Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: 8/7g5fVFmntA9FrdGEm7kCs6xM1JJJzqcpxzAYItPnk=
Subject key identifier: BC:E3:33:F1:BA:28:4C:3B:F3:48:61:8A:F1:F7:DF:1F:D5:73:FC:48
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019ED3F44CEEEDCC8A543DCF188C2255BB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 07B0
Signing time: Wed 17 Jun 2026 05:01:03 +0000
Manifest this update: Wed 17 Jun 2026 05:01:03 +0000
Manifest next update: Thu 18 Jun 2026 05:01:03 +0000
Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: cl7CLHEhhtbGeFNmAmzHWrQisDxMySjV/z5GEHXwVhQ=)
2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:4c:ee:ed:cc:8a:54:3d:cf:18:8c:22:55:bb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Jun 17 05:01:03 2026 GMT
Not After : Jun 18 05:01:03 2026 GMT
Subject: CN=bce333f1ba284c3bf348618af1f7df1fd573fc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:a0:08:e9:25:f0:a2:d5:3b:d5:df:36:11:
5a:50:58:5d:f5:22:80:43:c4:5c:8e:f0:21:2c:0d:
73:4c:b5:02:e4:04:c1:53:d6:2e:8e:fa:75:2f:2b:
74:6d:e2:2d:6c:da:eb:de:84:41:e7:02:87:0f:29:
ae:88:99:92:a4:26:01:f3:1b:5e:2e:5c:32:bc:27:
ee:5f:4b:2c:82:24:cc:72:1c:63:54:60:e3:b6:5b:
5f:5b:49:82:20:5a:86:bd:80:2d:14:b8:c3:6a:97:
61:0f:8d:2f:18:c1:8f:87:ce:1c:c5:70:16:38:37:
02:6d:a5:98:b7:bd:ca:f9:bb:e2:69:42:10:8f:a9:
9e:24:e9:5c:ae:81:71:df:fe:4b:73:fd:4a:60:c5:
93:44:c3:3a:5d:20:f0:d0:94:7d:cc:96:8a:35:54:
71:ea:e7:4e:7b:62:20:94:40:c4:a8:97:c9:e7:28:
a8:d5:2b:ad:69:ec:71:99:06:4a:e9:35:71:d6:cb:
9d:ba:29:bd:e1:2b:e7:dc:95:85:ab:5c:5c:dc:79:
9b:c0:7e:80:0b:3e:fa:d6:fc:03:b7:31:16:3c:d1:
6c:2f:87:69:9f:ce:5b:a0:66:87:66:21:9f:a6:3e:
7a:73:e0:4f:04:35:4d:1d:38:0f:16:cd:81:17:f7:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:33:F1:BA:28:4C:3B:F3:48:61:8A:F1:F7:DF:1F:D5:73:FC:48
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f6:03:64:6c:cd:a2:0e:08:2f:2f:cb:4a:99:95:de:c7:16:
d9:38:a6:fa:b1:35:dd:86:91:47:a9:95:06:60:e3:00:ed:47:
5e:31:3e:46:2b:3d:9f:bd:13:6b:49:f7:52:51:45:85:fa:7a:
de:f1:ea:6c:17:e1:c3:b5:af:23:f7:3d:7a:2b:b0:71:ec:43:
1d:f9:c8:4d:49:da:51:29:8a:2c:8e:45:43:0b:72:88:26:b7:
f9:19:70:e6:b8:2f:d6:53:47:e6:a0:b6:79:49:a7:94:0b:88:
9f:7c:66:5a:ab:f0:8e:22:57:d2:55:d9:d9:cb:31:93:8e:33:
db:70:31:e3:50:12:63:78:de:58:8d:6b:33:8d:c9:d9:17:27:
77:60:cd:c5:20:a7:c2:e4:cf:18:ac:a2:2b:bf:de:ff:5d:0a:
62:48:b3:59:0b:77:a2:23:65:5c:77:6b:90:31:d5:18:f3:08:
82:03:0e:17:6d:8e:07:e1:34:2e:69:73:be:d8:3d:f7:cd:69:
ce:f1:98:44:e9:0b:97:e7:ed:2a:9b:b7:a0:9b:82:33:c8:2b:
4e:ab:5a:c5:29:31:f9:64:0a:1c:e0:b0:ef:f6:98:04:7c:c8:
9a:62:18:0c:6a:6f:84:8a:d9:9d:5c:c2:ae:ab:dd:7c:b1:7a:
fb:49:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:35:43 2026 by rpki-client