:4B:E8:D2:83:B8:17:D0:0D:B5
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6d:7e:66:98:1f:34:89:d1:51:35:c6:ba:30:9e:27:71:26:
30:22:01:30:69:bf:23:2f:46:39:76:61:56:a4:d2:c3:9b:74:
64:8c:ab:19:df:63:63:c1:a3:b9:50:14:ab:79:81:1d:a9:82:
fd:4c:7b:a4:5a:b9:48:0e:93:41:b2:cc:05:0c:90:4e:40:cd:
17:75:46:c6:67:80:fc:22:d7:d5:e2:6c:c0:0f:b0:c5:35:41:
f9:17:87:3b:3c:e2:ce:2f:a0:8f:e8:20:01:22:a6:df:fc:40:
1a:83:5b:fa:1e:ce:36:ef:9d:b8:3d:b5:a8:55:bf:72:02:0b:
aa:ce:d6:aa:69:0c:9a:0a:3b:de:d7:0c:7f:2d:b8:93:39:b5:
82:8c:cd:18:a9:89:f3:6a:ab:bd:4a:58:a1:7d:9a:b4:54:fe:
7e:ec:ed:44:27:5a:4c:d9:f2:fc:b1:84:62:3a:30:8f:30:eb:
28:dd:2b:28:92:58:c3:c2:24:b1:4e:8b:5e:74:66:75:13:44:
4f:dd:da:3b:fc:04:a9:18:80:fb:93:fc:fb:79:ea:da:f8:54:
e5:b8:18:a0:af:01:26:a8:fa:f7:10:cb:b1:6e:40:bd:34:eb:
ff:34:18:fb:ed:d0:a2:db:6c:79:51:dd:9e:b1:14:49:ea:74:
3a:17:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:38 2026 by rpki-client