
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier: l2pU6q/ROx/9yqj+qlmK9ts5IrZfKdopDQInXNl8yZw=
Subject key identifier: 73:82:BC:A3:03:50:62:CB:C1:FD:B7:13:5A:FF:25:2B:1D:C2:5D:C0
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 01A1DE70875C36232D7D130CD2F3A1920844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 09:01:18 +0000
Manifest this update: Sun 15 Nov 2026 09:01:18 +0000
Manifest next update: Mon 16 Nov 2026 09:01:18 +0000
Files and hashes: 1: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
2: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
3: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: 0YxvGaMZcQgW7eDfF/apI6ORyBSSLBCNuFs5SC8UQAk=)
4: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (hash: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=)
5: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
6: qsZILvHhUD5atVe56CMbQMX9BQA.roa (hash: nOyOuxZrTHnD4A9JzbbAHdCO/Q5zojodi32HnVLBWNs=)
7: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
8: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:87:5c:36:23:2d:7d:13:0c:d2:f3:a1:92:08:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Nov 15 09:01:18 2026 GMT
Not After : Nov 16 09:01:18 2026 GMT
Subject: CN=7382bca3035062cbc1fdb7135aff252b1dc25dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:9c:16:46:11:00:99:8b:0f:55:af:39:fd:
bb:dc:e7:fd:0d:15:45:c0:cb:24:9b:f4:55:b5:c9:
29:eb:8f:b4:62:ac:e0:1f:0b:b9:ca:62:72:dc:e5:
a5:10:bc:d2:a7:ca:1b:a0:d9:af:f5:2b:8d:26:d2:
e1:f7:08:9b:ca:92:bf:96:79:5b:e7:93:a2:4f:cf:
a6:21:16:aa:e0:33:d0:87:63:44:26:8f:ec:90:19:
9b:44:5e:10:c5:2b:4b:02:14:cd:17:1f:29:c3:6f:
f0:f1:5e:d9:89:74:61:fa:85:78:f4:46:39:7e:6e:
70:57:7d:19:5c:48:5e:4e:7b:75:d3:5e:4b:3d:34:
ca:51:6d:8e:15:0a:3e:de:e4:f7:eb:4e:0f:0e:25:
2f:3d:78:96:43:85:99:ab:64:de:4f:ad:58:f4:f6:
7b:ff:09:07:35:c2:1e:7c:46:0b:27:b4:7a:48:ad:
27:33:5c:e8:c0:76:e0:02:ba:09:6a:1f:13:d0:b7:
08:57:23:0c:bc:00:b6:81:b8:11:d6:34:e7:ba:97:
e8:be:b4:0f:72:78:26:95:e4:66:06:17:e6:18:00:
f3:9f:99:da:3c:63:44:10:69:e8:31:39:99:71:96:
40:91:9d:5a:50:8f:7e:6b:4d:6e:04:72:00:19:8f:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:BC:A3:03:50:62:CB:C1:FD:B7:13:5A:FF:25:2B:1D:C2:5D:C0
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:af:7d:81:39:25:7f:b5:63:ac:32:4b:b1:2a:a2:9d:74:0a:
f0:81:5b:43:db:b3:7d:3d:cf:a9:26:8e:cf:10:55:fe:3a:ce:
7b:9d:1b:20:70:c0:fb:f3:12:f8:71:e1:bb:02:dc:16:09:60:
e7:2f:4c:d3:b9:7d:33:c8:6b:67:c1:7f:52:3f:b3:fa:cc:6c:
f4:a4:18:8f:28:aa:7d:2f:59:a2:29:d6:0f:1e:cf:e3:e5:99:
a1:a1:5c:a7:a8:74:6a:59:ab:4b:66:d1:07:07:3a:ed:c0:9e:
73:0a:69:f0:d1:64:14:1a:33:0a:5d:b6:4b:e2:97:a2:b7:14:
bf:be:98:d2:87:27:b5:75:f9:ed:a4:5f:b3:a1:e7:9b:b3:dd:
03:b7:d9:79:ab:ef:64:73:70:d8:55:19:87:08:25:90:82:45:
2c:34:bd:4f:39:fb:9c:b7:87:39:49:44:82:e9:71:5c:60:73:
df:1c:1f:a1:91:63:28:e4:d5:9c:31:10:ff:0e:5e:c6:99:bf:
f8:b5:e2:de:b7:9c:ee:3e:85:cd:83:10:9e:93:be:49:7c:d3:
ed:76:a9:f5:c5:8b:a1:e6:5b:19:ab:64:da:9d:01:c9:bd:4c:
92:92:dd:e1:42:8a:94:ff:7a:cd:0e:14:01:7a:06:b5:9c:f6:
45:5c:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:47:52 2026 by rpki-client