Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: l7zboHg3hrnh8bI8gINm8Ow+2Y5JbXOi9nidr5ufqfA=
Subject key identifier: 96:79:A6:BB:FB:F3:96:6E:07:5E:AE:47:0A:AC:CD:3D:FB:FC:B9:B8
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019DA3AEDAD6CEEBC769466EE091E171DD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0DD3
Signing time: Sun 19 Apr 2026 03:00:38 +0000
Manifest this update: Sun 19 Apr 2026 03:00:38 +0000
Manifest next update: Mon 20 Apr 2026 03:00:38 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: o14Yt6u1t28C+nYiYaMzk7C5ISaIJ1A31xFKHD0tFqo=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:da:d6:ce:eb:c7:69:46:6e:e0:91:e1:71:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Apr 19 03:00:38 2026 GMT
Not After : Apr 20 03:00:38 2026 GMT
Subject: CN=9679a6bbfbf3966e075eae470aaccd3dfbfcb9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:b9:65:fc:d4:5c:a5:99:f4:eb:f0:05:cf:
25:ae:4e:ae:28:9f:95:c5:f0:f5:46:c6:22:40:66:
b0:5a:53:2c:93:04:f6:44:57:29:60:09:24:0a:38:
8d:b7:c4:e5:32:7b:a1:03:95:86:74:28:60:12:64:
6b:ca:28:df:85:80:42:a0:6d:f5:78:b6:18:70:c3:
84:74:49:c4:db:8b:d3:a7:fa:8a:83:a0:06:14:5f:
97:4f:3d:9b:15:96:ee:63:30:8a:82:4d:70:28:55:
b2:db:46:a3:ab:08:59:79:6e:83:8f:45:3f:4d:5d:
27:23:02:9b:db:bf:2f:47:a0:07:87:77:b8:91:62:
e2:3d:92:26:08:3c:4e:40:d1:50:c7:4c:37:e4:84:
70:b9:4f:46:9b:e4:0e:ca:08:e4:b0:31:1b:28:36:
e4:36:06:fd:cd:5b:09:d4:62:6d:80:67:c4:de:a7:
c1:43:02:84:97:c0:5e:72:f0:af:98:65:c4:4b:54:
dd:df:4b:84:a5:e6:b3:81:6e:54:fe:85:25:6a:24:
03:cf:40:26:37:b4:ee:24:5b:0d:6c:c3:74:09:d8:
a0:b2:97:69:01:d7:07:df:2e:12:fc:a7:57:f9:72:
bf:aa:71:03:c6:39:2c:10:61:44:6e:cd:b1:d2:03:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:A6:BB:FB:F3:96:6E:07:5E:AE:47:0A:AC:CD:3D:FB:FC:B9:B8
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cb:41:84:79:02:be:8b:52:c5:5a:aa:0c:a3:ee:70:03:60:
a2:68:eb:ed:fe:cd:f2:46:79:7e:a9:c4:18:d8:a4:e6:2b:93:
a2:6d:ac:d4:e5:79:6f:96:87:4f:70:0f:a2:1a:20:86:22:14:
09:ed:95:f5:16:ca:aa:cf:c7:09:c1:89:85:d8:6d:78:22:5e:
bb:21:e9:9d:34:29:3a:c0:f0:71:aa:cf:d1:1a:ff:03:c0:af:
e9:37:7a:40:1e:5c:f5:91:5f:dd:53:5e:7b:46:3b:a9:fa:af:
cb:96:dd:04:f7:16:b7:73:20:1c:6a:7b:41:f3:46:b6:75:39:
f5:c9:7c:ad:75:0c:5f:04:42:78:63:8c:34:ec:09:3c:98:b4:
c1:54:25:3a:76:40:13:67:60:80:9b:9a:c0:0d:0b:9f:f0:9e:
1f:b2:98:95:1d:f6:7e:05:3f:44:12:d5:5d:f5:fd:53:a3:f2:
1f:df:a5:af:24:4e:8f:c6:8b:1a:ba:74:36:14:09:24:ff:18:
ce:6c:a8:a5:da:39:56:07:74:d2:be:67:79:52:f9:6b:2c:1d:
49:bb:f6:24:c6:fd:3f:ea:b2:47:fb:e2:97:c2:d7:52:ed:03:
4f:54:1e:b4:87:90:2d:91:de:c3:53:b7:7b:05:f9:41:07:c1:
e3:60:16:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrtrWzuvHaUZu4JHhcd1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1
ZGQ1OTUwHhcNMjYwNDE5MDMwMDM4WhcNMjYwNDIwMDMwMDM4WjAzMTEwLwYDVQQD
Eyg5Njc5YTZiYmZiZjM5NjZlMDc1ZWFlNDcwYWFjY2QzZGZiZmNiOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyK5ZfzUXKWZ9OvwBc8lrk6uKJ+V
xfD1RsYiQGawWlMskwT2RFcpYAkkCjiNt8TlMnuhA5WGdChgEmRryijfhYBCoG31
eLYYcMOEdEnE24vTp/qKg6AGFF+XTz2bFZbuYzCKgk1wKFWy20ajqwhZeW6Dj0U/
TV0nIwKb278vR6AHh3e4kWLiPZImCDxOQNFQx0w35IRwuU9Gm+QOygjksDEbKDbk
Ngb9zVsJ1GJtgGfE3qfBQwKEl8BecvCvmGXES1Td30uEpeazgW5U/oUlaiQDz0Am
N7TuJFsNbMN0CdigspdpAdcH3y4S/KdX+XK/qnEDxjksEGFEbs2x0gOEXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ5prv785ZuB16uRwqszT37/Lm4MB8GA1UdIwQY
MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt
ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm
LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtstBhHkC
votSxVqqDKPucANgomjr7f7N8kZ5fqnEGNik5iuTom2s1OV5b5aHT3APohoghiIU
Ce2V9RbKqs/HCcGJhdhteCJeuyHpnTQpOsDwcarP0Rr/A8Cv6Td6QB5c9ZFf3VNe
e0Y7qfqvy5bdBPcWt3MgHGp7QfNGtnU59cl8rXUMXwRCeGOMNOwJPJi0wVQlOnZA
E2dggJuawA0Ln/CeH7KYlR32fgU/RBLVXfX9U6PyH9+lryROj8aLGrp0NhQJJP8Y
zmyopdo5Vgd00r5neVL5aywdSbv2JMb9P+qyR/vil8LXUu0DT1QetIeQLZHew1O3
ewX5QQfB42AW1w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:46 2026 by rpki-client