Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: ev0dSLM+EiVucFBuwyFkqtfVyDHOeycGWRqUVtNizqo=
Subject key identifier: C2:D4:52:00:65:68:04:20:AD:3F:FB:1B:CC:39:84:7C:57:EF:1A:69
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019D389BBBF1B183F658CE8F5EB18E048D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 06DB
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: /Kuqjg41sAZHRmum02/7+bKzW4G+G5QksZ6w+uilD4M=)
2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bb:f1:b1:83:f6:58:ce:8f:5e:b1:8e:04:8d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=c2d4520065680420ad3ffb1bcc39847c57ef1a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:15:80:26:de:0a:6d:c0:84:1a:a3:b2:ee:
ef:8a:09:a4:5c:3c:10:49:9e:7d:d1:54:cf:a5:7c:
8e:ed:b4:da:16:f7:58:1b:65:a4:b2:a6:a0:5a:f4:
12:2b:7c:86:91:d6:97:45:eb:c9:3a:e4:63:6e:d5:
0a:f6:3a:2a:20:e3:9f:68:89:ef:a9:9a:90:6b:95:
08:82:af:82:ab:27:2f:8b:ff:81:e3:0c:b4:21:c3:
d9:bb:55:a8:9d:0f:50:ed:63:16:c6:8b:07:7c:35:
62:24:d4:ab:67:c3:34:31:7f:dc:d2:a2:5e:83:d5:
a6:91:02:34:10:64:eb:09:87:da:cf:9c:ac:6d:b4:
f2:7b:fb:91:31:b3:67:e5:23:8b:81:0c:2f:58:76:
5c:82:0e:6f:69:8a:41:e5:35:c3:51:3f:a3:c5:80:
42:b0:a6:7e:7c:4b:bf:44:2e:4b:8f:4b:2e:e8:f3:
8e:ac:ce:47:60:b1:96:9d:00:3c:cf:6f:28:bb:e3:
b0:83:fb:f7:1e:b7:41:b4:8f:d9:d3:26:24:a0:dd:
3a:7f:aa:0e:c3:b8:25:33:a0:e0:ea:ca:64:6e:c3:
90:4d:72:20:9e:57:62:69:df:8a:ed:76:bb:66:bf:
4f:6c:b0:d2:12:f3:48:43:c2:34:cc:0f:d4:d7:32:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:52:00:65:68:04:20:AD:3F:FB:1B:CC:39:84:7C:57:EF:1A:69
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:ff:c2:53:56:49:17:ca:9f:4b:64:54:88:d5:b9:08:f1:
a2:c4:ee:50:1e:de:ca:42:5f:ef:72:77:fc:9b:89:26:e2:81:
9f:6c:42:26:6c:28:c6:fe:8d:a6:ba:b4:28:88:22:4a:43:2d:
61:7e:3e:82:e7:87:fc:7c:68:15:40:57:68:6a:02:f6:02:f4:
ab:b6:fa:a9:de:ed:3d:d6:d6:21:a2:36:d9:af:d1:2c:03:56:
7f:c0:a4:38:70:19:32:cf:2b:0e:52:2d:0f:25:bd:77:27:f7:
79:e9:e2:d8:0b:a9:a8:10:83:c5:31:59:96:77:04:1b:ca:a5:
ff:e7:c7:34:68:85:f6:6d:19:51:80:9d:43:b8:89:1f:e2:61:
af:16:46:36:21:b0:f4:e2:d9:43:10:83:f5:c2:ce:a5:7b:85:
85:74:40:4a:91:03:db:c8:8f:bb:b4:18:53:98:25:1c:6d:3a:
40:78:11:ce:30:7f:5a:56:83:57:16:c3:ca:1a:fe:99:81:66:
0e:fa:ae:24:77:9a:f7:b6:21:fd:c3:53:2a:ae:02:7e:eb:e3:
43:3e:d6:74:68:32:5d:33:2a:20:24:7a:2a:f9:cb:27:82:7b:
62:d6:0d:b8:88:1f:17:e7:de:db:1e:cf:0b:59:f1:d1:d9:bc:
a8:b1:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:09 2026 by rpki-client