Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: 0lqJs2abvoyKr6kyn6t6P7i24y/eDzb1dKVoqINcCmU=
Subject key identifier: 31:D6:7A:82:C4:D2:EB:72:8D:7E:7F:29:05:12:F9:BE:B9:1F:C0:3E
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019CAA8FED8B2541E9F767E558EE66540B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0D52
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: /jEis80vzpx350XWNUL+suI0+Y52U8zbrqL3m/wJ3yo=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ed:8b:25:41:e9:f7:67:e5:58:ee:66:54:0b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=31d67a82c4d2eb728d7e7f290512f9beb91fc03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:7d:96:14:e5:ad:2c:94:36:64:6c:59:fe:
57:d1:02:56:de:a9:26:76:c7:2a:43:ab:a0:c3:d2:
35:e2:9e:ff:7b:bc:aa:ae:2b:08:33:5f:be:f2:94:
0a:2a:5e:9b:9e:61:32:ef:f4:07:a9:51:50:0a:72:
fe:4a:ed:a6:26:fd:80:92:a9:8f:a2:2d:89:c5:d8:
4d:1b:98:23:f7:76:74:56:f7:0f:7b:64:92:20:81:
05:d4:2e:80:2d:04:e5:f7:35:c3:f4:d9:54:50:62:
47:dc:77:08:cb:31:2f:d9:84:a2:c3:02:15:7a:7a:
01:93:42:19:c2:05:f2:59:2e:04:a2:c4:81:d5:d9:
15:65:4d:8e:c4:7a:ec:e6:86:55:6f:cc:0c:43:17:
8d:d2:33:c8:b1:6a:c9:a4:23:7f:77:6b:fc:16:8a:
1f:cd:e3:83:98:5e:a9:5f:a3:19:35:b6:53:8e:3d:
f1:d1:a7:10:92:e0:77:21:f0:68:2a:90:50:9e:8d:
ca:7c:4f:50:f1:24:0e:db:65:2b:8c:b9:3d:37:b0:
42:3b:ca:f5:9e:2c:30:32:6f:11:f9:7e:2a:2f:08:
d5:4a:72:15:a2:2b:4b:0f:b0:e2:da:a1:bb:76:c0:
0f:5f:3d:64:66:25:30:b1:0e:09:4f:56:dd:3b:31:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:7A:82:C4:D2:EB:72:8D:7E:7F:29:05:12:F9:BE:B9:1F:C0:3E
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:01:3a:b5:74:48:a6:77:75:eb:d7:aa:94:12:36:6d:95:3c:
9f:14:24:48:12:26:20:bf:e7:d4:17:de:a0:2c:2e:ce:cd:21:
d1:e4:ff:d4:04:05:f6:3a:0b:5f:36:85:c3:2d:c0:e7:09:fa:
24:cf:a7:88:eb:dd:a9:c7:f6:6b:99:0f:5c:d4:71:38:fe:84:
a7:0f:70:eb:f9:b3:39:44:ff:d8:d2:93:3e:05:ee:7c:83:74:
66:b7:84:16:37:0b:f7:9a:91:9b:86:3c:07:f6:89:c5:e9:2b:
07:61:21:32:3a:e1:7b:70:2b:62:53:1e:07:c5:62:b0:62:7c:
39:ae:25:fd:a0:f3:f1:92:be:2f:4a:b3:51:b0:cd:18:5f:0e:
b9:44:94:82:bd:75:b3:1b:cd:63:86:84:66:37:9b:a1:71:61:
83:9a:f9:ad:e2:72:e9:76:73:d4:b7:72:4a:b4:af:8e:10:db:
d5:ad:89:67:b9:4d:77:58:44:fe:1b:90:60:26:92:e8:96:6c:
0c:97:d0:1b:3a:c1:f2:11:9e:82:f6:f1:91:0f:fe:b2:d0:c5:
fc:1f:64:65:46:98:0e:bf:d0:67:4d:70:5c:29:3e:7a:98:bf:
ba:96:25:9b:aa:2a:b5:d2:87:73:39:1d:a9:9e:85:6a:de:aa:
a5:db:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:16 2026 by rpki-client