Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: HIauWe3y4oVWcoxb1OvY26J9rEQUzIlgixQGnPbBunw=
Subject key identifier: E8:64:79:5E:7A:C9:E6:3F:C3:C2:99:65:35:C6:B8:15:5A:84:7E:09
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01A0D6823DD5A7BAD800522FE7C00C1F367F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0F7B
Signing time: Fri 25 Sep 2026 03:00:54 +0000
Manifest this update: Fri 25 Sep 2026 03:00:54 +0000
Manifest next update: Sat 26 Sep 2026 03:00:54 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: PhH/3cPKFVDEDXvov0boQSqQkNi7cj0H3DQuhXqg6cg=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:3d:d5:a7:ba:d8:00:52:2f:e7:c0:0c:1f:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Sep 25 03:00:54 2026 GMT
Not After : Sep 26 03:00:54 2026 GMT
Subject: CN=e864795e7ac9e63fc3c2996535c6b8155a847e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:d0:52:9c:ff:9e:88:8f:e2:08:06:ea:30:
8f:c2:ec:09:30:8e:9a:0c:26:c9:42:82:04:65:fb:
cc:68:72:4a:6a:ff:2c:f2:70:78:7f:ac:78:e9:4e:
62:40:cc:df:34:7c:91:e9:f1:13:41:b0:f9:90:b2:
c3:69:40:b9:88:a5:cb:0d:38:6e:fa:1b:6b:32:35:
64:b7:27:c2:9c:e4:39:ed:4e:b0:7b:bc:9c:99:a8:
60:16:f3:94:a2:15:b1:fa:a6:13:15:70:05:47:96:
71:b7:45:07:67:79:e6:84:60:15:94:a3:c9:49:58:
50:33:16:58:b5:5f:f7:56:58:dc:3a:2f:5f:c2:b1:
00:a3:93:2c:a7:da:39:84:f2:fb:70:d1:cd:0b:e0:
85:b7:a7:22:23:43:1b:a7:02:66:a3:53:a0:49:47:
23:a5:d3:0e:4e:cc:b8:99:4d:da:a0:08:e1:74:ac:
16:11:45:5e:15:ed:7c:de:42:c6:fb:57:72:ee:f2:
d7:89:9c:64:2b:68:8c:4d:61:54:69:bc:95:1b:41:
3c:e6:b0:a0:3e:bf:62:c0:eb:8c:76:58:0f:1e:83:
77:08:8f:8a:3d:4c:7a:6e:f3:26:6d:a2:50:9f:d6:
39:dc:b7:40:68:6e:1f:3f:b7:96:3e:44:58:e6:96:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:79:5E:7A:C9:E6:3F:C3:C2:99:65:35:C6:B8:15:5A:84:7E:09
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:76:de:fb:1d:95:1c:99:42:ad:3e:d7:b8:0f:58:42:9f:20:
9b:7f:31:4d:ad:4b:5b:65:18:6f:73:be:41:a9:39:4c:36:85:
62:9f:62:e3:3b:7d:36:fa:6d:78:7d:0d:1a:94:14:ce:da:dd:
a8:92:5e:53:64:dd:40:ac:95:e0:d9:b6:c5:22:4a:9f:8d:45:
23:14:7f:90:2d:c9:59:2a:34:ab:20:2b:a1:ac:e9:60:9e:bc:
1b:76:97:53:e6:3f:21:5f:bb:39:6d:14:f6:41:06:99:cf:fe:
d0:8b:a1:00:d7:56:ce:71:64:cb:2f:35:dc:16:58:27:61:45:
9d:f5:d1:77:e4:23:2e:a1:90:4a:62:bf:c6:15:35:cb:7b:81:
a5:0e:1c:2d:f7:c0:bb:f6:47:61:c1:0a:7d:2b:cf:60:d1:a8:
5f:88:df:7e:53:74:61:cc:16:4e:30:7f:33:2b:05:48:c7:4b:
8c:46:ba:f7:2b:ee:eb:0b:65:23:af:53:28:72:d9:23:0d:09:
09:cd:be:a9:40:67:ec:11:fd:63:39:62:a0:5a:21:6e:0e:81:
fd:87:55:f7:f5:c9:57:7d:99:fe:b9:26:39:42:06:d3:2d:b5:
ee:e9:c5:6d:1b:54:8b:e8:db:1c:25:01:b0:74:b6:ad:27:00:
d9:37:94:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWgj3Vp7rYAFIv58AMHzZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1
ZGQ1OTUwHhcNMjYwOTI1MDMwMDU0WhcNMjYwOTI2MDMwMDU0WjAzMTEwLwYDVQQD
EyhlODY0Nzk1ZTdhYzllNjNmYzNjMjk5NjUzNWM2YjgxNTVhODQ3ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3rQUpz/noiP4ggG6jCPwuwJMI6a
DCbJQoIEZfvMaHJKav8s8nB4f6x46U5iQMzfNHyR6fETQbD5kLLDaUC5iKXLDThu
+htrMjVktyfCnOQ57U6we7ycmahgFvOUohWx+qYTFXAFR5Zxt0UHZ3nmhGAVlKPJ
SVhQMxZYtV/3VljcOi9fwrEAo5Msp9o5hPL7cNHNC+CFt6ciI0MbpwJmo1OgSUcj
pdMOTsy4mU3aoAjhdKwWEUVeFe183kLG+1dy7vLXiZxkK2iMTWFUabyVG0E85rCg
Pr9iwOuMdlgPHoN3CI+KPUx6bvMmbaJQn9Y53LdAaG4fP7eWPkRY5parxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhkeV56yeY/w8KZZTXGuBVahH4JMB8GA1UdIwQY
MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt
ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm
LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3be+x2V
HJlCrT7XuA9YQp8gm38xTa1LW2UYb3O+Qak5TDaFYp9i4zt9NvpteH0NGpQUztrd
qJJeU2TdQKyV4Nm2xSJKn41FIxR/kC3JWSo0qyAroazpYJ68G3aXU+Y/IV+7OW0U
9kEGmc/+0IuhANdWznFkyy813BZYJ2FFnfXRd+QjLqGQSmK/xhU1y3uBpQ4cLffA
u/ZHYcEKfSvPYNGoX4jfflN0YcwWTjB/MysFSMdLjEa69yvu6wtlI69TKHLZIw0J
Cc2+qUBn7BH9YzlioFohbg6B/YdV9/XJV32Z/rkmOUIG0y217unFbRtUi+jbHCUB
sHS2rScA2TeUVQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:59:15 2026 by rpki-client