Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: esDvy7kChKPrxpWQAnHDfVmp7DmuXg7lNR+QSeJOPyo=
Subject key identifier: F3:4D:93:F8:0D:7D:8B:37:7E:AD:1F:F3:62:30:59:86:24:20:22:BB
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01A0D872D0B40BC8D74F46FB4D7D828F0158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0F7C
Signing time: Fri 25 Sep 2026 12:03:18 +0000
Manifest this update: Fri 25 Sep 2026 12:03:18 +0000
Manifest next update: Sat 26 Sep 2026 12:03:18 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: VLheg6rcdT1UWFg0PRpRM/WDCBFpB5Wm87z6lMOVa9E=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:d0:b4:0b:c8:d7:4f:46:fb:4d:7d:82:8f:01:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Sep 25 12:03:18 2026 GMT
Not After : Sep 26 12:03:18 2026 GMT
Subject: CN=f34d93f80d7d8b377ead1ff362305986242022bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:f5:9c:4e:48:97:e3:97:9b:45:e3:d8:02:
bb:42:3c:c8:dd:9a:70:10:f4:87:02:1b:04:69:e7:
e9:55:be:22:3c:79:bb:e9:4a:2a:fd:4e:77:39:07:
8a:52:1e:7a:c1:93:24:1c:72:8c:68:cd:b1:d4:13:
d3:08:5a:88:e9:8b:6f:98:f0:f1:71:cc:fe:05:7a:
1a:66:b6:b2:fe:c1:43:24:ec:37:d1:4c:c8:ac:26:
9f:c9:6a:58:58:da:dd:4d:48:3b:b4:0c:d9:5a:48:
4a:eb:3a:fd:dc:5e:0c:89:8d:95:69:60:b2:1b:b1:
0a:cf:b1:3d:51:d4:c3:2c:22:dd:2b:77:ef:c6:54:
84:59:c7:0a:76:8c:50:77:b5:a2:f9:63:52:ae:ef:
44:67:55:e9:62:17:96:65:4e:5b:e0:2b:50:c7:ea:
3f:f5:11:79:98:b6:f9:76:44:bd:6f:b3:eb:d6:0e:
b9:6c:de:c1:50:7c:77:b6:f7:5f:ca:cb:6c:c6:0b:
38:f5:e4:4d:41:d9:f5:37:38:03:94:52:10:89:36:
33:a2:d3:b4:23:7b:32:c8:4b:13:ea:d3:b6:37:64:
d4:7f:dd:35:75:6e:fb:8e:d5:fa:40:e5:f8:da:b0:
28:99:69:79:be:4e:66:47:a0:21:4e:2e:78:1c:4f:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4D:93:F8:0D:7D:8B:37:7E:AD:1F:F3:62:30:59:86:24:20:22:BB
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:aa:a8:8e:94:0b:e8:e7:54:ee:fd:69:13:e8:bd:07:d8:c0:
eb:c5:63:29:6e:11:95:01:7f:00:32:f2:fd:89:be:ab:a0:4d:
4e:88:a4:e2:2f:2e:ec:54:da:03:ee:57:7c:7e:d4:b2:58:11:
ee:ab:43:c8:d6:a7:17:6f:ff:c4:61:41:be:d0:c3:02:d7:f0:
ba:74:77:67:68:4f:0e:4b:09:a0:94:ff:13:29:a0:1a:93:a4:
c8:cd:9b:5c:7d:c5:86:4e:49:41:5f:38:1f:bf:70:bc:6a:43:
2e:89:c0:d5:f7:01:df:36:6d:4d:9e:a3:c2:58:80:4f:2e:e7:
26:c9:4a:ab:32:cb:c5:5c:4c:44:38:d7:e8:eb:b9:33:05:79:
3f:c1:d4:ff:a2:7f:74:20:65:4a:be:93:d5:85:e9:23:55:c0:
cc:08:5a:f7:25:c5:d6:78:1c:51:7d:01:05:99:62:b8:17:73:
65:a8:88:d9:60:ff:2b:60:68:04:bb:bc:96:76:4f:e4:1a:66:
01:2e:3f:25:43:85:f1:7b:bc:93:97:3b:32:b9:1d:16:c5:30:
9e:48:60:46:27:9e:cc:3a:50:77:da:ba:28:c8:26:83:86:b1:
95:19:02:31:f3:cf:25:ed:42:bd:ed:86:c6:ef:30:30:eb:4e:
9b:a5:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:41 2026 by rpki-client