Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: 8SZhpNhOzkbLwA7q5ix4lqxpHJWcc8vKDw0UWjbSmsQ=
Subject key identifier: 65:44:CB:16:AE:15:89:83:86:52:92:1D:54:02:5A:37:AE:82:D5:B5
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019F921105D24976CDD584EF88CDE8D206A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0ED3
Signing time: Fri 24 Jul 2026 03:00:16 +0000
Manifest this update: Fri 24 Jul 2026 03:00:16 +0000
Manifest next update: Sat 25 Jul 2026 03:00:16 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: Ay33GRNfY2m879MyWnxrJTSewgryfMVQzmid4rCdlb8=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:05:d2:49:76:cd:d5:84:ef:88:cd:e8:d2:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jul 24 03:00:16 2026 GMT
Not After : Jul 25 03:00:16 2026 GMT
Subject: CN=6544cb16ae1589838652921d54025a37ae82d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:51:9e:cf:8d:b7:0f:ef:90:12:b1:18:9c:
f4:3d:16:b3:49:5d:06:70:ed:f0:9e:e4:9b:ab:b1:
b1:73:eb:40:3a:7e:83:d1:47:b5:ef:89:40:1a:f5:
5d:35:c3:88:21:11:80:c5:a8:33:da:a7:48:ab:af:
06:1d:87:9a:3c:57:fa:67:da:08:e1:da:df:33:fd:
73:72:e8:02:7a:f1:09:91:bc:f4:7e:b5:ce:37:66:
d7:cb:36:4e:a6:e7:d8:62:46:e1:27:8c:75:6b:89:
6e:fb:e4:2c:8e:e6:f6:f7:78:70:07:8b:98:6a:9c:
03:87:ee:2b:a3:dd:f3:3d:d9:64:30:a6:8f:9c:6a:
fb:3d:db:1f:8b:40:f5:8d:60:f9:f3:2a:3d:54:da:
4e:6d:d0:1a:a9:82:5c:6d:83:6b:99:67:bb:00:ef:
4d:d0:73:a4:73:87:52:b1:e5:63:c9:d8:36:b8:bc:
95:96:fa:a8:26:44:82:54:51:ac:56:78:b5:67:f6:
e4:b8:fd:d5:ce:51:93:59:4d:ba:da:28:2b:62:e6:
20:db:bc:52:e3:58:3c:a6:b8:d3:13:50:20:b4:80:
fd:92:e0:7b:3a:41:69:c7:76:75:2a:6c:a5:1d:20:
a8:fa:6b:93:d6:8c:4b:16:8e:86:89:03:9d:9a:26:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:CB:16:AE:15:89:83:86:52:92:1D:54:02:5A:37:AE:82:D5:B5
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1f:21:6d:db:83:f3:e5:25:11:aa:bc:53:8b:cc:b4:1c:9f:
07:1c:92:c1:aa:43:f8:bc:3b:d9:0f:bc:b4:86:5c:5a:3f:c4:
17:9b:d6:1a:5b:d3:a0:73:5a:9f:45:90:0a:bb:33:a3:b9:57:
24:f8:85:75:59:6a:95:70:ec:90:ae:ba:c6:20:54:b0:1f:dc:
9e:c8:93:fb:2a:dd:fe:a4:2e:26:26:3f:f7:95:e4:02:50:2e:
e0:92:07:36:f6:6a:06:04:6b:89:d8:ab:18:9e:4e:80:cb:97:
58:28:75:e1:21:dc:96:6e:4a:ed:e8:1e:6d:85:80:b8:32:02:
e3:50:65:90:c6:cb:eb:66:1b:80:bb:cb:79:67:34:f9:17:87:
6c:6e:ab:40:c8:47:d3:5f:b3:a4:75:3a:1c:78:fd:f8:8a:1d:
50:a3:a4:f2:9f:09:28:eb:65:60:b3:bc:b7:af:79:95:82:99:
ae:74:92:1f:8e:21:bf:ec:34:51:4f:a4:56:da:3a:0f:ba:93:
45:f4:4a:20:52:19:2e:b8:f7:f5:18:d3:04:35:67:00:13:e9:
cf:0a:b5:e0:eb:d5:19:b4:ff:9e:9b:22:cd:b9:33:b5:d3:b3:
34:f4:bc:b5:bb:aa:60:62:af:05:d3:84:ea:5f:db:5b:09:96:
34:90:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:52 2026 by rpki-client