Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: 33AeKLK3BPx2Q5xfbdXfiaY4OXJpdVD4e3gTEnCVrfg=
Subject key identifier: 04:48:69:DC:3C:FE:CA:7D:A6:A1:B6:4B:A0:94:9C:02:04:70:04:D6
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019D98BD1E1BC327DC8F7BDE62C22F90AA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 146C
Signing time: Fri 17 Apr 2026 00:00:23 +0000
Manifest this update: Fri 17 Apr 2026 00:00:23 +0000
Manifest next update: Sat 18 Apr 2026 00:00:23 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: UZbjvCeWH2HpvGhQH6zu6y2+wJ5kpjnT40UumZ7BgGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:1e:1b:c3:27:dc:8f:7b:de:62:c2:2f:90:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Apr 17 00:00:23 2026 GMT
Not After : Apr 18 00:00:23 2026 GMT
Subject: CN=044869dc3cfeca7da6a1b64ba0949c02047004d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:9b:5c:8d:f4:67:1d:d5:90:d6:7a:fd:57:
3e:ba:22:2b:cb:cd:45:17:fd:5d:42:3d:54:bb:35:
2c:70:d2:60:2c:c9:9a:81:ef:91:d7:58:2f:67:ba:
89:6f:4f:0a:a6:74:36:b2:ff:af:04:70:89:39:d4:
79:cd:38:79:87:56:75:04:91:1c:84:d5:fc:89:f2:
e4:7c:86:54:31:df:d5:79:fd:31:5c:a4:37:f1:77:
ad:7b:88:6b:80:26:3a:60:c4:78:dd:7b:1c:4f:f8:
0e:d4:77:0d:fe:f8:0e:07:ff:bb:d5:dc:d6:46:e5:
2e:69:ea:6c:2d:f3:06:11:61:59:ac:d7:ee:c3:d0:
83:f4:50:9e:38:dd:8c:37:87:39:1b:6e:64:93:bf:
58:8b:37:47:1d:08:16:0c:4f:4c:3a:8a:d0:53:d5:
a5:8a:c1:0e:be:4c:62:d7:82:0d:e2:7b:8d:44:ed:
3d:60:c5:0f:c6:7a:2d:68:c9:00:26:4d:ce:f0:4f:
39:0e:4c:47:a7:19:ce:cc:ce:12:d2:29:13:2a:8b:
10:dc:42:2e:92:a7:12:52:cb:fb:b0:9d:29:e3:40:
e9:a7:1a:f7:50:80:82:c8:ad:42:3f:de:50:38:10:
63:0d:a5:3e:66:da:29:db:ec:81:6f:d6:36:7e:b7:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:69:DC:3C:FE:CA:7D:A6:A1:B6:4B:A0:94:9C:02:04:70:04:D6
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8d:95:8c:a5:c3:25:ec:65:23:13:27:b4:da:a4:58:ae:b2:
08:cf:96:80:53:aa:b7:71:48:49:ae:c4:28:f5:6e:eb:00:64:
d4:f8:2b:04:41:db:f1:74:ee:9d:3f:cd:16:87:8e:76:72:46:
8e:2b:6c:c2:81:86:83:fe:41:e4:d3:e5:dc:93:43:14:80:17:
41:e8:43:96:bd:56:6b:b0:73:34:24:09:ff:bc:14:62:ea:76:
c3:20:4d:f0:33:06:cd:25:ec:50:70:c2:ac:c8:e5:d9:b9:07:
0c:62:ac:ca:2f:c5:11:8a:80:a3:83:19:bc:e6:a2:2b:6c:e2:
43:cb:f3:09:f1:3f:36:c4:b5:c7:16:f5:79:de:83:e3:0e:b1:
87:5d:cc:7c:9c:57:d2:fd:9a:a3:8c:0a:85:32:c0:c1:71:56:
84:a3:f2:8e:99:71:cf:d4:11:38:80:75:02:77:8b:1d:58:8e:
7f:d9:4a:06:d7:19:95:ed:91:f9:46:1d:35:86:cf:9a:46:35:
76:b8:85:3f:1d:ba:b6:4a:2f:c6:67:67:fc:54:70:28:b6:8f:
a3:7e:28:70:9f:0e:e6:07:15:e9:be:39:c3:b8:11:34:07:b9:
f6:8c:f9:d2:3f:c6:35:a5:d4:14:b8:3b:76:a8:5c:1b:2a:49:
06:4a:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:29 2026 by rpki-client