Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: EenXiD4K5A/BBJU1KDpjSDahM7F25zestAUlGGXMRU8=
Subject key identifier: BD:69:96:C0:25:7D:66:D9:23:AA:78:88:BB:81:AE:35:0A:7A:81:6A
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 019D32D12508EE68A9A6562D02A63A6F7E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 181A
Signing time: Sat 28 Mar 2026 05:01:00 +0000
Manifest this update: Sat 28 Mar 2026 05:01:00 +0000
Manifest next update: Sun 29 Mar 2026 05:01:00 +0000
Files and hashes: 1: DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa (hash: MIbxcgDVh37d8jCKphqH6GC0fLWYYb1ZT8Y0ieKO3pc=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: E6KTxCloOKMB45uKUP0cyeQxwXYSmPde7SrRQMeAAQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:25:08:ee:68:a9:a6:56:2d:02:a6:3a:6f:7e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Mar 28 05:01:00 2026 GMT
Not After : Mar 29 05:01:00 2026 GMT
Subject: CN=bd6996c0257d66d923aa7888bb81ae350a7a816a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:22:9c:e9:f8:fc:b3:0d:de:9f:32:93:f1:
76:a0:73:d4:83:ee:84:d4:2f:8b:db:55:38:2f:2b:
77:4e:f0:f5:40:13:7d:ad:31:d1:7f:de:8f:a9:15:
0a:d8:41:ea:e6:de:8f:cb:ab:7c:5b:d4:49:12:97:
1b:b5:23:cf:8f:56:0d:94:d5:af:d3:ec:5b:ca:67:
a3:0d:e9:f2:7e:73:b5:5e:14:4a:3b:12:f7:49:4b:
76:46:21:90:04:00:c5:a8:4c:73:95:f2:51:fc:62:
6d:31:5e:0b:87:d5:4b:a8:f2:80:5b:d2:2c:80:6b:
5a:59:1b:00:81:52:f4:fa:e6:f4:59:6a:da:48:ba:
e6:2a:f9:b5:59:b3:dc:a4:e5:85:4f:8e:6f:62:11:
1c:f4:41:03:ff:20:d5:24:d5:9a:33:d2:37:c0:da:
9f:33:08:6c:9f:65:5a:d3:f9:1d:21:c6:70:c3:e3:
ce:c6:fc:43:88:fc:e1:10:01:c0:12:0f:ab:7e:03:
19:b5:ad:c0:42:58:b1:27:9c:1c:fe:95:5e:fe:b8:
a6:cd:22:35:fb:53:6f:79:51:04:30:4c:2c:3d:f0:
b6:fc:1e:e2:bb:02:17:eb:76:52:0e:56:85:40:67:
b8:46:8c:85:62:b0:14:ef:08:4f:0c:6d:67:aa:86:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:96:C0:25:7D:66:D9:23:AA:78:88:BB:81:AE:35:0A:7A:81:6A
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:67:d2:03:4d:a6:2e:90:5a:d5:58:da:bc:bf:70:94:82:
c5:12:d9:15:ae:92:a1:cb:fd:e7:91:67:33:3c:44:1e:6f:ee:
8b:85:95:11:12:8e:66:10:f5:7e:f2:ba:69:e9:07:a9:80:bd:
2b:f3:55:5c:09:06:74:8c:f7:5e:d0:4b:59:ed:28:d5:a2:fc:
02:89:17:48:9e:25:a7:cd:07:cb:98:d2:ad:38:a7:c2:e1:70:
5f:82:36:cb:df:25:e8:5d:21:1b:59:f4:f2:ac:74:a7:78:36:
9e:0a:36:51:38:e6:6c:9f:68:0d:bc:a0:dd:09:d4:ca:cd:b1:
86:53:17:7d:4d:c5:0c:63:ff:43:6e:aa:79:be:bc:c6:88:2a:
51:92:10:78:cc:52:12:8b:97:22:8d:99:d3:c3:77:63:11:e1:
ca:2d:51:30:bc:59:ff:3a:72:43:2d:aa:81:d5:d4:19:2d:56:
59:d0:fe:b4:8c:65:a0:b6:77:76:3c:47:0e:4c:0d:10:9c:ff:
d5:00:6e:c1:cd:84:2a:84:6c:85:5e:4a:c5:5f:7b:ae:d0:d3:
ae:ed:18:b5:49:0d:96:51:0c:04:61:ce:5c:ac:2d:da:8a:75:
35:4c:95:3b:ae:39:2f:3c:82:f8:6b:67:d7:99:8c:0e:45:e2:
3e:ab:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:26 2026 by rpki-client