Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: ltj61Kc0UlliJp8qUC6um+T8b2DNg9cEF25P/5t1+Ck=
Subject key identifier: 11:18:55:09:3C:12:F8:77:CE:A8:E6:4F:E3:E8:89:66:B2:E9:E2:44
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019CAB349DF8F60A4E5464F26D0E3C73C5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 13F1
Signing time: Sun 01 Mar 2026 21:01:18 +0000
Manifest this update: Sun 01 Mar 2026 21:01:18 +0000
Manifest next update: Mon 02 Mar 2026 21:01:18 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: agS9aYaaOl/rZbgKR867OtQOuzpL5xHqfmTdbj4xsZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9d:f8:f6:0a:4e:54:64:f2:6d:0e:3c:73:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Mar 1 21:01:18 2026 GMT
Not After : Mar 2 21:01:18 2026 GMT
Subject: CN=111855093c12f877cea8e64fe3e88966b2e9e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:04:25:e0:b4:f7:f8:8e:04:2e:18:8e:9a:
36:8d:83:6a:92:51:63:48:1e:b3:4e:d5:7f:19:52:
40:1a:a3:8d:17:7c:1e:2a:6b:f8:0a:b5:85:aa:d9:
f1:1d:54:b8:be:0c:ff:e1:14:c4:d9:d0:ef:46:51:
69:14:d0:1b:61:9f:9d:ac:63:ef:aa:54:ad:2a:60:
d4:18:44:e5:d3:1b:b9:3e:04:88:06:c7:d1:81:92:
2d:fe:c0:03:1c:3d:9f:6b:09:77:0d:7e:ef:11:59:
a5:f9:a2:40:33:97:65:ee:82:7c:2d:87:86:84:6f:
ff:09:cb:d8:6e:71:b2:2a:5d:38:81:54:ba:38:0a:
bf:30:40:30:8a:64:3f:ff:9e:f8:de:68:90:67:28:
59:de:3b:ab:1e:a3:96:3e:d6:99:98:d5:5b:b9:67:
8b:aa:84:bb:b6:3b:eb:7f:11:29:80:2b:8f:96:ee:
a3:d6:d9:6b:17:a3:d5:d6:72:0e:81:b3:67:63:1b:
f1:ef:4e:84:68:cc:46:d4:9b:89:b1:f8:f1:cc:68:
f0:0f:cc:f6:25:b7:f1:eb:36:e9:02:9b:a3:a1:ee:
d3:38:5d:18:c2:7c:03:9a:3a:f0:6f:5a:41:ed:94:
67:e4:1e:98:60:70:f0:67:a7:af:d2:c2:1e:b7:5a:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:55:09:3C:12:F8:77:CE:A8:E6:4F:E3:E8:89:66:B2:E9:E2:44
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0f:fd:54:4a:b3:66:b5:04:a5:c4:68:69:24:6f:39:86:2e:
aa:ec:1e:be:56:34:c3:42:cc:ed:e5:74:6a:48:6a:c9:96:d4:
66:6d:22:1f:99:ff:6c:69:22:3d:b8:30:dd:f3:5a:18:7b:f4:
49:ff:a8:19:fd:3a:0e:12:0b:7a:8d:02:da:5f:d5:91:84:15:
d2:f7:13:c7:f2:a1:ed:89:52:34:c4:19:bc:d4:68:3b:96:21:
d4:8b:19:78:3d:e0:e0:52:b1:8b:fb:8a:82:dc:b8:f3:76:23:
24:ca:bf:60:e3:34:6c:62:fb:23:80:c5:02:7f:b9:11:59:43:
a9:b9:bf:06:63:4b:45:0c:ae:04:ae:aa:9a:78:a6:45:33:ea:
27:8f:60:6f:d8:05:1d:6f:00:b2:84:98:8d:0d:a8:6e:46:ee:
2f:38:bc:93:bb:09:78:fd:54:41:2f:68:36:98:6a:18:78:9b:
56:e9:13:77:a7:3d:7b:ca:dc:34:c8:29:54:8c:e7:64:7e:dd:
9c:0a:47:da:5d:66:2e:10:f5:c2:7f:14:39:71:a4:85:7d:e3:
65:f6:2b:83:b6:c4:66:7c:1e:f6:60:5c:de:66:de:07:f6:85:
b0:3a:bf:da:e9:6c:2f:90:e5:33:3a:a2:bc:df:9b:52:47:e1:
b2:df:1e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJ349gpOVGTybQ48c8WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk
YTQ3ZDcwHhcNMjYwMzAxMjEwMTE4WhcNMjYwMzAyMjEwMTE4WjAzMTEwLwYDVQQD
EygxMTE4NTUwOTNjMTJmODc3Y2VhOGU2NGZlM2U4ODk2NmIyZTllMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEkEJeC09/iOBC4Yjpo2jYNqklFj
SB6zTtV/GVJAGqONF3weKmv4CrWFqtnxHVS4vgz/4RTE2dDvRlFpFNAbYZ+drGPv
qlStKmDUGETl0xu5PgSIBsfRgZIt/sADHD2fawl3DX7vEVml+aJAM5dl7oJ8LYeG
hG//CcvYbnGyKl04gVS6OAq/MEAwimQ//5743miQZyhZ3jurHqOWPtaZmNVbuWeL
qoS7tjvrfxEpgCuPlu6j1tlrF6PV1nIOgbNnYxvx706EaMxG1JuJsfjxzGjwD8z2
Jbfx6zbpApujoe7TOF0YwnwDmjrwb1pB7ZRn5B6YYHDwZ6ev0sIet1qGHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEYVQk8Evh3zqjmT+PoiWay6eJEMB8GA1UdIwQY
MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt
NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm
LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ/9VEqz
ZrUEpcRoaSRvOYYuquwevlY0w0LM7eV0akhqyZbUZm0iH5n/bGkiPbgw3fNaGHv0
Sf+oGf06DhILeo0C2l/VkYQV0vcTx/Kh7YlSNMQZvNRoO5Yh1IsZeD3g4FKxi/uK
gty483YjJMq/YOM0bGL7I4DFAn+5EVlDqbm/BmNLRQyuBK6qmnimRTPqJ49gb9gF
HW8AsoSYjQ2obkbuLzi8k7sJeP1UQS9oNphqGHibVukTd6c9e8rcNMgpVIznZH7d
nApH2l1mLhD1wn8UOXGkhX3jZfYrg7bEZnwe9mBc3mbeB/aFsDq/2ulsL5DlMzqi
vN+bUkfhst8e3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:32 2026 by rpki-client