Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: w/CAhXtaSvo8yPkIda2aQgELmCHs+kAn0xhoJvAGyxA=
Subject key identifier: 36:73:13:15:5C:9C:59:F5:FC:09:11:58:56:FC:08:16:81:4D:F0:26
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01A1DEA7CFBA0242CA2334FCAD018908844E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 16A3
Signing time: Sun 15 Nov 2026 10:01:41 +0000
Manifest this update: Sun 15 Nov 2026 10:01:41 +0000
Manifest next update: Mon 16 Nov 2026 10:01:41 +0000
Files and hashes: 1: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: RDN7CGKPWlMlVy1XUlsr5AUWYMxB426YSAMJtlK1zZA=)
3: jaS_aopjW2l13vfiNLU-zDkULZ8.roa (hash: ME5jooaurn2IHi9kVMEVsmrNESUrxsBsGovYqe75bQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:cf:ba:02:42:ca:23:34:fc:ad:01:89:08:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Nov 15 10:01:41 2026 GMT
Not After : Nov 16 10:01:41 2026 GMT
Subject: CN=367313155c9c59f5fc09115856fc0816814df026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:7c:5b:b3:a9:41:fd:ea:db:43:a5:63:02:
a1:c8:bb:46:6a:f2:4a:40:79:9b:95:a3:28:bf:ce:
5d:f6:14:b9:38:a8:4b:b3:88:2d:52:76:fa:bc:ee:
4f:39:20:5f:3a:12:81:b4:20:bb:38:9c:ab:ca:18:
10:47:b4:f8:5d:54:de:69:41:6e:b3:69:f5:ad:dd:
50:db:1b:7f:7e:52:9d:dd:0c:b5:9a:40:51:20:d6:
04:b1:11:af:24:ef:5f:cc:57:a6:07:a4:ab:ff:91:
d5:1f:48:b8:42:48:2a:97:66:ed:08:61:1f:67:e2:
e2:dd:ff:69:42:46:26:85:a6:3b:63:9e:0a:10:a4:
cd:13:a6:4d:bd:9f:7e:39:12:de:7a:57:12:68:c2:
7b:4b:c7:c9:98:c0:07:6c:8b:86:c5:c8:28:27:ed:
48:73:bf:41:9b:02:33:d9:fc:2f:d9:8b:1c:42:e4:
f1:cc:2c:74:a2:e2:9b:8e:46:7d:cb:d3:e9:94:5b:
b3:b9:5f:2d:d2:96:ce:2b:aa:e6:63:f7:d8:9d:9d:
99:3e:4f:d5:b5:6e:79:01:be:48:9f:99:a1:32:ce:
91:1c:c1:44:3e:ea:aa:1e:4f:07:e2:90:43:74:9f:
75:d7:66:a4:7a:a5:6e:eb:9c:2c:da:7d:8e:4d:0e:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:13:15:5C:9C:59:F5:FC:09:11:58:56:FC:08:16:81:4D:F0:26
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bf:01:e0:12:39:55:bb:5c:6e:d5:08:1f:ac:9c:5c:3c:2c:
38:08:ac:01:f3:af:b3:6d:2c:48:ee:4d:24:d5:31:1e:3d:da:
7e:3b:1e:58:b7:25:64:38:4c:e1:f2:82:5e:75:4f:6d:55:ab:
c6:f2:28:ae:8b:ae:ed:7b:26:c2:98:2b:10:34:73:39:ca:ff:
f9:8d:7e:35:d6:0d:77:46:7a:b0:28:3e:d4:ac:1c:9b:d8:20:
87:a8:9d:41:62:29:e5:dc:c3:27:68:d0:32:3f:14:a0:b9:a4:
28:dd:a4:bd:94:1e:db:0e:f7:2b:1a:18:ec:33:5b:2d:4b:f9:
18:6b:af:77:65:7c:fe:da:8e:54:ac:97:78:e9:b1:bd:19:6a:
e1:0a:6a:2c:b2:22:ab:41:85:29:07:41:f8:24:63:0a:ed:68:
74:21:10:49:bf:9f:da:f7:05:26:ea:a1:b4:da:fc:48:cb:da:
b2:a7:39:31:1f:8a:4e:b8:d8:56:20:5c:2b:71:9c:a9:2d:29:
1e:39:e5:ad:b1:11:cf:4c:68:29:bb:ce:ad:d2:75:c8:f1:be:
d2:6d:0e:be:ba:7b:47:24:41:2f:61:65:c6:bf:33:f0:ce:fb:
5e:8e:25:3e:58:e9:af:d4:dd:32:74:d2:94:e8:e4:4a:a6:29:
32:8a:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:19:17 2026 by rpki-client