Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: 47iLKZ859yeqbtBQShHVTCxzUwWfxMxYSKVJT7EQryU=
Subject key identifier: 99:AD:E5:63:73:AD:D2:82:DF:F3:BB:64:AA:A9:66:D5:3F:36:02:53
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019D2D05CD3532922F5BBCC1778ACECBA96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 06D5
Signing time: Fri 27 Mar 2026 02:00:47 +0000
Manifest this update: Fri 27 Mar 2026 02:00:47 +0000
Manifest next update: Sat 28 Mar 2026 02:00:47 +0000
Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: 83DUgthicca616S59Gmdp4VFgdU2MiARBs0dUH12BZI=)
2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:05:cd:35:32:92:2f:5b:bc:c1:77:8a:ce:cb:a9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Mar 27 02:00:47 2026 GMT
Not After : Mar 28 02:00:47 2026 GMT
Subject: CN=99ade56373add282dff3bb64aaa966d53f360253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:c0:f4:26:ee:6a:99:4d:8c:43:6d:08:b8:
fa:53:a1:00:ac:c2:1f:2f:b5:b6:0d:28:0d:c7:44:
d0:0a:52:62:bf:28:1f:f5:c3:74:07:6e:7d:ae:93:
77:ac:ad:36:4f:92:0f:16:d3:e2:c6:4b:52:6e:a3:
f2:06:2a:22:c3:dd:84:f9:f1:c6:6b:00:46:66:4c:
32:04:5b:eb:40:24:5a:ff:9c:a2:82:2f:7e:7c:ca:
85:40:21:94:45:9f:cb:36:77:9b:3d:74:ef:d9:4e:
17:45:02:18:c6:ee:ab:4e:8a:95:52:ee:95:e9:db:
5b:83:50:88:91:01:f2:5d:1f:4b:bd:6a:95:fa:0c:
30:a2:d1:1f:c3:c3:e3:64:64:2b:aa:8f:6c:f5:88:
7e:ee:d4:72:89:bf:c4:13:a5:41:45:0a:9d:27:40:
52:8d:71:23:b1:ec:16:56:9f:57:60:e6:fc:88:b9:
8f:bd:c8:3b:0e:86:aa:05:a5:f1:e8:bb:d0:aa:a2:
d5:48:c8:8a:20:f7:a6:10:b7:49:f1:7f:48:ed:1c:
88:1c:d7:8f:22:b1:87:19:e7:b5:55:f5:5a:4e:70:
03:82:91:bf:64:d3:bf:72:8d:fe:bc:31:c5:96:09:
f5:f0:ad:4e:e3:15:58:c3:1d:c9:02:22:f3:0a:f4:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:E5:63:73:AD:D2:82:DF:F3:BB:64:AA:A9:66:D5:3F:36:02:53
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:74:61:6c:ff:cd:8b:d3:f8:01:7b:73:04:5e:7d:22:9b:cb:
76:7c:ab:d9:0c:a1:02:e1:26:d5:29:80:a7:0a:e7:db:dc:f1:
5b:f3:2e:ae:db:1d:9d:53:a8:97:35:e7:8e:b2:f4:a8:b8:2f:
8a:51:03:c4:d8:5d:40:0b:f5:41:e4:6d:ee:88:39:97:a6:bb:
4b:6b:36:f4:23:66:e2:db:32:05:28:8e:61:c4:6a:9e:42:31:
8b:db:6b:6b:dd:5c:bc:b4:34:10:eb:35:4c:77:4b:b5:3e:8e:
5d:f1:ba:14:9a:de:68:17:d7:80:af:82:27:d8:48:02:56:ac:
ca:d0:de:d8:42:81:75:5e:a8:f9:ca:c8:72:34:3f:2a:2c:4d:
ce:60:a8:b7:f8:a1:0e:4a:91:cf:2f:a2:57:44:57:cc:bd:e6:
65:29:f9:ff:33:8b:e6:7a:75:31:64:38:31:85:9b:64:0e:ee:
7d:e1:f1:50:59:51:a2:ed:ec:26:39:c4:4b:7b:31:ba:ac:61:
71:ff:1a:17:95:7d:a3:0b:2d:de:29:4c:7c:64:85:5a:c1:b0:
dc:f2:6c:44:7d:f6:c1:6b:a9:6b:3b:73:2f:eb:70:1f:70:01:
1d:73:5f:b0:9e:89:bf:7c:b0:21:5d:f9:6c:e1:c4:87:a3:c8:
a4:91:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:30:04 2026 by rpki-client