Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: 8SjsRmn2bS11/6IHCeSB3cHC9W+a5X0Fwb6tXOE6Xlk=
Subject key identifier: AB:07:15:B5:94:EC:AE:00:96:FA:7A:F5:44:59:1F:F0:0A:43:C6:5D
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019FF534CD197C821E8B4011B4AF2FE6534B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 15A5
Signing time: Wed 12 Aug 2026 09:01:46 +0000
Manifest this update: Wed 12 Aug 2026 09:01:46 +0000
Manifest next update: Thu 13 Aug 2026 09:01:46 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: HxNB21UWAW3h+uSzLa8XCOIHu5HTncoAsM1l4rfNnTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:34:cd:19:7c:82:1e:8b:40:11:b4:af:2f:e6:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Aug 12 09:01:46 2026 GMT
Not After : Aug 13 09:01:46 2026 GMT
Subject: CN=ab0715b594ecae0096fa7af544591ff00a43c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:62:cd:cd:b7:c7:dd:89:4a:bc:25:11:55:
91:00:b3:58:86:b0:16:c5:09:d5:9a:dc:55:91:40:
da:87:e3:5a:f4:8d:30:52:2e:bd:c6:5a:cf:d8:19:
49:74:e8:74:90:f7:ad:8d:1e:81:1c:b6:f1:69:bb:
9b:1c:c6:ab:db:71:0d:2f:31:9a:56:9a:9a:00:93:
c0:06:f3:69:22:1a:20:c6:61:36:d5:9b:02:d3:68:
b6:fd:51:a9:1f:92:1b:d9:29:9e:59:27:ab:ba:8c:
7d:10:28:8a:4f:13:3a:4a:d2:91:a1:ca:f2:11:6c:
1f:09:9b:90:46:a5:72:a1:6d:6a:5c:9e:cd:1e:c9:
da:6d:23:ab:de:84:dd:bd:be:33:a5:e7:25:e3:8f:
86:a6:04:50:cc:ff:a1:d2:28:c2:bf:fc:ba:e3:be:
2d:41:7d:b7:4d:65:4a:99:a7:b9:67:81:54:35:4c:
77:f2:d3:b8:c3:e7:5b:12:96:29:bf:13:16:8e:0e:
56:58:ad:eb:f3:4a:62:9f:b7:c9:8a:cb:e7:23:b9:
c7:4f:95:83:7f:e9:3a:43:13:de:ff:f5:f6:c1:7d:
c5:25:4f:11:f7:86:09:1c:e9:94:3f:d6:c8:80:c4:
1a:6f:29:7d:11:5d:fc:e8:28:c9:1e:28:54:90:53:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:15:B5:94:EC:AE:00:96:FA:7A:F5:44:59:1F:F0:0A:43:C6:5D
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:19:53:66:35:36:c1:8b:c3:5a:9c:54:92:17:b9:97:bc:21:
7c:c1:a3:60:b6:67:f6:c1:1b:3b:11:de:6b:1b:1e:bd:a2:68:
cc:9e:47:7c:b5:1c:2b:ab:71:8a:3e:ce:56:47:cd:a5:15:3c:
35:a4:ae:4c:32:0f:ba:0d:c6:29:40:6f:d7:6f:12:0d:10:81:
86:fb:68:0d:51:ee:ee:e9:69:c8:0e:5d:53:c8:37:5a:a2:86:
24:ca:49:ad:a0:fc:c7:a3:6e:59:e7:d1:e3:92:71:6b:83:9d:
84:94:76:7f:32:a1:81:42:66:1b:69:a3:6a:f9:0e:04:33:3b:
94:f2:70:cf:51:b8:23:10:2d:d8:32:4c:58:76:ac:11:98:0a:
a3:e1:e4:12:bf:c8:ba:8d:44:ba:25:4f:2f:e4:b7:98:30:37:
4e:87:45:b2:eb:4d:f4:bb:17:25:59:d6:0a:9d:33:00:87:a1:
e0:df:8b:bb:73:1d:33:31:27:09:85:eb:5b:f0:2b:8e:ab:9d:
d1:4f:51:b9:85:cb:75:44:5d:88:85:a9:0b:df:24:09:dc:b8:
45:e8:48:89:5b:ac:5c:3a:54:10:a6:83:67:19:f4:31:a8:c1:
e2:f7:94:82:75:00:cd:9a:3b:ac:d5:e3:41:b6:78:91:b5:c7:
3f:86:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 18:14:18 2026 by rpki-client