Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: gGwDokFKf4p/riSt1Wv0eQ1JMgpJIS6/4h7w2atopI4=
Subject key identifier: 0C:F3:7A:76:02:13:39:9A:93:68:07:25:29:60:21:71:5E:E5:97:00
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019D2A04BB56B9E61EB3CBF2B7AA70099019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0D94
Signing time: Thu 26 Mar 2026 12:00:46 +0000
Manifest this update: Thu 26 Mar 2026 12:00:46 +0000
Manifest next update: Fri 27 Mar 2026 12:00:46 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: JXNjMjKnyyKBBvnAMPCQIfVrNdEDDWIs3TzXAJunf7I=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:bb:56:b9:e6:1e:b3:cb:f2:b7:aa:70:09:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Mar 26 12:00:46 2026 GMT
Not After : Mar 27 12:00:46 2026 GMT
Subject: CN=0cf37a760213399a93680725296021715ee59700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:a4:4c:8c:c1:7e:80:65:ad:e8:e8:6e:4a:
e2:a8:6b:c9:54:55:68:30:72:bc:7b:53:bb:8a:3f:
98:c6:46:40:fd:d3:f6:64:ce:95:18:98:6d:55:74:
9d:be:4b:e3:18:74:4b:18:cb:b8:97:b0:7c:37:13:
25:53:3b:52:1d:13:c3:89:05:3e:18:17:5b:6c:57:
df:2d:43:ac:b5:b9:b8:1e:ae:59:a6:ef:e7:0d:d5:
dc:3e:36:62:fd:ef:76:5e:71:14:b0:64:41:8f:2f:
6f:0d:2a:7d:a8:a5:81:61:e4:20:fa:e7:42:08:60:
f4:32:e5:81:3e:3a:54:74:5a:32:5b:e0:4c:b4:2e:
67:a6:fb:6a:b5:22:45:9e:13:b4:b8:1a:94:fa:90:
e3:5d:4c:57:0f:5c:73:26:93:f3:23:ce:c5:3d:64:
bc:b3:1e:79:19:b8:02:6f:35:cf:91:86:22:c5:98:
60:de:6e:b8:3b:b2:3b:d6:11:59:b0:36:04:2c:7d:
9f:13:28:1c:fb:56:f8:09:89:39:c9:47:cd:bc:81:
63:b1:b7:04:ef:a9:39:5b:a4:24:6d:35:82:20:86:
3a:39:91:95:e9:47:8a:8c:67:49:4e:a8:e6:f1:a9:
8b:e3:54:7e:61:d1:23:6b:58:a3:6a:36:40:56:d6:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F3:7A:76:02:13:39:9A:93:68:07:25:29:60:21:71:5E:E5:97:00
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ed:96:ec:ed:e2:83:85:96:0b:e9:2c:b9:29:d6:ab:05:d5:
e0:bb:8a:ec:ae:8b:c6:2d:fb:cd:67:ea:54:a5:fc:93:35:ec:
a0:21:69:c5:0b:4c:19:96:04:30:92:cf:ab:b7:67:40:00:b3:
85:d8:52:55:46:43:87:f3:f0:1f:94:92:64:a3:cb:74:b8:f2:
99:05:7e:87:e3:37:10:9c:dc:76:ba:77:b7:3b:53:d5:43:ad:
89:e8:6d:6d:31:3e:17:fa:c2:02:fc:9f:9e:06:95:7b:05:90:
13:39:d1:d2:ee:7b:03:6e:a6:33:3c:a9:8e:90:a0:c5:67:63:
81:b4:28:4e:4c:0b:57:b7:93:2a:ae:0c:a9:2b:ae:b6:62:70:
f8:7e:f1:6c:ce:b2:be:5e:8d:a6:7b:5d:5f:f7:7c:f8:a6:57:
68:67:57:ab:f3:a8:3a:05:8a:95:9b:ed:70:91:bc:01:51:4f:
b1:00:98:8f:41:6c:e3:1b:83:1c:31:d7:a9:ba:5c:51:cb:3c:
0f:76:70:50:d4:b3:6d:88:b3:01:ee:43:56:ea:b2:ce:d5:e3:
4f:ca:ef:20:89:31:45:ed:de:89:8f:ee:a0:75:45:41:fa:27:
55:b6:23:06:8f:bb:7f:c1:a2:a0:2a:07:59:66:92:05:21:8c:
e2:bc:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:09 2026 by rpki-client