Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: lNKylS+cXdTXXIlDEfjd4/CUCsaVDIYbty0rhfA+Toc=
Subject key identifier: 16:AC:9A:BF:D9:AB:37:29:D4:72:6F:92:93:0F:0F:55:42:F5:BE:FC
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019EC0363C242EF0C1411AAE6DBB18975183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 1505
Signing time: Sat 13 Jun 2026 09:00:40 +0000
Manifest this update: Sat 13 Jun 2026 09:00:40 +0000
Manifest next update: Sun 14 Jun 2026 09:00:40 +0000
Files and hashes: 1: 2TuFVb4q4iH1BTsSUPjnSeD29pc.roa (hash: v7kaWU+42XGto4PM2/gidzpseNZZSa+WuikWviLH7ls=)
2: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (hash: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0=)
3: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: xC6sftf5o5xCMsnBvcZ5mXYvQ77AWfZI1X04n0k7eEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:3c:24:2e:f0:c1:41:1a:ae:6d:bb:18:97:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jun 13 09:00:40 2026 GMT
Not After : Jun 14 09:00:40 2026 GMT
Subject: CN=16ac9abfd9ab3729d4726f92930f0f5542f5befc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:47:db:46:74:b1:28:66:69:4d:4d:43:12:
21:92:ca:6c:23:a1:b0:48:82:54:28:a1:45:22:1e:
d2:5d:c7:47:34:a5:7d:3c:8a:e0:69:92:20:03:3d:
e3:98:00:24:e6:10:01:61:cf:aa:40:ce:22:1e:84:
cc:fd:4a:6f:70:9d:bf:6b:c9:dd:6d:e5:be:9a:aa:
a4:c3:5d:46:4e:76:50:a3:e4:f1:b8:1d:43:d1:b2:
d8:7b:e8:75:64:5a:09:39:1a:ce:21:37:b4:89:0e:
60:32:01:8d:29:c6:4d:de:7f:a5:46:fd:09:42:d8:
14:f2:67:12:4d:cb:5a:45:15:5d:0e:6e:3a:d6:df:
65:2e:92:1f:67:03:76:1b:ca:18:40:54:31:1f:fc:
5e:e5:0e:e9:5c:82:f5:2d:12:85:ad:a9:e3:a3:37:
ca:88:61:d3:fd:7f:96:64:47:78:8a:df:51:a3:5c:
b0:be:96:a5:03:0f:1a:fb:6d:47:19:cb:b3:15:78:
78:d6:75:68:c3:3d:25:23:3d:3b:a2:2d:5e:4d:cc:
66:e1:5d:78:58:30:dc:ef:07:6f:b6:f2:ca:aa:f8:
82:16:eb:82:3f:39:f5:e2:49:3c:81:1d:79:1b:61:
fc:fd:5f:c1:18:2c:2a:6c:69:d4:a8:e3:40:f8:3a:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:9A:BF:D9:AB:37:29:D4:72:6F:92:93:0F:0F:55:42:F5:BE:FC
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:71:17:53:2b:5e:37:6d:ea:4e:d3:7e:54:f7:bb:fc:9b:
71:7c:0f:c3:41:3e:a9:73:21:6e:3d:d6:03:6e:74:48:c6:d7:
a6:d2:33:c9:43:31:2f:8a:53:20:69:8a:ac:22:89:71:91:db:
70:9f:20:56:dd:24:71:5a:cc:60:8c:af:19:69:30:6a:7f:9e:
8e:d7:ad:9e:ed:38:e4:4a:8d:b9:81:8b:7c:b8:be:0a:49:60:
37:52:1a:9e:0f:4b:48:e2:8f:2c:7a:9c:f0:2a:85:50:85:72:
c9:b5:cd:57:6d:00:f0:a3:4d:2c:e0:ef:2b:d7:a3:24:4f:1c:
ff:44:52:40:c7:8a:41:62:aa:cb:39:45:ef:db:98:80:fa:1d:
fe:6c:6e:b7:1e:4e:10:e4:91:ca:26:d9:89:ca:72:35:4e:10:
7c:19:db:8d:45:58:88:88:cc:74:b7:69:d3:b1:f9:96:1b:48:
02:53:d2:45:6a:ba:de:56:b0:7c:69:88:18:32:63:e2:9e:8d:
0f:db:0a:c5:d3:e5:9c:ce:d1:f0:8b:b3:7d:4d:8f:85:3c:07:
eb:cc:8f:a5:92:5a:d9:48:15:77:ab:77:57:ed:61:4d:be:be:
c1:c2:41:45:16:ae:e3:d5:bb:07:c8:af:82:e2:23:ee:12:ea:
63:16:bb:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANjwkLvDBQRqubbsYl1GDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk
YTQ3ZDcwHhcNMjYwNjEzMDkwMDQwWhcNMjYwNjE0MDkwMDQwWjAzMTEwLwYDVQQD
EygxNmFjOWFiZmQ5YWIzNzI5ZDQ3MjZmOTI5MzBmMGY1NTQyZjViZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcJH20Z0sShmaU1NQxIhkspsI6Gw
SIJUKKFFIh7SXcdHNKV9PIrgaZIgAz3jmAAk5hABYc+qQM4iHoTM/UpvcJ2/a8nd
beW+mqqkw11GTnZQo+TxuB1D0bLYe+h1ZFoJORrOITe0iQ5gMgGNKcZN3n+lRv0J
QtgU8mcSTctaRRVdDm461t9lLpIfZwN2G8oYQFQxH/xe5Q7pXIL1LRKFranjozfK
iGHT/X+WZEd4it9Ro1ywvpalAw8a+21HGcuzFXh41nVowz0lIz07oi1eTcxm4V14
WDDc7wdvtvLKqviCFuuCPzn14kk8gR15G2H8/V/BGCwqbGnUqONA+DrfaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBasmr/Zqzcp1HJvkpMPD1VC9b78MB8GA1UdIwQY
MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt
NDEwMzIyYzcwMmZmLzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm
LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyFxF1Mr
Xjdt6k7TflT3u/ybcXwPw0E+qXMhbj3WA250SMbXptIzyUMxL4pTIGmKrCKJcZHb
cJ8gVt0kcVrMYIyvGWkwan+ejtetnu045EqNuYGLfLi+CklgN1Iang9LSOKPLHqc
8CqFUIVyybXNV20A8KNNLODvK9ejJE8c/0RSQMeKQWKqyzlF79uYgPod/mxutx5O
EOSRyibZicpyNU4QfBnbjUVYiIjMdLdp07H5lhtIAlPSRWq63lawfGmIGDJj4p6N
D9sKxdPlnM7R8IuzfU2PhTwH68yPpZJa2UgVd6t3V+1hTb6+wcJBRRau49W7B8iv
guIj7hLqYxa7Xg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:16 2026 by rpki-client