Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: QCHCJqdpScXhrb+COOK1sK9Pd3R8EtDZdT4c/wtr9f8=
Subject key identifier: 5E:1B:9B:28:C7:FC:9B:E5:CF:75:46:18:C7:24:D4:5F:FA:87:4E:82
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 019D9A075D80C27DA0275FEF1ABD504D9387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: Xa1GWXMtnG5/OOFXCV5FAjrGmAuuUrxuIAL/4Ajr0JE=)
2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5d:80:c2:7d:a0:27:5f:ef:1a:bd:50:4d:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=5e1b9b28c7fc9be5cf754618c724d45ffa874e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:b2:ba:62:88:7b:05:eb:f0:43:4e:f5:83:
4f:63:9b:fc:17:e5:a4:fe:f2:7b:19:98:16:2e:c7:
fc:b0:87:2c:e2:01:89:4c:07:31:0b:37:16:b5:45:
75:13:80:50:c4:78:19:b3:96:5e:84:c0:b3:35:21:
4f:ad:7c:71:91:20:bc:84:d2:5b:68:0f:cb:99:b6:
11:28:8a:23:32:14:f1:e3:75:e7:4a:6d:da:d5:df:
3f:f6:8f:05:53:32:ab:09:8b:2b:c2:8a:fd:67:2f:
35:e9:78:3e:ef:ec:ba:33:10:ce:07:92:fb:46:ac:
20:23:14:ae:86:0f:0f:45:4c:e8:ee:e5:13:ee:17:
ff:2f:ae:a6:30:6a:6e:af:0d:e2:e3:4d:78:c9:e2:
9d:cc:ac:a6:78:ca:23:4c:97:3d:86:53:01:f3:f7:
02:f1:e1:f0:58:ea:fa:59:7c:69:41:02:7d:d3:d9:
2a:fa:95:72:d5:d2:5a:a0:10:16:88:d8:c5:af:a3:
d6:69:16:af:74:55:37:ba:4f:a9:92:cc:8b:55:04:
00:e4:74:50:42:c8:4a:bf:e3:ad:1c:44:2a:47:e2:
4f:f9:e4:d6:06:33:b6:ac:52:b7:d7:cb:67:7a:96:
69:04:c9:bc:ec:6f:db:11:29:a3:15:ea:a7:ac:1d:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:9B:28:C7:FC:9B:E5:CF:75:46:18:C7:24:D4:5F:FA:87:4E:82
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:39:22:18:17:87:cd:cb:a7:01:93:a3:db:2a:92:d9:22:
41:96:49:95:0a:33:23:3f:97:9a:d8:7b:64:6d:bb:2f:90:bd:
76:ea:eb:8f:74:f8:fd:c7:7b:93:93:af:4e:01:4f:49:78:1f:
d7:4c:a0:0b:5d:5f:da:ca:b3:b6:35:d2:71:28:c9:8c:e7:7a:
ca:c8:da:3d:72:20:4d:f8:31:c0:75:72:5a:d6:c4:8c:6d:97:
9b:9f:50:2e:dd:19:0b:74:62:df:57:c8:96:bf:bf:43:1d:26:
e7:eb:fa:7a:32:0e:a5:78:bd:75:8b:7d:ff:1d:ba:c3:16:5a:
30:ac:e2:a0:ea:fe:07:69:48:b6:72:0f:0b:d3:5e:e9:95:ba:
6c:df:9a:8a:4d:70:39:03:80:28:25:79:5c:d8:5f:f5:9f:e0:
43:13:45:26:30:27:f6:1b:8a:96:b7:fd:27:94:b6:eb:d6:09:
cb:33:cf:15:80:8f:fa:9b:bd:89:80:8a:0a:d2:e5:ba:1b:31:
5e:5c:47:f5:cc:18:0c:ff:7e:19:53:18:96:2a:e5:e2:d0:96:
7f:9e:f2:c7:9e:f6:1c:c7:44:9d:4b:f3:a2:f0:68:43:7b:de:
7a:ba:57:86:dd:2d:3c:8b:3c:91:94:dd:9d:b1:95:d9:1b:22:
1a:99:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:26 2026 by rpki-client