Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: eRxMTWfPmnsaor1Xz5MNuVzOURKsHZOSgCdxzrAuikQ=
Subject key identifier: 2E:86:1C:58:6E:05:6F:77:E0:55:25:06:BE:3C:B1:C5:87:D5:C4:10
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01A0DBE0217DA7E0C0AA031BBE81728037E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 161D
Signing time: Sat 26 Sep 2026 04:01:33 +0000
Manifest this update: Sat 26 Sep 2026 04:01:33 +0000
Manifest next update: Sun 27 Sep 2026 04:01:33 +0000
Files and hashes: 1: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: OJX0KRCNRL0An803QUmsk8Cdd0b59xjM2c6aFYC7+oY=)
3: jaS_aopjW2l13vfiNLU-zDkULZ8.roa (hash: ME5jooaurn2IHi9kVMEVsmrNESUrxsBsGovYqe75bQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:21:7d:a7:e0:c0:aa:03:1b:be:81:72:80:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Sep 26 04:01:33 2026 GMT
Not After : Sep 27 04:01:33 2026 GMT
Subject: CN=2e861c586e056f77e0552506be3cb1c587d5c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b1:9e:fa:34:e9:36:1b:3d:05:66:fb:7a:0a:
fa:fb:60:24:f8:02:5a:7f:d4:88:61:f9:05:9e:bf:
ec:12:de:06:f5:2f:5c:25:24:73:62:61:14:b0:d5:
6d:57:47:03:98:b9:11:99:29:ea:0d:18:29:5e:09:
db:5f:cf:4f:a0:24:6a:eb:5a:46:65:9f:95:a8:4c:
49:c5:59:c9:60:55:50:86:59:ac:46:3b:e1:5d:81:
b0:52:1a:db:39:bb:09:c9:aa:40:b4:ba:14:d9:e8:
22:71:bd:72:d2:31:74:6a:ba:58:c8:67:8c:a3:74:
27:eb:4b:c4:6c:2b:24:4b:52:6f:59:9c:d5:79:ac:
6c:7d:ea:8b:5c:bd:5b:c9:85:ed:04:73:24:64:2e:
a4:f7:cb:02:c2:6f:f6:83:f6:99:e2:8e:05:67:2b:
a8:f9:26:92:99:cc:67:91:79:f2:db:13:a4:9d:d2:
71:45:3d:96:fd:64:e2:02:99:df:33:ad:06:a9:33:
6a:2e:c6:ae:c9:8e:48:55:c0:d5:e6:54:04:82:1f:
62:9d:b3:f4:7c:bc:45:69:12:f9:a1:35:2f:34:fa:
1b:a2:bf:89:9b:7e:0f:f2:77:04:5c:63:38:77:98:
1e:d5:ad:6c:d7:5e:76:e2:41:4a:b0:6a:51:4c:1f:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:1C:58:6E:05:6F:77:E0:55:25:06:BE:3C:B1:C5:87:D5:C4:10
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:eb:10:42:23:56:cd:1f:ab:b5:5d:5d:d4:09:17:0b:4a:
77:db:7d:3f:0f:11:52:bd:28:af:76:53:a9:72:df:c6:b9:79:
14:02:c9:a1:b5:60:07:41:84:06:3a:dd:89:fc:14:95:9d:a2:
91:43:c1:f8:c7:6d:33:2d:b7:48:f1:85:d6:25:65:96:4a:0f:
c5:e8:78:b6:00:1e:03:21:11:2e:41:94:e2:b0:38:bb:2c:7a:
57:28:26:d7:eb:95:33:95:5a:ae:97:43:1b:b6:bf:51:92:69:
78:2a:8c:a2:ae:05:b5:95:76:24:54:eb:a8:05:89:dc:7b:51:
50:0e:cf:45:4a:b4:b0:6f:36:b8:32:ea:9f:b2:3e:90:4f:0b:
7a:31:78:2f:5d:90:7b:61:fd:7f:e9:49:0b:07:30:76:9b:33:
f6:c0:ec:46:9a:62:c9:15:12:89:ee:7f:c9:11:30:29:79:2b:
31:54:d2:a6:a5:12:41:d4:e4:3e:0c:b6:aa:48:6b:95:00:5a:
ad:3a:38:18:dc:41:c0:8b:06:5b:b9:30:91:66:11:4f:00:4c:
c2:7d:c6:e0:67:d3:ea:2b:4d:34:ee:20:2e:9a:0f:d2:5c:15:
5b:99:8b:5a:3b:81:7f:7d:d5:86:0a:a2:7c:2b:bb:01:b2:54:
d8:49:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:17:17 2026 by rpki-client