Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier: 6OrmxjuPFsXiNOX+CXJIGpFTrECUkMoBsCqMDLhJIkw=
Subject key identifier: 23:86:9C:90:66:C7:B1:1C:93:43:6C:9C:E9:80:13:8F:6F:52:35:B7
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 01A0D727908D77912A125DF6E761EDADCF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 06:01:29 +0000
Manifest this update: Fri 25 Sep 2026 06:01:29 +0000
Manifest next update: Sat 26 Sep 2026 06:01:29 +0000
Files and hashes: 1: 3ZiFvY-Cgcsn1T3DHXJhNHlrMbM.roa (hash: QMUQaheEQkA0MuEkm4MPIvv4qbnyv2b8MIRuQ/sS3qA=)
2: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
3: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
4: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: toIDZvxFVi2Xm1QcPHhm5t7/ccLe6nCwrxH1znwspVI=)
5: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (hash: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=)
6: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
7: qsZILvHhUD5atVe56CMbQMX9BQA.roa (hash: nOyOuxZrTHnD4A9JzbbAHdCO/Q5zojodi32HnVLBWNs=)
8: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
9: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:90:8d:77:91:2a:12:5d:f6:e7:61:ed:ad:cf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Sep 25 06:01:29 2026 GMT
Not After : Sep 26 06:01:29 2026 GMT
Subject: CN=23869c9066c7b11c93436c9ce980138f6f5235b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:26:46:9d:a4:9f:91:c6:cc:eb:d3:3a:25:
44:58:92:18:34:6f:d9:29:b5:d2:ec:e7:00:44:74:
af:06:70:88:0f:e2:ed:99:2c:c4:de:f0:f5:43:76:
9f:0a:f6:f2:13:b1:35:10:a0:ea:46:7e:d4:f8:7b:
ce:79:0e:a4:42:68:e4:d5:92:1b:f3:8f:31:8f:b7:
56:8f:59:47:a4:37:99:f5:2d:3e:97:7e:1f:bd:c3:
7d:6e:26:f1:20:f4:a3:ae:7a:a8:dd:4b:e9:52:9e:
f7:22:06:d4:44:02:93:55:1a:b5:62:83:7a:4c:4f:
c7:bc:65:66:1a:e6:07:45:46:93:cd:c8:69:b5:f1:
d7:61:e7:83:8d:a7:c0:40:2d:16:70:d2:b4:4c:96:
47:a9:41:8d:eb:1f:d5:d5:51:e2:28:13:2f:19:3e:
cb:d2:52:7d:2a:40:05:ee:19:52:bb:36:08:30:4e:
45:28:b9:b1:f8:f6:e3:1c:a1:c7:21:4e:38:3d:e7:
c5:a7:19:93:da:30:ac:7b:aa:3b:0d:10:45:23:3f:
a8:aa:0b:ae:0a:60:52:3a:d7:f7:85:93:bc:92:77:
5c:e5:61:64:5d:39:23:1a:42:04:12:07:27:67:1d:
c8:1e:2f:92:06:eb:15:52:b4:38:c5:91:a1:d1:cb:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:9C:90:66:C7:B1:1C:93:43:6C:9C:E9:80:13:8F:6F:52:35:B7
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:09:0f:d0:4b:2b:f5:ad:8a:9c:43:5e:dc:24:3e:19:bf:
c0:86:83:8a:24:dd:70:69:c4:db:2b:2d:a6:c9:f9:5f:79:01:
fa:e4:4c:db:44:d8:d3:d9:87:ea:e1:07:68:c5:98:37:e3:64:
e4:8b:a2:73:fd:b6:4d:d0:30:0e:e8:41:74:3c:00:3e:28:e9:
40:6c:46:cb:78:f9:45:db:05:cb:53:83:7d:95:12:14:90:f2:
e1:ff:8c:47:87:57:4c:c7:a8:0f:a6:35:df:e6:af:7d:e8:64:
68:37:af:ce:8b:29:62:29:de:17:60:b4:4b:77:62:5e:47:d3:
68:5e:5f:77:2e:3c:96:71:84:6f:a8:88:09:b8:d1:15:c9:45:
6b:97:a2:4f:48:2c:f8:c0:ea:10:6b:da:09:45:b2:bb:bb:35:
85:98:10:16:7e:d1:ca:fc:07:9d:68:47:42:e8:2d:0f:90:f1:
91:3e:68:26:81:df:f7:54:4d:8a:fe:07:b7:a4:c2:ff:cc:99:
9b:a4:7f:42:15:c3:30:e8:49:8d:3b:d7:43:e6:2c:64:0e:7c:
d4:ef:ab:eb:e4:4f:42:0b:29:1b:bd:ce:6f:b1:a9:65:64:c1:
ee:13:35:77:d0:fb:e2:99:e9:c3:c3:3b:08:b9:39:6d:a1:c7:
2a:f5:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:37:25 2026 by rpki-client