Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: rSOyjZ3bC9pgmbKP4UPE1zUGiGSGHbXBk5wKYITZxL0=
Subject key identifier: 09:8E:8F:38:9E:A6:AB:E9:E8:E5:B0:9F:25:60:DC:CB:3E:7C:39:B5
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019D281692E54672FD8D8692304CC159E289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0D93
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: CxhqHp1AxrYnaAoKF8iP91dWDDDjt0ID9dF4pRskG9A=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:92:e5:46:72:fd:8d:86:92:30:4c:c1:59:e2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=098e8f389ea6abe9e8e5b09f2560dccb3e7c39b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:2c:df:56:70:bc:fc:ce:c7:25:2f:2a:ea:
c6:a8:d5:d8:55:ce:43:d7:78:a0:a0:35:0e:d9:49:
28:50:75:4a:4a:b1:a1:f3:75:01:d7:e4:f4:51:4c:
c1:47:7a:4e:ff:69:26:1e:47:2d:83:85:e2:7d:44:
fd:c4:33:93:89:a0:f7:5d:32:94:88:96:1e:44:de:
2b:49:e4:47:72:f1:e4:c3:3a:8d:9b:df:e9:0b:ac:
02:be:29:55:4e:8b:a7:6b:91:f8:9a:e0:02:04:ec:
56:7b:d5:e5:21:ff:4b:b3:5b:9c:b1:e9:ad:2e:e3:
93:f0:7f:a6:08:61:b8:3a:d4:fc:f1:9a:8f:6b:5a:
fb:1e:c6:b3:ae:f8:0e:bb:9a:0e:f2:27:e7:ef:56:
bd:85:02:ba:81:1d:38:63:7a:4b:98:df:39:c8:be:
7e:87:6e:5e:9f:df:93:13:7b:73:2b:f9:ec:10:fe:
89:35:37:94:7c:73:09:f9:3a:e6:73:53:4f:1a:bd:
78:93:f8:55:8a:87:bd:61:c6:56:70:4b:73:d6:0f:
dd:7d:c5:90:6c:fc:cf:5d:bf:7f:fb:bf:7a:57:1d:
da:ae:4a:bc:b9:3f:9f:1f:2d:be:b7:4d:e3:93:52:
8e:79:ee:3b:82:8a:45:66:30:b3:31:32:f3:1b:63:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8E:8F:38:9E:A6:AB:E9:E8:E5:B0:9F:25:60:DC:CB:3E:7C:39:B5
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:7e:23:4b:45:3c:d5:73:7e:c2:68:01:53:f8:d5:ee:22:
ae:53:1c:16:c0:b6:04:32:e0:7f:f6:bf:75:90:6c:3b:6c:e0:
c3:c6:08:ba:1a:25:3b:05:ca:8b:a5:c5:17:3e:40:7c:f1:80:
89:86:7f:ed:24:cc:54:09:ff:c6:84:01:4d:d4:d4:1a:10:e8:
75:0a:2f:b5:86:a8:1c:da:71:af:00:ce:79:b1:e2:be:81:96:
a5:b4:08:d0:6d:56:be:b1:49:0e:74:a4:25:3b:e0:c1:1c:38:
5f:f3:20:ca:95:2d:f4:1d:03:da:47:37:3c:f6:cd:8e:fa:a3:
92:8a:8f:5e:9e:74:c9:4f:85:a3:ee:51:c0:72:a2:eb:f4:c8:
a0:d2:3f:34:fe:b0:19:a1:b3:a1:67:d7:69:1a:1a:69:3f:ca:
c3:ac:44:f3:4d:9b:ee:86:63:24:85:c1:e4:1e:fc:d5:00:fc:
f6:3d:31:58:e1:c0:dd:96:c8:d9:74:fe:96:2c:8b:b6:13:0b:
84:c6:d5:7b:cd:45:4c:a1:39:62:fd:2d:24:f0:87:11:b2:e3:
b2:e6:e0:2c:32:54:cf:0f:07:4d:37:fe:f0:10:4a:25:c7:74:
18:98:49:4c:97:c3:65:c7:3b:1f:6c:0c:5a:bd:4e:4d:ee:01:
b9:0f:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:57 2026 by rpki-client