Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: GkQdwTLNN9CoyGwx6uXy3w4O/4aKjwSouL1YJLIbk3s=
Subject key identifier: EE:C1:E8:D0:60:12:FC:32:C7:3E:72:CA:B5:1B:CC:87:76:6F:4D:F7
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01A0C70EBA9F47DFA0790E7DF0C3623774E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0F73
Signing time: Tue 22 Sep 2026 03:00:26 +0000
Manifest this update: Tue 22 Sep 2026 03:00:26 +0000
Manifest next update: Wed 23 Sep 2026 03:00:26 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: 8O/9aQUFqHHGkw2cze7lS19yroU8VDUZFZACJYToGhE=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:ba:9f:47:df:a0:79:0e:7d:f0:c3:62:37:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Sep 22 03:00:26 2026 GMT
Not After : Sep 23 03:00:26 2026 GMT
Subject: CN=eec1e8d06012fc32c73e72cab51bcc87766f4df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:ff:2c:75:60:0c:49:96:bf:41:c6:2e:6b:
f3:47:af:06:07:15:cf:89:06:e8:ea:b2:6a:55:07:
c9:c2:7d:8b:df:db:55:bf:13:49:10:d3:5b:e0:4f:
e3:50:2d:2b:12:6e:37:0a:cf:ca:ac:d7:a6:59:ac:
00:72:a1:a1:36:a7:07:66:6f:2f:e2:61:14:c1:ba:
e3:28:77:1d:8c:59:dc:c9:db:e6:06:23:eb:a5:0d:
87:9a:4f:11:85:63:ef:59:2c:6d:dd:37:9e:35:ec:
60:ef:46:c1:19:9e:30:c6:e8:63:17:15:5f:92:bd:
8e:07:69:92:4d:3e:0a:8a:40:06:d7:85:80:f8:8d:
2f:e3:d8:d3:4a:28:3a:7c:4f:2c:c3:f1:15:78:53:
0e:a6:29:19:cd:16:9f:a3:56:e4:01:c0:50:3e:1a:
fb:c4:b9:3c:eb:07:7d:0b:51:e9:94:58:dc:5b:96:
af:a4:9c:5a:8e:9a:f0:ff:04:d4:4e:21:78:af:76:
2d:58:d6:96:89:9e:d7:f8:0b:3d:92:00:45:67:7b:
34:17:8b:7d:b9:33:e7:5a:62:fe:48:22:19:d6:c2:
b7:42:f0:03:19:17:ea:8b:24:b0:29:83:b7:73:e2:
c0:df:4d:2c:2a:65:2a:2a:b4:cc:bf:d3:c3:97:3d:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:E8:D0:60:12:FC:32:C7:3E:72:CA:B5:1B:CC:87:76:6F:4D:F7
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:76:98:0e:17:15:64:b4:bb:dd:41:40:d2:c6:0b:ab:c9:
bd:b4:e8:1c:c5:f2:21:79:e9:4b:79:2d:d2:42:93:b6:d8:76:
7d:64:51:75:fd:87:ac:40:e9:74:8e:0e:bf:2d:36:32:22:da:
24:df:7d:2a:be:6c:d5:c7:96:43:da:4f:4c:1e:9f:2a:f2:7d:
86:a4:fa:0b:13:62:43:47:41:d5:d2:97:cb:27:25:61:0a:ba:
52:30:55:1d:e4:7e:cd:43:38:c3:1d:90:2c:b8:14:a6:13:e2:
e1:b8:2a:cc:5d:a1:e0:a9:6f:01:e0:e8:15:9c:7c:9c:62:6e:
8a:bc:92:8e:4f:e9:a9:19:4c:8b:53:16:a3:9a:5e:11:f4:b5:
9c:02:0d:0e:81:10:06:98:2e:4a:0d:57:df:da:fc:7e:ec:46:
4b:73:d0:60:70:7f:03:bf:d1:d7:e9:fe:27:49:3a:22:71:4a:
c6:35:0c:f2:8e:28:be:8b:79:96:03:83:2f:0c:2b:ae:48:77:
3d:94:99:c5:48:ca:bd:c7:e8:b5:0a:eb:b0:ef:f5:ec:4d:1f:
ca:3e:80:9c:74:ea:58:f5:2c:6b:96:3b:3c:1f:2e:23:80:24:
51:7e:0d:ed:73:c3:09:5e:6d:f4:c0:81:f5:9c:1f:6c:87:4d:
66:df:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:58:27 2026 by rpki-client