Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: 3O54oqIecj4h5UigbtT/ly+U71Xe5S+qSWlQyp61Ffg=
Subject key identifier: 10:EA:39:92:7E:75:CC:F1:2D:49:F1:7F:C6:EB:FD:E6:1A:CA:0B:C7
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019E1DFE110197D13CBA2F7D1FC1D04C85B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 14B1
Signing time: Tue 12 May 2026 21:00:50 +0000
Manifest this update: Tue 12 May 2026 21:00:50 +0000
Manifest next update: Wed 13 May 2026 21:00:50 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: QB3TDz6Cb8BJbukg8ZSiqxKue4kh+c7FCy2sdRpv20E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:11:01:97:d1:3c:ba:2f:7d:1f:c1:d0:4c:85:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: May 12 21:00:50 2026 GMT
Not After : May 13 21:00:50 2026 GMT
Subject: CN=10ea39927e75ccf12d49f17fc6ebfde61aca0bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:ed:c5:f0:b6:cd:52:d4:dd:72:d7:dd:20:
d1:b4:4a:ff:4d:6f:b4:07:7d:98:91:81:47:0f:c5:
ae:40:66:33:fb:af:94:92:22:06:36:41:94:6d:b0:
1c:9f:c3:7c:0f:13:29:b7:d7:39:35:83:4e:16:a6:
29:41:75:ed:40:60:1b:0a:f1:db:06:15:60:0d:6f:
a3:20:57:c6:d1:ae:d7:42:c6:5e:01:01:22:c6:8d:
fc:fe:cb:1a:c4:53:16:df:33:7d:f1:5b:d3:19:e6:
30:29:4a:b1:4f:53:54:83:b7:91:cf:35:64:e1:b4:
e0:d1:2d:47:bb:c5:82:cf:2f:9a:11:84:a2:2d:cc:
6a:17:e9:a0:dc:22:48:02:1a:a7:f8:24:77:44:a5:
e5:a0:3a:5d:8e:36:5a:e3:9e:60:12:26:6b:5e:b7:
70:af:0b:10:07:f4:e6:f2:45:c4:1c:c5:78:54:f7:
8d:ac:f2:73:73:97:e4:c8:91:23:6e:90:70:da:94:
f1:af:4f:e7:a4:fd:fb:f2:a8:ca:9f:d3:6e:e9:f0:
da:93:59:54:33:9d:87:f4:c9:c9:4e:ed:9c:44:02:
3f:93:95:dd:1b:f1:99:45:91:f7:29:a2:97:c4:9c:
88:94:c3:21:c2:18:1c:ed:07:76:35:a8:82:28:cf:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EA:39:92:7E:75:CC:F1:2D:49:F1:7F:C6:EB:FD:E6:1A:CA:0B:C7
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:76:af:c6:f2:ac:f3:d5:94:ba:56:9d:a7:66:08:4f:48:4b:
99:48:29:b9:6f:7d:39:5f:48:55:f2:0d:c7:cd:af:22:ae:8d:
6f:cb:22:80:3e:b8:43:be:ee:ca:d0:de:e6:e4:34:9e:fd:d5:
ac:2d:ec:2d:9b:c3:d8:ad:b3:83:2f:43:0f:22:e6:f6:17:c1:
9b:23:4c:dd:86:92:29:cf:a4:4b:68:60:0c:12:81:56:a4:84:
6d:96:87:d8:57:16:82:61:91:61:8b:92:96:c2:8f:9d:8c:81:
a5:6f:21:38:b7:b4:fc:e0:af:1f:c5:08:73:15:2f:ca:55:64:
f6:3b:95:48:30:10:20:60:4d:10:3f:55:64:6d:2b:ee:35:19:
57:cc:2b:46:f6:19:62:90:dd:df:d1:30:f3:96:7e:2e:37:5d:
80:1b:58:da:af:d9:e0:ff:2b:98:62:45:b4:c4:01:e6:12:43:
b9:13:06:d4:ea:4e:9b:fa:a2:01:34:7b:ed:63:d2:a1:3c:ea:
1f:b8:61:04:5b:e7:11:65:10:b9:7e:c9:e7:f8:48:ed:7a:a7:
b5:69:04:3a:af:0f:00:82:f5:fe:cd:2f:61:52:bc:de:61:a2:
e4:15:70:2b:73:ae:93:52:55:9f:49:d5:1b:bf:45:fd:33:9a:
c4:c8:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:16 2026 by rpki-client