Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: m0C10ETxW9f8pddNeWnijAp7enyK0zEIeMQPFItstqA=
Subject key identifier: 99:DC:EE:A6:F5:53:82:C8:2A:A9:B2:8A:EA:C2:D2:30:DF:71:1D:ED
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019D28BBB9FFBBE1A715B1EA9779EC477113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 1432
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: ZikgBNwfPzPScCS3VVP+7FssA1bk6e4oTTwtZQTUpKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b9:ff:bb:e1:a7:15:b1:ea:97:79:ec:47:71:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=99dceea6f55382c82aa9b28aeac2d230df711ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:88:bf:9f:61:6c:2b:7f:4e:bc:d7:9c:7f:
19:d3:48:f9:b0:06:39:a8:e7:f5:b5:08:f7:af:62:
02:81:66:15:14:22:5c:ae:db:90:03:1e:0a:1b:f3:
2d:a4:05:3b:12:30:76:0c:1c:62:4d:df:56:1d:8c:
3d:e9:dc:c1:a9:a4:2e:09:f2:c8:47:ef:d4:97:43:
b0:b9:b4:b6:44:8d:ac:ac:d3:8d:42:7f:59:19:09:
6a:78:0f:e1:16:4b:e4:1e:3b:01:59:28:52:d4:b5:
e2:54:35:04:ef:48:be:07:5d:d8:84:54:38:4c:c8:
a9:e6:dc:39:c6:08:f5:e1:e6:3d:bb:48:dc:3a:41:
6e:8c:e0:f4:38:69:26:9f:6e:f8:8b:2f:19:43:00:
3e:2a:1f:90:53:54:50:b3:28:e6:1a:61:05:d1:19:
68:85:38:ec:97:df:95:b7:3a:5f:be:89:63:ff:c5:
fd:60:4e:54:98:73:4d:7c:34:9d:ab:a4:87:0b:02:
51:27:61:e3:16:32:b7:1b:7f:29:65:45:7a:5c:94:
c1:3b:33:27:67:1a:dc:f2:64:38:67:0a:8d:71:a8:
85:2d:d6:44:57:bd:bf:f1:88:a5:c9:2a:2b:78:99:
41:7c:a9:5a:4a:f5:49:55:64:c0:b9:ae:40:ac:36:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DC:EE:A6:F5:53:82:C8:2A:A9:B2:8A:EA:C2:D2:30:DF:71:1D:ED
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:ff:e1:78:f5:8d:c6:b3:88:3b:00:46:8a:1e:00:6b:a9:
8d:26:c5:aa:ad:c9:96:b5:49:0a:14:86:2c:30:a1:78:0a:68:
dd:71:f8:5d:71:8e:a5:db:d8:54:b1:cf:7f:ae:2a:29:f8:d4:
86:69:a3:00:f8:35:cd:1f:c0:a0:59:dc:55:a6:db:ea:76:f5:
bf:3b:39:10:42:50:db:cb:8b:b5:0f:1d:22:b0:7e:8e:72:8a:
03:72:ad:64:6f:2e:14:9b:32:d9:37:f0:16:43:f3:d8:e2:d4:
14:f2:89:28:27:bb:de:50:f8:00:54:3d:cd:d4:b5:f3:71:45:
1e:fc:24:79:86:3b:0d:dc:42:7d:72:13:d7:5f:0e:4d:f1:6a:
01:93:3a:e7:0f:5a:8d:a7:62:9c:81:12:3e:b4:af:72:ea:b9:
f6:ca:bb:f3:bd:51:d6:e8:22:37:c5:b3:1b:1a:57:f5:16:63:
fd:58:34:f1:a2:9d:61:99:70:66:6c:9c:7f:f6:f5:41:e0:c7:
4c:ac:e6:ad:53:6a:7f:ce:10:2b:11:59:d2:7c:f9:06:12:2e:
d6:11:df:6a:e1:90:0a:48:35:86:45:a2:4d:89:d1:56:53:f0:
50:8f:e1:b9:0d:97:97:65:1b:bd:76:12:5e:41:f6:44:b8:2e:
29:88:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:51 2026 by rpki-client