Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: StvmTmaxwhj9uEXMTiL4ZnTAsiHQsZomGxwQbKFpmLA=
Subject key identifier: 8B:78:10:36:74:78:07:30:5A:D3:FC:7D:8E:E1:90:4E:CE:95:47:2E
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019CA9B395FC4BCE4EB51AE3D022D8238A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 0691
Signing time: Sun 01 Mar 2026 14:00:44 +0000
Manifest this update: Sun 01 Mar 2026 14:00:44 +0000
Manifest next update: Mon 02 Mar 2026 14:00:44 +0000
Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: HGSJreSXE3Ay1yj/vxMbGiqJMAvD3QJ75gfbLf6j2NI=)
2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:95:fc:4b:ce:4e:b5:1a:e3:d0:22:d8:23:8a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Mar 1 14:00:44 2026 GMT
Not After : Mar 2 14:00:44 2026 GMT
Subject: CN=8b781036747807305ad3fc7d8ee1904ece95472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:a3:47:7d:4f:7f:7a:85:76:bc:76:bd:b4:
71:df:76:33:fb:b9:3e:8e:d6:12:13:62:c7:c0:27:
ed:55:75:77:3a:dc:dc:c9:09:f3:9e:26:56:f9:95:
ef:79:2d:d5:71:d2:d7:61:00:ee:4b:37:fb:08:89:
86:d7:a5:97:a9:0c:61:72:2d:b8:06:c8:9e:a4:65:
da:da:9a:be:aa:7e:6b:e0:ad:63:54:24:22:d6:82:
b6:a3:6e:4e:94:d5:c9:14:71:54:be:97:0c:22:f3:
d4:ee:ee:d4:4b:21:b8:e9:87:7e:e1:27:da:94:56:
53:4d:0d:f4:26:33:27:85:94:8b:22:f7:c6:93:2f:
b1:87:07:4b:9d:48:3d:0d:56:3f:02:fb:b5:83:13:
8d:0f:0f:07:07:bf:d9:9f:33:64:82:9e:99:30:8e:
5e:33:0d:0b:68:60:cc:8b:16:fe:81:67:8b:e4:72:
7d:90:cb:7d:c1:eb:de:57:b3:ca:1a:0e:4b:0d:56:
0b:e5:32:58:3d:68:ae:c3:40:01:08:b9:c6:7e:82:
68:d2:c0:52:d4:4d:01:d8:62:c1:f2:7e:d4:29:e7:
1a:c5:fc:dd:25:4b:92:fd:79:8e:6b:e4:f6:04:c8:
20:d3:35:60:03:27:1d:1e:2d:e8:9f:8f:c2:f1:e6:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:10:36:74:78:07:30:5A:D3:FC:7D:8E:E1:90:4E:CE:95:47:2E
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cf:ac:1f:54:12:07:46:1a:8b:5b:32:e5:e6:c0:61:ae:38:
7c:4a:fe:3e:8b:45:ca:e7:d0:74:08:3b:32:a8:ba:0e:2c:4d:
32:7a:f5:65:04:e7:65:26:07:94:8d:c2:cd:a3:7c:a5:e2:ab:
90:c4:59:4b:59:d2:c2:dc:d6:4c:f8:69:4c:a3:62:75:9a:fa:
f3:04:33:73:68:d9:71:9b:af:43:c9:46:c3:9d:95:7b:e7:9d:
b4:ea:2e:aa:e6:57:f7:27:f0:1a:f6:6f:41:39:fa:c5:cc:39:
de:f8:aa:80:0b:8c:34:d5:bf:af:29:94:21:79:dd:a4:23:9a:
15:78:0d:7c:74:46:68:a4:c5:18:9d:30:62:fc:67:75:80:4d:
aa:fe:96:c0:3e:96:b1:8d:1b:10:97:51:4d:31:75:77:87:7f:
2a:a2:f7:3a:38:30:55:e4:01:f6:3f:0c:da:86:a2:d4:5f:1d:
81:3a:57:d1:fe:1f:22:7f:e4:45:cc:3d:a9:39:29:31:67:97:
8d:6b:ce:8f:bf:92:5a:f4:7a:a5:34:1c:91:19:3a:ba:af:8a:
15:15:39:77:36:fe:1a:49:2a:b5:8d:80:52:a7:9c:81:e6:64:
5d:13:4b:0f:0d:e8:10:91:84:e2:44:d6:5f:c9:96:9f:ef:fc:
f7:4a:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:37 2026 by rpki-client