Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: 1f7ceeqdfKnEXOp1zC13b3AA/pU5RRS7WnEgquoho2Y=
Subject key identifier: C1:AA:47:B1:BE:5B:9E:5F:5A:69:F5:F9:E3:F5:4B:D9:14:11:AF:69
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 019CABA1D85AAFC8D410922E7E6237B40724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa (hash: MIbxcgDVh37d8jCKphqH6GC0fLWYYb1ZT8Y0ieKO3pc=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: TCs20OSZ61+bBtZvYJ3F+VTkjNwKFUft+nnmPZZdZoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d8:5a:af:c8:d4:10:92:2e:7e:62:37:b4:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=c1aa47b1be5b9e5f5a69f5f9e3f54bd91411af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:46:f4:7b:37:71:6c:f4:07:c9:bc:fa:c5:
f8:a1:8c:26:09:e9:86:47:b3:74:f2:16:09:f9:4c:
ae:ac:79:d4:37:f8:ff:94:a6:5b:b4:44:37:d3:0e:
6b:c8:9a:95:42:3f:1a:8a:df:b3:b4:3b:34:2a:03:
93:12:be:35:6e:c6:81:83:06:00:d6:e7:c6:60:99:
f0:66:b6:85:3c:03:0e:d2:66:43:5d:dd:42:56:9f:
e7:e4:1f:57:d5:90:76:06:a1:97:ad:90:de:1f:ec:
b9:cd:52:f7:4a:5a:dc:f0:1b:23:67:3e:21:5a:ee:
07:c0:10:46:d1:e4:7c:e7:e7:a6:8f:6e:c6:b7:84:
37:46:c8:7b:f5:c7:0d:92:6d:31:da:2d:87:fe:9b:
b7:6a:d1:c5:df:f1:9e:af:cd:a6:29:d5:fb:a1:c5:
62:a1:70:c4:16:d4:d0:80:fe:85:55:e6:3f:9c:1d:
81:a4:47:6b:dc:fe:06:db:43:2d:ff:fb:0c:d0:64:
41:5b:25:d3:b9:77:2d:e8:ab:73:ce:7e:45:2f:72:
ea:fb:55:1b:fb:ea:5c:b1:94:0b:51:f5:54:08:bb:
b7:b2:2f:28:3d:b0:a6:01:1b:a1:c0:e6:73:3f:3f:
1c:72:a4:9d:fe:ba:3c:0d:28:f4:d9:70:b3:d6:0c:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:47:B1:BE:5B:9E:5F:5A:69:F5:F9:E3:F5:4B:D9:14:11:AF:69
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ed:1b:69:68:88:be:2d:10:4c:ab:0a:f6:27:e7:e8:89:7e:
4b:01:df:eb:93:7e:dd:61:c8:d7:a4:43:04:6e:b5:45:bc:65:
71:0a:15:b7:0d:53:2a:40:31:ad:e8:b9:67:18:19:a2:99:82:
d0:ee:3f:ed:2d:6a:48:8c:50:5c:30:fd:00:41:a4:7f:da:3e:
4c:75:2d:5e:f5:3d:f7:f9:93:e0:c2:0a:fe:97:11:19:10:94:
8f:96:2e:42:11:e5:39:4f:fc:9d:83:e8:95:ea:75:1f:b0:04:
ce:cd:3c:87:40:1f:9c:34:34:30:78:51:1d:56:7a:47:f5:48:
17:5d:0b:d8:86:53:70:33:ad:ef:a1:a8:93:04:0b:be:cb:ac:
65:46:ef:a5:8c:2c:44:eb:f1:b9:d9:14:2c:53:fa:8e:3b:16:
9f:b8:d7:bf:3e:9a:33:5a:f0:36:a0:66:c4:46:dd:6c:8c:b0:
90:75:f1:b3:de:8c:64:02:f4:05:74:ba:24:37:12:e1:d2:34:
dd:44:0f:0d:3f:5e:17:e6:26:ad:66:4f:2d:f3:29:58:83:7d:
21:94:c2:cf:45:9d:14:f1:28:d6:32:09:31:cf:12:e5:45:e0:
fb:14:8d:85:c1:84:f1:89:98:4d:3b:9a:61:d2:bf:37:cd:fc:
0b:6d:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:02 2026 by rpki-client