Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: VHlSJFYmnhE98iM4hl1v6Heoo+rk8ACUsx7ONiqtPSg=
Subject key identifier: EF:1B:27:DA:3C:6B:DA:94:1D:5D:F4:37:C9:24:C7:01:89:00:D7:88
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 01A12B7B888BD511E95F081BEA7496154411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 15:01:18 +0000
Manifest this update: Sun 11 Oct 2026 15:01:18 +0000
Manifest next update: Mon 12 Oct 2026 15:01:18 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: RjNnO1qP/n906hplEUK6BSziRmxhGsoIjtkukn+EpY4=)
2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:88:8b:d5:11:e9:5f:08:1b:ea:74:96:15:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Oct 11 15:01:18 2026 GMT
Not After : Oct 12 15:01:18 2026 GMT
Subject: CN=ef1b27da3c6bda941d5df437c924c7018900d788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:4d:f8:d6:e8:8f:2c:5b:44:b4:f8:e4:fd:
d4:55:9f:e9:a0:40:02:5a:06:2d:5b:f8:9c:2a:f4:
67:1e:6c:09:2f:66:54:de:95:c8:b2:dd:09:a7:e3:
67:ea:28:f2:f7:64:b4:0e:e0:38:ec:ae:fe:fe:8b:
58:a7:31:76:44:7b:f7:37:33:33:cd:01:c0:50:a9:
f6:6e:1a:44:1b:65:67:b0:b3:ba:2c:6c:1d:d8:aa:
de:5b:7c:ed:7a:77:c4:86:6c:30:72:2a:6f:e8:91:
8f:b2:e8:46:2d:26:93:96:6e:6b:0f:52:ce:7f:e7:
c3:c7:3b:14:76:62:a2:98:86:ca:b1:52:f8:33:ec:
7e:63:5b:7f:4e:de:78:dc:82:d7:2d:1d:8c:fa:4e:
40:92:ae:ce:64:ef:fc:e8:a8:e1:73:84:4a:45:90:
25:4b:b0:39:98:86:8a:ec:c1:d0:db:ca:4b:e9:8e:
dc:f3:4c:67:e2:89:ee:7f:23:53:b0:aa:b5:78:e1:
42:f3:62:b3:63:ee:2e:81:a4:3b:64:53:61:17:18:
d3:b1:17:9b:97:1e:5c:0d:97:4b:99:db:b0:d0:1c:
ca:cf:6f:02:d0:d1:d3:73:3d:41:c6:7e:05:eb:9b:
dd:10:52:89:85:93:44:56:8e:79:42:65:de:2a:f8:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:27:DA:3C:6B:DA:94:1D:5D:F4:37:C9:24:C7:01:89:00:D7:88
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:13:a7:b2:28:c7:49:ca:f1:68:b1:2e:ca:cb:7e:33:c6:
bc:fb:b2:da:54:cc:3f:90:48:fd:4a:68:14:c8:41:55:b0:42:
37:3d:1f:ca:c0:fb:fa:05:2c:31:16:d7:f8:7a:5f:fa:4a:9d:
26:4f:eb:29:ad:e3:8e:08:2d:f1:f8:35:2c:53:4a:14:59:cf:
61:f4:49:93:a6:6d:fc:87:b8:5b:94:1a:2c:49:de:fc:a0:02:
d2:3f:5a:d6:21:c7:64:8a:ee:9a:1a:ea:9b:31:9e:52:ca:42:
23:9d:4d:d4:2c:b6:c6:45:df:0b:34:47:5c:6b:fc:b4:a3:32:
20:a3:5e:5d:d7:19:8b:39:56:eb:0c:19:98:2b:5e:1d:db:9f:
92:5b:98:a8:8b:92:50:c8:28:5f:60:13:6c:fc:4a:b9:2f:71:
55:6c:a7:2e:a8:3d:15:16:f2:8b:94:58:d2:94:f9:7b:fc:fa:
6a:23:aa:09:f0:9d:8b:61:bb:bf:15:b0:78:e5:b2:55:ba:c0:
ed:f5:06:b6:8b:9d:0d:0b:93:3e:b2:0a:a6:e6:80:d5:61:4a:
a5:cf:e9:44:a7:20:3d:10:3b:bf:cf:7c:e2:5e:18:a5:ef:ba:
e9:a5:13:72:ac:10:18:04:f9:da:7e:d5:61:db:a8:4e:2d:60:
01:f2:26:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:58:31 2026 by rpki-client