Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: KATjBhWf13iREqrsOxFO0qH2I29rPKVqtisB12i1bZY=
Subject key identifier: 3E:8A:33:DF:A8:EA:7B:F8:AE:F6:4C:60:25:D8:73:63:4C:A4:43:BF
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019D273B1C27C49689CD450D1193C1A95D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 18CF
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: OTudHmFNPy5T-L1hWQnog6A_ceI.roa (hash: wIvVhud/9mGvpy1rcC5MEiOLhE/0LwqjcBJHlLA5qFQ=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: rrpcg4jXu75z750SshsJ4X3mB8jReIdwKWP8FtKyh6Y=)
3: WlAKMNPruSZgFaPvtYJyDu67Od0.roa (hash: 45tdzajp934hoCjwF+mGUtWY46Eoj3bjg9Xls4lMV3A=)
4: mckD0O0ZL6vy12iIdfSvHLxszg8.roa (hash: sD52oijRzqb3CzjRmGE6aQ8bCG45PZNBNx2vn7uu3xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1c:27:c4:96:89:cd:45:0d:11:93:c1:a9:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=3e8a33dfa8ea7bf8aef64c6025d873634ca443bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:1c:e1:6a:46:a2:cb:7f:6e:7d:67:3d:ab:
d0:ba:44:49:15:c1:3d:d6:99:74:1b:25:6f:2b:13:
44:7f:80:9d:ee:cd:42:91:de:a5:42:16:8c:a8:4b:
0f:13:71:bf:4d:07:f6:04:28:ac:17:72:dd:e2:14:
4c:f4:53:43:d6:29:5e:4c:aa:15:bd:cb:f1:f8:72:
12:7a:4d:ae:d6:1b:27:e8:ce:ba:39:d5:5a:66:20:
db:5f:ac:f9:63:9d:6c:06:be:4b:71:bb:55:80:fa:
51:c4:0f:26:9f:c9:2c:15:fd:7c:d0:2c:c3:6e:7c:
96:4f:74:dc:cf:c6:d5:20:31:67:7f:65:5e:ad:1a:
a2:b1:89:86:aa:a1:76:d7:88:83:00:4f:d0:37:25:
47:f0:3b:12:16:57:4d:b7:6d:57:48:ab:8f:06:b3:
d7:db:72:1e:f4:11:ec:48:c5:a0:23:f5:5d:cd:c9:
a3:14:9e:f2:46:ed:d6:80:9a:00:65:ba:3f:9e:20:
fa:9a:92:74:e0:34:de:8e:79:99:60:5e:2a:d2:f5:
8b:0a:9a:d5:d5:eb:0c:fa:99:df:dc:2b:15:ec:17:
a9:18:00:35:c9:43:0f:58:93:52:9b:b2:14:b8:bd:
5c:b1:ca:92:54:c4:77:11:01:ee:15:ed:6e:5a:31:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8A:33:DF:A8:EA:7B:F8:AE:F6:4C:60:25:D8:73:63:4C:A4:43:BF
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:33:d9:a2:76:db:2a:0c:74:75:b0:91:11:5b:71:33:0b:
01:3b:1c:e3:88:84:9c:3a:01:a3:87:6f:65:8e:2b:89:9c:99:
1c:a1:59:65:14:cb:1d:21:81:62:e1:ed:f9:22:79:e3:07:e4:
88:71:9f:59:44:b0:af:4b:8f:d1:8c:04:9c:48:49:94:11:09:
1b:80:77:99:bf:86:98:d3:48:d9:14:c6:91:8f:b9:c3:21:d7:
5a:7f:ed:79:46:43:86:96:da:cd:52:2b:0b:ec:bc:fd:26:d9:
2a:4d:8e:1b:24:6a:55:7a:8c:2a:97:59:cd:db:9d:be:66:b3:
46:09:91:c7:72:92:20:59:60:11:ff:4a:d0:a7:b0:5e:bc:eb:
9d:ef:c8:c0:56:55:af:d7:88:ff:5b:20:8e:bb:ee:9a:7f:28:
9f:3d:66:dc:09:56:da:e2:2d:c7:c4:d4:38:ac:d8:12:6f:b8:
1b:3d:7f:a6:78:9a:a9:aa:64:44:93:24:1f:50:cf:a7:84:34:
7c:c8:b3:48:5f:5f:5e:4b:f4:95:cc:d5:28:03:33:f0:2c:4c:
2f:44:ce:09:fb:6e:3d:db:d3:76:e4:eb:21:e5:f2:4c:28:97:
7c:7e:b6:5c:e1:f9:c2:40:ba:1c:f0:5f:22:28:29:24:ca:83:
4d:8f:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:20 2026 by rpki-client