Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: txzHDTYtzgVZDTuXqY6HaXOnWX5LktZRVKMqus4AT24=
Subject key identifier: E5:3D:75:52:E3:06:7E:08:7E:AB:01:2D:AC:7E:65:32:DB:06:FE:82
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01A1065C5CD524C62AC0648566DC4655EE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 1633
Signing time: Sun 04 Oct 2026 10:01:18 +0000
Manifest this update: Sun 04 Oct 2026 10:01:18 +0000
Manifest next update: Mon 05 Oct 2026 10:01:18 +0000
Files and hashes: 1: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: PgW4bRopPJQTabmoTE+5cXqdbSRDGtHb/MaFzdbZonY=)
3: jaS_aopjW2l13vfiNLU-zDkULZ8.roa (hash: ME5jooaurn2IHi9kVMEVsmrNESUrxsBsGovYqe75bQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:5c:d5:24:c6:2a:c0:64:85:66:dc:46:55:ee:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Oct 4 10:01:18 2026 GMT
Not After : Oct 5 10:01:18 2026 GMT
Subject: CN=e53d7552e3067e087eab012dac7e6532db06fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:d0:b6:c9:f8:e1:81:3d:36:88:65:e1:60:
6c:74:e6:0d:a4:a2:4a:a5:4d:61:dd:14:61:13:d7:
fc:b2:a7:06:f0:fa:55:a2:8c:08:a4:c0:28:86:4a:
20:97:8a:6a:b0:6c:95:ca:27:08:b2:61:4b:4b:12:
07:74:bf:7b:ab:29:ca:38:59:fe:4c:82:17:85:96:
90:0a:7c:bd:f9:dc:bd:8f:d3:fb:40:29:b4:2a:48:
6d:6f:e7:ca:87:c7:6d:6f:dd:98:b6:4a:01:9e:1a:
f2:0c:2e:09:b8:f9:7a:4b:38:05:7b:77:07:de:77:
0a:06:4e:94:46:b8:6b:7e:82:e2:bc:7e:e6:47:65:
76:f1:cf:cd:f5:43:8e:cb:d2:f0:a9:f1:7b:c5:ba:
dc:ba:d9:d9:54:36:f1:50:de:98:5e:40:de:96:b1:
af:b7:8a:7c:fc:5e:d5:0a:65:6a:9e:84:b3:a9:0d:
6f:05:4e:1f:36:d2:53:f7:23:6f:81:a1:13:fd:1b:
55:3d:c7:6e:6a:b1:30:0f:92:2d:6c:01:da:84:34:
4c:01:98:03:b7:d5:28:4b:76:96:98:62:60:70:23:
01:fa:c4:4a:af:02:47:5f:ed:39:3a:75:15:44:75:
1f:8a:ba:c0:bd:70:b5:d0:91:c1:86:d9:3b:79:fe:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:75:52:E3:06:7E:08:7E:AB:01:2D:AC:7E:65:32:DB:06:FE:82
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:e9:12:70:61:42:72:b6:b8:ea:a6:1a:74:00:75:4f:60:
dc:d4:28:9f:86:79:d3:1f:d6:e1:49:cf:14:6d:82:8a:8f:6a:
51:98:10:66:03:22:8c:bc:87:53:33:78:c5:4e:77:1e:01:60:
6b:e0:84:32:ae:ab:e5:4d:26:36:56:d6:5f:75:e9:cf:4c:03:
5b:93:b6:39:9d:11:8a:dd:3e:1d:47:ab:46:c7:2a:a6:0b:10:
83:0c:82:7d:e1:5a:d8:b0:a4:1f:c5:5f:ba:95:b4:1a:d6:ff:
a6:25:de:9c:c0:88:df:31:40:4d:f4:e6:f1:a5:b4:5a:0f:9c:
43:f8:eb:d2:ce:a2:52:24:e5:40:59:05:84:80:f4:bc:b6:0a:
79:c2:60:e2:d5:86:f5:f4:92:50:95:13:de:1f:ac:e9:80:35:
c1:56:9f:61:03:99:93:17:be:1a:76:30:d3:60:61:35:ac:fb:
22:2f:4d:13:18:c0:a2:86:5c:9a:8a:37:9d:d9:9e:2c:b6:4c:
74:e5:da:92:c7:ac:5a:04:e4:02:a1:d0:b8:de:61:9e:48:fe:
94:99:00:60:a6:e6:2b:d6:22:20:5d:33:99:b8:48:94:8d:0d:
79:c7:a6:43:2d:75:b8:b7:6c:e1:ac:49:69:03:fd:1a:33:c9:
91:4b:df:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXFzVJMYqwGSFZtxGVe4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk
YTQ3ZDcwHhcNMjYxMDA0MTAwMTE4WhcNMjYxMDA1MTAwMTE4WjAzMTEwLwYDVQQD
EyhlNTNkNzU1MmUzMDY3ZTA4N2VhYjAxMmRhYzdlNjUzMmRiMDZmZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMXQtsn44YE9Nohl4WBsdOYNpKJK
pU1h3RRhE9f8sqcG8PpVoowIpMAohkogl4pqsGyVyicIsmFLSxIHdL97qynKOFn+
TIIXhZaQCny9+dy9j9P7QCm0Kkhtb+fKh8dtb92YtkoBnhryDC4JuPl6SzgFe3cH
3ncKBk6URrhrfoLivH7mR2V28c/N9UOOy9LwqfF7xbrcutnZVDbxUN6YXkDelrGv
t4p8/F7VCmVqnoSzqQ1vBU4fNtJT9yNvgaET/RtVPcduarEwD5ItbAHahDRMAZgD
t9UoS3aWmGJgcCMB+sRKrwJHX+05OnUVRHUfirrAvXC10JHBhtk7ef6CCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU9dVLjBn4IfqsBLax+ZTLbBv6CMB8GA1UdIwQY
MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt
NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm
LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn/pEnBh
QnK2uOqmGnQAdU9g3NQon4Z50x/W4UnPFG2Cio9qUZgQZgMijLyHUzN4xU53HgFg
a+CEMq6r5U0mNlbWX3Xpz0wDW5O2OZ0Rit0+HUerRscqpgsQgwyCfeFa2LCkH8Vf
upW0Gtb/piXenMCI3zFATfTm8aW0Wg+cQ/jr0s6iUiTlQFkFhID0vLYKecJg4tWG
9fSSUJUT3h+s6YA1wVafYQOZkxe+GnYw02BhNaz7Ii9NExjAooZcmoo3ndmeLLZM
dOXaksesWgTkAqHQuN5hnkj+lJkAYKbmK9YiIF0zmbhIlI0NecemQy11uLds4axJ
aQP9GjPJkUvfmg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:17:46 2026 by rpki-client