Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: tFCPmfGpHWEbS58gGvAXIxiGhCKJhJMjXuiNPpbMV6k=
Subject key identifier: 07:BC:AB:4A:5A:E9:85:5C:6F:20:45:9D:38:3F:32:CC:EC:AA:30:42
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019D292954BE9C9299A7EBFBF5C794242E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 06D3
Signing time: Thu 26 Mar 2026 08:01:07 +0000
Manifest this update: Thu 26 Mar 2026 08:01:07 +0000
Manifest next update: Fri 27 Mar 2026 08:01:07 +0000
Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: gHxteAKYwL8ToES3dD1N0yD2GDpD4+EDV/nf40nxIMQ=)
2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:54:be:9c:92:99:a7:eb:fb:f5:c7:94:24:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Mar 26 08:01:07 2026 GMT
Not After : Mar 27 08:01:07 2026 GMT
Subject: CN=07bcab4a5ae9855c6f20459d383f32ccecaa3042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:ba:bc:fc:f9:f0:f3:26:73:ae:85:7f:bc:
5f:2e:52:bf:ef:00:23:7f:7e:79:fc:aa:80:77:dc:
e3:a4:d6:bb:40:be:8c:88:4c:95:b7:3e:07:3b:a0:
0b:4f:9a:6c:51:0a:db:d9:cb:15:6e:de:24:25:f8:
35:db:a1:a7:7f:5e:7a:6b:07:62:f2:f9:af:64:20:
3b:fb:84:6d:26:a1:fd:38:08:a9:c4:fc:a9:e3:38:
a3:be:bc:67:70:66:3e:cc:21:c4:88:58:68:cc:9a:
e4:2c:11:13:a2:86:7f:6a:0f:8f:81:a7:f3:13:2f:
06:a2:1e:19:fd:3e:78:8a:a2:ac:e4:e1:74:2e:97:
88:ac:d1:b8:35:28:cf:82:7e:ad:39:7a:dc:cb:7a:
af:64:7d:a3:7c:e4:33:14:0b:11:bd:8e:92:8e:44:
dc:b4:b1:8a:27:9e:01:a9:0f:dc:9c:fb:84:bd:37:
2c:e2:3d:6e:d4:b5:e7:d2:5f:b7:8a:d8:de:a6:a2:
0f:c0:df:15:8b:0e:fb:97:0a:9c:22:7d:45:1c:94:
f0:0d:f7:30:c6:e2:78:c2:95:f7:a6:4f:0e:2f:0f:
7d:12:23:3f:92:1d:3d:07:14:3b:35:9e:d3:0c:dc:
de:5c:70:d5:4d:1b:d2:04:ae:08:38:38:a5:17:c1:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BC:AB:4A:5A:E9:85:5C:6F:20:45:9D:38:3F:32:CC:EC:AA:30:42
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:05:7b:a4:04:58:e4:7d:06:45:e0:e6:c0:f0:4a:c9:ca:8d:
a5:bf:36:bf:9c:8f:a6:1d:7f:ba:ab:21:21:21:92:df:5a:27:
74:04:3c:8e:d3:0a:5b:74:d6:63:0f:31:c1:a0:74:02:bd:85:
d4:00:d0:f8:bd:ea:2c:29:ff:20:d9:e2:67:01:a9:d4:4f:97:
d1:ca:c4:3d:0c:73:71:44:b9:98:b7:c6:18:f7:49:46:a3:ab:
9a:00:4e:2b:3d:11:41:f0:a9:c6:5d:16:23:9a:9f:b5:11:8d:
2d:b7:85:01:c4:86:91:d8:19:4d:74:97:12:9f:e2:28:eb:df:
92:c8:75:be:c8:81:a5:c8:71:98:75:62:de:a8:65:12:0a:dc:
20:9e:e7:96:4e:8e:2c:00:f2:fa:e4:17:f3:2f:cd:09:0d:b3:
f5:bd:19:d6:0f:1e:01:58:d8:b3:b0:84:74:6f:87:9a:12:fb:
d9:d2:66:88:82:b1:74:cf:c1:2a:21:5a:74:af:00:57:59:a2:
10:bc:1c:29:07:3a:d7:63:55:3e:5c:ff:ad:87:0a:df:2c:e9:
2a:af:9f:13:36:6e:13:c1:52:6d:a9:ef:d9:04:a6:6b:92:4a:
46:e6:4c:a8:ad:79:03:db:f3:4d:75:0e:50:41:34:89:ff:95:
41:e1:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:33 2026 by rpki-client