Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: kLBRvJiFUy+ST6LuCKjx8fgyvvZrOPu3sQVq3W8BLCM=
Subject key identifier: 68:49:52:45:CF:FC:7E:9A:49:F4:0C:D0:28:28:99:2D:6C:30:23:62
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019F0B87F8042CDAF4111BEFA65E1E7764CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 152C
Signing time: Sun 28 Jun 2026 00:01:27 +0000
Manifest this update: Sun 28 Jun 2026 00:01:27 +0000
Manifest next update: Mon 29 Jun 2026 00:01:27 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: fmMlPlUf3HdF6AGJBaVcSOm8mKbIgn8c70CP88/iJx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:87:f8:04:2c:da:f4:11:1b:ef:a6:5e:1e:77:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jun 28 00:01:27 2026 GMT
Not After : Jun 29 00:01:27 2026 GMT
Subject: CN=68495245cffc7e9a49f40cd02828992d6c302362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:00:e8:b5:c4:d6:22:47:48:da:97:60:6b:
0f:36:a9:68:1b:5d:94:54:11:34:57:14:c9:fb:5b:
9b:24:7a:0e:63:7f:c6:dd:9e:7f:99:be:3c:8c:30:
32:c9:1d:b6:74:a7:19:fa:a4:5f:ee:9a:df:6c:d2:
78:7e:a0:8e:5d:7c:cf:e6:0b:d7:d8:f9:60:e9:38:
fc:0b:73:ee:62:cc:c9:7a:87:cb:fe:3a:14:8f:ed:
a1:c6:96:f7:b0:2f:9f:72:47:60:40:4b:a6:49:7a:
55:f2:1e:5e:09:6d:d2:60:37:d5:cc:9b:0c:a4:de:
9f:28:b0:47:d1:b9:d3:2d:61:dd:bf:d0:db:44:fb:
6c:04:8b:79:62:89:49:26:27:9f:8a:23:fc:1f:54:
63:96:e3:42:15:4b:74:db:67:60:1a:05:89:a3:25:
b5:d6:08:16:33:02:2c:0a:09:ce:11:99:88:b5:c6:
2b:40:b5:41:ad:d7:31:da:d7:3b:99:2e:9b:ad:1e:
75:ac:9c:e3:71:e8:12:9f:90:b1:aa:d5:49:ac:2f:
0b:b4:7d:43:ad:b8:25:a5:5f:75:22:51:31:bc:e6:
44:a5:03:ae:85:88:41:9a:b7:04:b3:cc:dd:9f:d5:
78:d1:72:3e:33:4e:25:1b:be:c5:c1:af:5b:ca:f6:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:52:45:CF:FC:7E:9A:49:F4:0C:D0:28:28:99:2D:6C:30:23:62
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:03:f0:33:2b:f2:ba:2a:c7:b4:46:9b:76:95:78:74:53:2c:
8e:b8:28:61:11:df:ae:24:bd:35:3d:7b:77:b6:16:7f:32:b1:
77:74:50:35:83:45:c7:48:55:fb:de:03:37:97:25:14:fe:2a:
20:8d:f9:cd:47:d6:ea:99:0a:ef:ea:f9:35:18:c8:d8:d7:46:
97:5f:97:9e:e6:ce:2a:aa:f1:5b:6c:97:90:d9:df:2a:97:33:
80:7d:ed:5e:7b:7c:99:46:c0:27:a5:b1:c1:98:2a:a8:87:25:
33:47:ce:09:26:30:82:e8:1e:48:99:fa:c8:89:b3:25:b4:4c:
b0:85:d3:98:91:e6:a8:e1:7a:35:4f:c3:e0:e2:39:55:0f:f8:
bf:17:3a:21:ae:5c:52:7e:d7:eb:b2:28:1f:a9:37:06:0e:35:
82:b6:cd:26:15:1d:dc:39:d1:d0:a0:7d:ae:cc:db:9f:60:f1:
c1:dc:bf:11:3e:7c:0e:15:b2:55:e0:e0:fd:2f:8f:2d:22:8a:
2a:8b:d5:88:b8:ed:fb:7d:a8:4c:b4:c8:69:b9:9a:c3:60:39:
9a:c8:f2:8c:b3:bd:57:99:70:c2:b0:06:a3:f7:f3:24:bc:88:
80:be:31:47:a6:40:0f:e2:55:b4:12:1a:31:24:f0:42:a3:67:
fd:7b:b3:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Lh/gELNr0ERvvpl4ed2TLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk
YTQ3ZDcwHhcNMjYwNjI4MDAwMTI3WhcNMjYwNjI5MDAwMTI3WjAzMTEwLwYDVQQD
Eyg2ODQ5NTI0NWNmZmM3ZTlhNDlmNDBjZDAyODI4OTkyZDZjMzAyMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrQA6LXE1iJHSNqXYGsPNqloG12U
VBE0VxTJ+1ubJHoOY3/G3Z5/mb48jDAyyR22dKcZ+qRf7prfbNJ4fqCOXXzP5gvX
2Plg6Tj8C3PuYszJeofL/joUj+2hxpb3sC+fckdgQEumSXpV8h5eCW3SYDfVzJsM
pN6fKLBH0bnTLWHdv9DbRPtsBIt5YolJJiefiiP8H1RjluNCFUt022dgGgWJoyW1
1ggWMwIsCgnOEZmItcYrQLVBrdcx2tc7mS6brR51rJzjcegSn5CxqtVJrC8LtH1D
rbglpV91IlExvOZEpQOuhYhBmrcEs8zdn9V40XI+M04lG77Fwa9byvYRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhJUkXP/H6aSfQM0CgomS1sMCNiMB8GA1UdIwQY
MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt
NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm
LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwPwMyvy
uirHtEabdpV4dFMsjrgoYRHfriS9NT17d7YWfzKxd3RQNYNFx0hV+94DN5clFP4q
II35zUfW6pkK7+r5NRjI2NdGl1+XnubOKqrxW2yXkNnfKpczgH3tXnt8mUbAJ6Wx
wZgqqIclM0fOCSYwgugeSJn6yImzJbRMsIXTmJHmqOF6NU/D4OI5VQ/4vxc6Ia5c
Un7X67IoH6k3Bg41grbNJhUd3DnR0KB9rszbn2Dxwdy/ET58DhWyVeDg/S+PLSKK
KovViLjt+32oTLTIabmaw2A5msjyjLO9V5lwwrAGo/fzJLyIgL4xR6ZAD+JVtBIa
MSTwQqNn/Xuzhg==
-----END CERTIFICATE-----
Generated at Sun Jun 28 03:05:32 2026 by rpki-client