Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
File: QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft (raw, json)
Hash identifier: JPnmOhvcd2x0CTxQ/hG/q/HHHs3BMRX35TlqjGrs6ic=
Subject key identifier: B1:31:A9:53:7B:78:1B:64:C8:B1:02:78:11:23:81:2E:7B:E6:79:7A
Authority key identifier: 40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
Certificate issuer: /CN=404284388e4d8b78e562e7b140dc358d4114c027
Certificate serial: 01A0E1745CE450A2A25B057E4C71201B6E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:34 +0000
Manifest this update: Sun 27 Sep 2026 06:01:34 +0000
Manifest next update: Mon 28 Sep 2026 06:01:34 +0000
Files and hashes: 1: QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl (hash: jGC3t7sLmmaa7a5c5GmFjvy8mZriXCrD4VVMKIkHiRk=)
2: b9pucImMRklKE9H42beKCpH3jZQ.roa (hash: XLI5TKkW0eaR8i+yOT6IlSkbxxb0vfR2ygO3TPOk8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:5c:e4:50:a2:a2:5b:05:7e:4c:71:20:1b:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404284388e4d8b78e562e7b140dc358d4114c027
Validity
Not Before: Sep 27 06:01:34 2026 GMT
Not After : Sep 28 06:01:34 2026 GMT
Subject: CN=b131a9537b781b64c8b102781123812e7be6797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:e9:48:5f:26:52:20:c7:68:01:49:85:dd:
74:38:90:2c:e0:a1:5e:91:60:d0:12:e1:ef:97:11:
b4:cf:3f:3c:1f:63:3e:aa:dc:69:bb:c0:c4:9d:34:
11:de:6c:2c:83:4f:26:31:0f:86:68:5a:c0:9a:34:
69:7c:cc:2b:06:9f:32:53:e8:88:65:8d:d8:8d:f5:
bf:f6:89:80:14:98:57:9a:58:a5:33:9c:e9:e2:aa:
84:49:82:97:de:2d:c8:a5:cf:17:bf:92:55:ed:2f:
5a:76:6f:dd:32:68:1c:99:e4:1b:f0:0c:f4:d1:54:
7a:8f:99:e4:a2:c2:78:f7:f8:e8:a2:14:90:44:b1:
10:c7:e0:be:62:eb:06:b6:52:e0:d4:7e:04:ab:f9:
63:ed:26:6a:fb:19:b6:98:5c:ae:bf:f7:93:5c:77:
5c:ab:79:37:be:98:fa:dc:07:df:0c:4b:e1:9b:81:
15:e7:98:38:72:1b:19:71:90:9f:03:a3:65:c4:f7:
21:0a:dc:a4:d8:d8:85:b3:57:78:63:2c:74:3c:b6:
1b:e4:28:04:5d:51:64:13:d7:1b:07:e2:72:c4:4a:
95:a5:c9:74:a5:df:8b:9b:d1:a2:80:f0:6c:c1:ae:
c8:19:49:20:84:54:34:2d:bd:17:63:61:8e:52:c9:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:A9:53:7B:78:1B:64:C8:B1:02:78:11:23:81:2E:7B:E6:79:7A
X509v3 Authority Key Identifier:
keyid:40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:55:d9:e2:de:84:1a:37:66:0f:b5:e1:c6:1e:73:3a:5a:af:
de:47:2f:76:9a:fe:02:94:e7:11:63:8a:c1:a4:ba:61:f3:27:
02:a1:07:ea:43:ae:e0:e9:e5:eb:cf:3f:1d:af:6f:58:6e:e4:
5b:bd:d1:2d:38:47:d9:a1:ec:8f:8e:72:43:aa:c3:3f:45:27:
a7:74:ad:0f:6d:cc:d6:c8:4a:a3:30:b8:9e:ad:cf:77:09:5b:
1d:5b:2f:c0:57:bc:54:9e:b6:65:31:4a:49:82:b3:4b:27:b8:
b3:8b:9f:1f:4d:fa:34:a4:96:e4:d6:26:9c:4b:ec:dd:c1:42:
dc:7e:48:c1:d4:0e:8b:df:89:5f:4f:02:75:9e:f7:f8:f4:88:
78:35:d0:a0:fa:b5:97:c9:e1:f6:08:77:ed:92:00:c9:46:ce:
88:a4:dd:60:2d:bb:d0:85:25:79:0b:c1:20:85:31:2a:50:98:
54:ac:b4:d7:e3:b8:ad:58:77:36:58:39:54:8b:ca:6f:22:ef:
7e:93:6a:94:d7:c1:7d:63:f0:f9:a0:ed:f9:45:c5:83:2d:66:
c3:b3:71:b6:18:dc:a5:fd:62:f2:32:3e:80:f9:a4:d7:8e:4c:
bc:d6:14:77:9e:38:bd:28:1e:7e:55:68:99:fb:d7:6d:b9:77:
36:d3:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:55:41 2026 by rpki-client