Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: 0c+5bd+H05/YIMZz6iKrdPcwFTBnmID2U+F/IpoVLNE=
Subject key identifier: 0E:4E:BE:84:A5:24:CC:17:FE:C1:D3:E6:5C:EF:5F:54:1C:73:F0:19
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01A0C88F9A3497A3093B0A734C1A2726A818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 1613
Signing time: Tue 22 Sep 2026 10:00:49 +0000
Manifest this update: Tue 22 Sep 2026 10:00:49 +0000
Manifest next update: Wed 23 Sep 2026 10:00:49 +0000
Files and hashes: 1: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: THrpKaB2+H+JK1MqsdDJaMYUmaUJrMcmb0tPWREWoKU=)
3: jaS_aopjW2l13vfiNLU-zDkULZ8.roa (hash: ME5jooaurn2IHi9kVMEVsmrNESUrxsBsGovYqe75bQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:9a:34:97:a3:09:3b:0a:73:4c:1a:27:26:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Sep 22 10:00:49 2026 GMT
Not After : Sep 23 10:00:49 2026 GMT
Subject: CN=0e4ebe84a524cc17fec1d3e65cef5f541c73f019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:19:18:6c:82:c6:7c:ea:0d:a8:e2:8c:c3:
c0:37:e1:79:d9:9c:ed:23:ad:16:49:db:dd:8d:a8:
9b:2a:0a:0e:03:2d:da:b4:62:c0:ca:74:f7:08:1c:
71:dc:86:d4:e3:6a:9c:37:45:eb:2a:d5:bc:dc:a2:
96:c1:23:fa:9b:96:e0:75:04:42:af:99:a9:97:2c:
57:04:ae:67:3c:d6:6f:2b:23:89:8d:24:e5:31:c2:
5c:9c:42:6a:f2:26:21:25:7f:10:ee:9e:3f:4e:a3:
55:57:9d:80:70:f9:be:78:e8:2d:8d:ed:2c:a5:ac:
31:f1:c3:ba:26:ac:79:bd:15:3c:73:61:d7:07:39:
85:2e:9a:6c:2a:a1:39:90:cc:9b:28:24:a0:f9:e1:
ed:1b:bf:f7:4d:c9:81:3f:e3:ab:a0:a2:d3:a5:37:
09:f4:f6:fd:86:eb:ac:cc:ac:96:6c:b7:1f:1f:92:
88:0f:dd:ce:a7:62:ce:1e:af:fd:e5:d7:23:59:ed:
98:87:2d:0c:34:9c:f2:8d:47:d4:42:4f:52:58:48:
b3:ed:27:7a:64:aa:27:3e:b5:8b:d9:fc:e0:ad:34:
fb:d4:4a:de:e5:89:a6:20:d1:96:83:88:3c:ec:99:
01:a8:be:b7:3f:88:c7:e5:da:f7:3b:f6:ae:66:dd:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4E:BE:84:A5:24:CC:17:FE:C1:D3:E6:5C:EF:5F:54:1C:73:F0:19
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:7f:45:4e:df:a1:b8:42:2a:a4:25:25:ef:b6:fe:1f:fe:
22:13:3a:94:65:ca:12:2a:b9:58:2a:4d:da:a9:29:be:ce:cd:
d1:4e:48:58:af:1e:a3:82:53:82:12:71:17:47:99:90:af:8e:
7f:89:a1:c2:7b:b5:7f:6b:04:fb:15:fd:e2:20:f3:5e:a2:17:
37:b4:7c:dd:a2:8b:a3:bc:54:2e:08:ed:d3:24:50:55:d9:6f:
17:b0:1c:ac:68:b9:bf:69:7e:2b:54:22:a5:f8:e6:27:d2:29:
dd:78:8d:8e:0d:e4:bb:3e:fd:af:f9:af:1b:54:2e:aa:89:e1:
62:30:84:a9:dc:25:36:af:15:3c:f6:da:78:8d:91:af:c7:7c:
fd:1e:d6:1f:df:06:7e:3e:30:93:dc:4d:1f:5f:7d:de:d9:24:
a5:07:7e:e8:8c:3a:6a:66:a0:36:9e:f4:5b:ea:ad:90:26:0c:
43:44:04:58:0c:08:bc:4a:d9:5f:65:20:1f:2d:93:8b:ac:13:
09:29:43:d3:02:19:11:e9:d3:af:29:52:e0:b6:46:d4:b0:6d:
9c:dd:b5:7b:7d:de:8d:ec:da:21:2b:9f:09:fd:e5:b1:dc:bb:
5b:e3:15:e6:ff:13:d3:79:46:19:41:68:59:88:10:e5:ba:b9:
4f:c8:f9:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIj5o0l6MJOwpzTBonJqgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk
YTQ3ZDcwHhcNMjYwOTIyMTAwMDQ5WhcNMjYwOTIzMTAwMDQ5WjAzMTEwLwYDVQQD
EygwZTRlYmU4NGE1MjRjYzE3ZmVjMWQzZTY1Y2VmNWY1NDFjNzNmMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIYZGGyCxnzqDajijMPAN+F52Zzt
I60WSdvdjaibKgoOAy3atGLAynT3CBxx3IbU42qcN0XrKtW83KKWwSP6m5bgdQRC
r5mplyxXBK5nPNZvKyOJjSTlMcJcnEJq8iYhJX8Q7p4/TqNVV52AcPm+eOgtje0s
pawx8cO6Jqx5vRU8c2HXBzmFLppsKqE5kMybKCSg+eHtG7/3TcmBP+OroKLTpTcJ
9Pb9huuszKyWbLcfH5KID93Op2LOHq/95dcjWe2Yhy0MNJzyjUfUQk9SWEiz7Sd6
ZKonPrWL2fzgrTT71Ere5YmmINGWg4g87JkBqL63P4jH5dr3O/auZt0aVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5OvoSlJMwX/sHT5lzvX1Qcc/AZMB8GA1UdIwQY
MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt
NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm
LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbF/RU7f
obhCKqQlJe+2/h/+IhM6lGXKEiq5WCpN2qkpvs7N0U5IWK8eo4JTghJxF0eZkK+O
f4mhwnu1f2sE+xX94iDzXqIXN7R83aKLo7xULgjt0yRQVdlvF7AcrGi5v2l+K1Qi
pfjmJ9Ip3XiNjg3kuz79r/mvG1QuqonhYjCEqdwlNq8VPPbaeI2Rr8d8/R7WH98G
fj4wk9xNH1993tkkpQd+6Iw6amagNp70W+qtkCYMQ0QEWAwIvErZX2UgHy2Ti6wT
CSlD0wIZEenTrylS4LZG1LBtnN21e33ejezaISufCf3lsdy7W+MV5v8T03lGGUFo
WYgQ5bq5T8j5yA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:17:57 2026 by rpki-client