Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: ALfNuVM1mK15jyjzT1fHpvlCfx6gJsRmVrEbZLa1J48=
Subject key identifier: E5:5A:35:35:8C:83:4F:53:DB:42:7B:55:09:AA:F7:AB:4E:C7:27:98
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 019CAE6C26F1EF145AC0E35A5BE5EE354E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:00:49 +0000
Manifest this update: Mon 02 Mar 2026 12:00:49 +0000
Manifest next update: Tue 03 Mar 2026 12:00:49 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: BK1tbsvpvLIPsWhuuaX7RjCUDXv/ufGMYXcIDmYrpiE=)
2: R8G1L5YZFoXqf9gMiTpM3wiCF5E.roa (hash: iGaxDBxbx1MC3MNbPezJIeAw0C567dpwIT9cPctlVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:26:f1:ef:14:5a:c0:e3:5a:5b:e5:ee:35:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Mar 2 12:00:49 2026 GMT
Not After : Mar 3 12:00:49 2026 GMT
Subject: CN=e55a35358c834f53db427b5509aaf7ab4ec72798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:11:fa:9b:f6:77:c8:e4:e0:19:9f:18:20:
47:c4:db:e3:d0:fb:fc:4f:f3:4a:eb:d6:96:77:1d:
91:36:a9:17:13:bd:91:62:3d:b0:36:d1:6b:e5:82:
45:c3:ce:f5:56:28:ae:d1:95:cf:48:a5:73:81:8a:
c1:43:9d:c3:1f:4a:77:ca:95:10:ea:bd:1f:89:82:
43:7b:0e:ca:f7:f9:b5:ed:94:c6:c8:26:02:f3:fd:
98:7c:73:53:3e:be:63:89:df:86:9c:cd:93:0f:8c:
9f:a1:db:08:7a:cc:d1:b6:69:3e:5d:d4:42:0c:fb:
19:30:df:a3:ec:2d:a5:84:ff:1b:50:51:60:a1:36:
53:52:30:90:8d:e9:e7:87:14:37:6c:dc:38:69:67:
ee:6a:99:cf:65:f8:a1:d6:a0:85:bc:e9:9e:e7:ac:
dc:63:97:2f:07:80:ce:a4:c8:04:ca:47:29:64:17:
d4:41:27:cc:e5:ea:33:8c:65:fb:8a:c3:12:ae:73:
46:d2:10:df:12:d2:30:a7:78:40:38:6d:02:37:7f:
65:4a:2c:e4:32:ef:4f:fb:30:02:dd:aa:41:ff:29:
4e:d1:de:01:8a:58:c9:e8:77:0c:c8:71:45:d0:cd:
47:11:52:83:e8:31:6c:4d:68:74:54:0c:13:30:71:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:35:35:8C:83:4F:53:DB:42:7B:55:09:AA:F7:AB:4E:C7:27:98
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:96:d5:93:6d:9c:20:e6:7f:c9:18:dc:8a:b0:6c:f8:58:6a:
d3:0a:bc:2a:8a:40:da:08:25:f8:fc:2f:b9:27:6e:b1:74:a3:
5b:64:0a:c4:4e:5d:3e:50:d2:b7:b7:79:5e:6a:1e:75:4c:4c:
65:47:2b:e7:c6:22:30:59:4b:74:d0:03:a6:91:8a:4f:96:0b:
28:4a:cc:ac:9a:ef:15:08:9b:2e:16:4d:33:6b:b4:51:c4:53:
4b:ca:93:f0:c6:5b:f7:66:d3:8c:94:08:22:9c:36:02:5f:3c:
5f:ab:0a:4a:38:74:e0:95:b6:f9:d3:12:b6:e1:7f:48:80:da:
8f:81:c6:b7:77:8b:4b:3f:d7:6f:94:bb:19:5a:ba:c8:8f:95:
a1:0e:70:69:15:7b:0c:d0:3f:09:c3:d7:aa:e5:65:a1:40:15:
a3:3c:af:ed:f8:75:df:e6:93:ca:61:ce:8e:fa:3f:15:f6:e3:
27:c7:96:08:11:0a:df:41:f4:95:d5:85:91:04:68:dc:0f:9b:
98:7e:55:43:d8:bb:a4:d1:b0:68:5b:27:5d:3c:56:ad:8a:7b:
09:22:dd:c7:09:46:bf:19:b3:0b:dc:2a:09:7a:bf:dd:ce:4d:
4a:f9:a6:6f:6f:a5:ac:88:d5:c0:a7:84:2e:9f:89:3c:84:14:
a2:a3:7c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:08 2026 by rpki-client