Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: WV8klDriuPvNindppB1EfxNnoowOXNsuNgnjNzUhcXg=
Subject key identifier: 04:8C:EA:B4:23:EE:F1:1A:46:EC:BF:25:A0:6F:27:81:B6:57:5A:07
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019CFC5022616C022E1C6CE9FA72C6B4F0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 18B5
Signing time: Tue 17 Mar 2026 15:00:35 +0000
Manifest this update: Tue 17 Mar 2026 15:00:35 +0000
Manifest next update: Wed 18 Mar 2026 15:00:35 +0000
Files and hashes: 1: OTudHmFNPy5T-L1hWQnog6A_ceI.roa (hash: wIvVhud/9mGvpy1rcC5MEiOLhE/0LwqjcBJHlLA5qFQ=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: fMdhnCdHK/vYaFoKwPrugLWxbsl2CYQNFuJ02ZyeHM0=)
3: WlAKMNPruSZgFaPvtYJyDu67Od0.roa (hash: 45tdzajp934hoCjwF+mGUtWY46Eoj3bjg9Xls4lMV3A=)
4: sDPNE5jcpr7Kz0eeVw7tsyFTEOk.roa (hash: wWpAFNiAYDk0JELnjCx4BhjPSlYyPlHxV0vof9MyH6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:50:22:61:6c:02:2e:1c:6c:e9:fa:72:c6:b4:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 17 15:00:35 2026 GMT
Not After : Mar 18 15:00:35 2026 GMT
Subject: CN=048ceab423eef11a46ecbf25a06f2781b6575a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:7f:32:da:38:9b:fc:0a:cc:61:f3:00:7f:
2e:86:3a:d7:8d:34:89:df:ca:36:a9:87:2c:a5:66:
44:53:3c:0f:22:27:33:45:9f:4c:59:81:c7:36:83:
ac:ea:62:fb:80:34:30:5a:a7:d0:66:54:11:56:11:
64:1b:bc:6c:5d:45:e0:68:67:61:10:98:38:3b:c9:
ba:15:bf:1b:6c:93:77:d2:c3:a4:65:06:57:80:70:
f0:a1:3e:83:3b:7c:5d:30:c2:44:70:b8:5f:0d:00:
09:38:c8:5e:d8:92:c8:07:d7:d3:3e:12:32:3c:3a:
5d:62:79:69:ac:a6:e1:92:04:f9:68:b1:53:ee:bb:
d7:a4:d8:31:3d:f4:e8:4c:bb:e2:0f:a9:11:33:64:
9d:bd:eb:29:56:9f:c7:fc:0b:67:7c:f4:44:be:5d:
4a:11:2b:bb:dc:02:34:52:8c:c4:3b:d8:53:9b:26:
2d:fa:1d:92:11:c5:7e:64:1e:b2:6e:b2:3c:ee:57:
2b:2d:37:ab:4b:ec:b4:8f:60:a0:2a:62:0c:29:0a:
d4:12:bf:97:7e:fb:27:05:d0:8c:10:b6:93:53:5b:
e5:b3:c1:6b:67:3b:c0:5e:f7:19:6c:c3:90:b8:b8:
d1:c6:86:d4:9d:5f:88:ac:fb:76:1b:98:29:c3:af:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:EA:B4:23:EE:F1:1A:46:EC:BF:25:A0:6F:27:81:B6:57:5A:07
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:54:74:46:f4:e2:e1:5f:39:9a:f4:7b:80:4c:c1:17:6b:
e1:55:6c:dc:7c:14:71:94:f5:fb:89:f3:b2:83:c0:2d:26:31:
58:a3:1d:a1:dd:b1:33:1a:76:a8:b8:a3:ef:e6:80:31:bc:5f:
dd:13:d0:89:e1:57:b0:01:2b:60:f1:31:24:a9:69:f0:98:31:
5f:4b:48:5f:81:2e:65:ed:db:b0:a4:8d:1a:8e:c2:aa:9d:99:
26:9f:a9:84:10:00:70:bf:2a:5e:e4:c6:b1:be:2a:bd:8d:b0:
66:4b:de:57:e6:7f:c3:b5:84:71:8f:93:6a:da:03:7f:61:e1:
5c:a2:ba:cc:75:e9:51:ca:f6:8e:86:af:26:60:ea:ff:79:de:
c1:d4:9f:69:ab:a0:0a:a6:c6:e9:44:f0:36:2e:70:d9:b8:7b:
79:e7:65:1a:46:dc:b1:6b:c6:f4:c9:a5:21:c7:94:25:80:18:
ae:c1:af:9e:f7:c6:20:37:b8:f9:e8:6e:ad:32:ac:b8:2f:1b:
2a:7d:2d:ff:af:5b:ca:3f:2d:b4:87:d6:28:a4:b0:27:7f:93:
b1:37:c4:a4:50:19:bf:1c:1b:e3:94:d0:8c:af:47:6e:8d:4b:
f9:5d:8c:24:9e:59:47:c2:77:be:2c:8c:4a:36:70:87:a0:d0:
34:cb:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 23:09:19 2026 by rpki-client