Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: /bwaEQjVTjA5O772+ioc9bCJqzfwi1/Oa6yQh0ROMZ0=
Subject key identifier: 29:0E:8E:79:5D:5F:EA:F4:29:A8:85:34:A7:98:F7:FA:54:0F:3E:00
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019D992BA3DB530CB1024EBB7A7BACE6A073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 070D
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: IiLIH8gzqrWsKYm5TK+ORY76x0F0iX7sczXa06ZTbJ8=)
2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a3:db:53:0c:b1:02:4e:bb:7a:7b:ac:e6:a0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=290e8e795d5feaf429a88534a798f7fa540f3e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:77:ff:5b:22:75:29:56:82:13:47:16:38:
35:8e:b0:b9:d0:51:ef:41:b0:c2:ab:9f:44:59:a2:
83:e9:a4:2f:25:a5:13:4b:97:b8:bd:33:c2:27:b4:
01:86:74:e9:2a:58:23:d4:b2:e7:48:3a:b0:89:2f:
78:aa:6b:c6:55:9f:41:88:90:48:37:dd:63:68:c6:
c9:c3:1f:4c:1f:ad:0a:4f:e9:d6:13:47:05:a3:f6:
75:7c:76:df:eb:99:ea:a8:ac:71:61:f4:cf:9d:25:
00:1a:1b:17:47:4b:ce:6f:fa:d3:59:b8:2f:58:7b:
29:f6:b4:60:b7:b1:08:48:c1:97:d8:7c:da:96:d0:
da:43:23:0c:85:94:9d:1c:21:c8:87:2e:8a:a5:31:
1a:87:3e:c5:94:a7:63:9d:c7:be:76:b7:7a:85:eb:
bf:54:ca:c4:aa:f0:5d:7c:be:7a:4a:ec:0e:5f:f4:
9f:e2:ac:a8:16:39:0f:ce:d9:32:55:aa:8e:90:d6:
bb:51:c9:68:3b:17:e9:49:3e:73:04:46:56:bb:9d:
e7:1c:e6:66:20:cb:a8:d2:b9:fc:13:72:ec:a6:61:
ae:32:1e:70:53:18:e1:91:f8:42:e6:74:35:59:ae:
e8:e3:fb:62:22:6d:40:70:f5:4f:12:10:4e:21:d7:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:8E:79:5D:5F:EA:F4:29:A8:85:34:A7:98:F7:FA:54:0F:3E:00
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:59:a0:42:ca:d8:50:9f:82:c7:97:6f:dc:42:f2:ae:78:05:
2d:26:bb:e8:72:fb:bf:8c:d0:5b:f8:1e:d5:92:78:18:12:9a:
ce:4f:d0:7e:7e:89:33:52:8e:36:f7:84:ff:37:bc:e8:84:d1:
49:b3:25:b0:6c:e0:50:5e:5c:51:9f:35:2c:ae:60:bc:bb:d4:
59:e1:c5:a1:01:77:8c:62:67:77:d8:af:53:3a:6f:05:ac:b6:
a2:d3:34:9b:6c:73:bb:61:b2:d6:0d:fc:8a:33:62:ed:c9:c1:
d2:5d:6a:78:8c:5e:3c:ca:ed:e8:19:ab:d4:af:56:a6:86:87:
93:af:d2:0b:f5:09:23:01:9e:46:e2:e0:0d:05:30:16:8f:97:
08:22:8d:2a:d5:f4:85:a7:5a:07:a2:1b:a8:94:b7:0d:fe:39:
77:41:26:71:45:d3:8f:90:af:df:9e:c1:96:ce:97:98:7f:d3:
1b:5f:6f:b0:7e:e5:e5:fe:0a:66:38:11:6d:95:8c:46:a7:3c:
f1:df:7b:d6:ab:ac:d9:92:41:91:c2:cb:b0:ec:3e:1b:bb:7e:
d5:48:f1:98:b5:09:39:12:41:e4:05:bb:c0:0f:0c:57:0e:3d:
2b:71:eb:11:91:30:06:c7:4e:85:09:de:d0:d0:48:44:64:d5:
9e:6c:8b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK6PbUwyxAk67enus5qBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxY2M0ZjJiMzYyMTQ5OGIyYjEyYmM5M2U1NmU2OTgwYzJj
NmRjODgwHhcNMjYwNDE3MDIwMTA3WhcNMjYwNDE4MDIwMTA3WjAzMTEwLwYDVQQD
EygyOTBlOGU3OTVkNWZlYWY0MjlhODg1MzRhNzk4ZjdmYTU0MGYzZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKB3/1sidSlWghNHFjg1jrC50FHv
QbDCq59EWaKD6aQvJaUTS5e4vTPCJ7QBhnTpKlgj1LLnSDqwiS94qmvGVZ9BiJBI
N91jaMbJwx9MH60KT+nWE0cFo/Z1fHbf65nqqKxxYfTPnSUAGhsXR0vOb/rTWbgv
WHsp9rRgt7EISMGX2HzaltDaQyMMhZSdHCHIhy6KpTEahz7FlKdjnce+drd6heu/
VMrEqvBdfL56SuwOX/Sf4qyoFjkPztkyVaqOkNa7UcloOxfpST5zBEZWu53nHOZm
IMuo0rn8E3LspmGuMh5wUxjhkfhC5nQ1Wa7o4/tiIm1AcPVPEhBOIdfifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkOjnldX+r0KaiFNKeY9/pUDz4AMB8GA1UdIwQY
MBaAFEHMTys2IUmLKxK8k+VuaYDCxtyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGIt
YTljNWVlZDg1YmE3LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGItYTljNWVlZDg1YmE3
LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVmgQsrY
UJ+Cx5dv3ELyrngFLSa76HL7v4zQW/ge1ZJ4GBKazk/Qfn6JM1KONveE/ze86ITR
SbMlsGzgUF5cUZ81LK5gvLvUWeHFoQF3jGJnd9ivUzpvBay2otM0m2xzu2Gy1g38
ijNi7cnB0l1qeIxePMrt6Bmr1K9WpoaHk6/SC/UJIwGeRuLgDQUwFo+XCCKNKtX0
hadaB6IbqJS3Df45d0EmcUXTj5Cv357Bls6XmH/TG19vsH7l5f4KZjgRbZWMRqc8
8d971qus2ZJBkcLLsOw+G7t+1UjxmLUJORJB5AW7wA8MVw49K3HrEZEwBsdOhQne
0NBIRGTVnmyLtw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:02 2026 by rpki-client