Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: dzj9K2ATG+Np1KBbkNFq5vV/iqFulp0dV3DWb3fPqhw=
Subject key identifier: 0B:E0:0D:C4:07:B2:AE:83:81:DB:6C:CA:9E:8E:35:1A:06:D8:61:D0
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 019CACB4F54D8EA7B23240A273160F2A2998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 054D
Signing time: Mon 02 Mar 2026 04:01:06 +0000
Manifest this update: Mon 02 Mar 2026 04:01:06 +0000
Manifest next update: Tue 03 Mar 2026 04:01:06 +0000
Files and hashes: 1: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: PzHZ33CV2fLzZ6RcNIIHh8tMuXyXD2iuo+bGAplGLtE=)
2: xQVJZ8XeKi_qZ897AqedzU_uyhs.roa (hash: XTuOm3CC6G0L/jW20RlJG4su70zRym46AnwfyGu3Vek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f5:4d:8e:a7:b2:32:40:a2:73:16:0f:2a:29:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Mar 2 04:01:06 2026 GMT
Not After : Mar 3 04:01:06 2026 GMT
Subject: CN=0be00dc407b2ae8381db6cca9e8e351a06d861d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:7e:26:d7:2c:3f:f2:a6:b9:fd:bd:4e:2c:
e1:d8:fc:45:66:b3:1e:99:db:f3:4c:a3:d4:4e:3d:
e5:33:b8:47:a3:84:fa:96:00:43:7f:5e:c3:a5:55:
d1:6f:de:09:69:4d:e1:d0:12:d0:4b:d1:ae:08:8e:
31:a2:8d:a3:22:42:16:07:6b:0b:ab:fa:c1:95:16:
51:1f:e2:5e:53:e4:77:1f:85:bb:ad:ba:7c:84:f3:
40:9d:cd:b5:32:5a:95:6a:de:49:90:b6:a1:aa:56:
a9:ec:db:e7:2a:76:7e:72:82:09:c3:72:8b:c9:6e:
94:1a:dd:28:1b:d7:53:ff:a3:08:ea:67:2f:5c:13:
6a:fd:77:80:50:22:a5:b3:be:2e:7f:7a:77:1d:d3:
f7:0d:9e:ef:59:20:6f:0a:19:55:38:a5:7b:76:48:
45:20:e7:b8:3e:31:f9:4d:52:cc:42:c3:71:5e:8e:
7f:6b:59:28:d6:3d:e7:dd:4b:12:3c:18:d9:64:fe:
5f:0f:d6:15:9f:ba:e2:a1:94:49:df:4d:95:a9:6a:
98:38:a4:56:48:02:a3:ef:57:ca:fa:71:bc:6f:19:
2c:78:7e:33:4e:69:1c:09:8e:b9:2f:46:5d:34:78:
6c:d2:1d:a5:0a:13:dd:d8:eb:0e:26:e6:cb:e5:6a:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:0D:C4:07:B2:AE:83:81:DB:6C:CA:9E:8E:35:1A:06:D8:61:D0
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9b:b6:12:93:3f:99:5f:10:54:84:4e:95:a0:dc:a3:b3:38:
de:03:f4:b1:ba:30:9f:74:a0:f8:cd:cf:0e:4d:2c:be:41:00:
9e:1f:1d:f8:d6:cb:6d:6e:a1:ee:82:fb:99:cb:56:68:4c:18:
1d:98:0a:f0:14:fa:90:47:30:ff:63:de:fa:8e:55:6c:c6:b9:
cb:35:cc:87:8c:05:8f:c9:83:ac:8e:be:09:75:30:be:80:8e:
9b:e3:ab:99:3c:b0:65:9a:f4:db:66:ee:57:ec:c0:37:9d:3c:
5c:7b:94:e1:39:5c:07:ce:ca:93:51:5b:04:56:4d:17:d9:7b:
0f:55:0c:45:15:f7:72:ba:cf:f6:b5:b9:a8:f0:f8:50:d9:2d:
e3:95:fa:ad:ce:dd:e7:43:4b:e0:bb:51:a4:18:64:1d:79:d6:
ee:13:f4:66:49:3e:ac:15:e0:b3:2e:a3:85:3e:4c:4b:59:50:
f1:9e:1a:db:25:64:61:cb:e8:66:1c:10:70:c6:66:39:a1:6b:
a4:97:e4:f5:cd:06:9f:e6:3b:1d:04:38:e2:56:f0:01:af:d1:
5c:6c:b1:3a:8d:67:0a:15:ee:76:7b:03:f2:c4:af:0b:78:b2:
2f:7c:f9:10:46:a9:f3:df:8e:bc:d7:b3:ce:aa:0e:f0:7e:61:
10:09:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:51 2026 by rpki-client