
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier: wnTMGede+jf6wNI5eoa8J1oU9tbYzYssESm7ei83w9E=
Subject key identifier: 69:65:01:CA:4A:11:9A:FC:74:FD:A2:28:81:53:4F:05:AD:D3:C1:0A
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01A0D5020CF723E2E29867B8D744EC4DF70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number: 1A8B
Signing time: Thu 24 Sep 2026 20:01:16 +0000
Manifest this update: Thu 24 Sep 2026 20:01:16 +0000
Manifest next update: Fri 25 Sep 2026 20:01:16 +0000
Files and hashes: 1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=)
2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=)
3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=)
4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=)
5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=)
6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=)
7: CBtEHJaHzVeN2D-IZE6BCv7mSC8.roa (hash: heEBAu3l6Z4RAGafbljD+NgYk3gtGcKPKxmuj7zaY7U=)
8: COHOQ0pTO6y5ZuHuUcu-g0ljx0A.roa (hash: 3iSoeAAfCfOb+NUSBX9eLBTd4Tg1kwBpORrV/xahpQk=)
9: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=)
10: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=)
11: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=)
12: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=)
13: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=)
14: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=)
15: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=)
16: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=)
17: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: wsLLT5yd2m81hdXcH42CFc8m1DEPELQpdxabDL64QO4=)
18: ScQfnaUU4O8vx0n81hUaqb086B8.roa (hash: lNNE6MSkgxUG1XBBRE9DXmRaUozczaM9QmKJs3IX4os=)
19: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=)
20: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=)
21: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=)
22: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=)
23: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=)
24: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=)
25: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=)
26: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=)
27: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=)
28: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=)
29: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=)
30: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=)
31: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=)
32: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=)
33: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=)
34: xsPphQ3GxyftzicBBiCvf8PWiTg.roa (hash: Lp9WrPLRboL43ORcpzFlINw0fU+XSE3Mcv99YXgLnFI=)
35: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:0c:f7:23:e2:e2:98:67:b8:d7:44:ec:4d:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Sep 24 20:01:16 2026 GMT
Not After : Sep 25 20:01:16 2026 GMT
Subject: CN=696501ca4a119afc74fda22881534f05add3c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:c5:7f:ec:76:39:ba:0e:4a:b7:ac:05:44:
51:86:24:74:e9:66:02:c1:3a:48:12:bc:1b:14:c6:
fb:6b:27:24:7d:68:4d:f0:30:10:f3:63:1c:be:a4:
fb:8c:62:5a:0e:1c:b5:fc:e1:59:a1:62:18:ef:09:
bd:4b:40:ce:7a:c2:90:40:39:a1:88:31:e8:5b:e3:
df:42:d4:19:a1:9b:27:ec:0a:44:1f:9a:d3:3c:92:
e3:65:0b:e7:fd:26:f1:00:54:4b:20:bd:a8:14:19:
08:63:d8:cb:cb:5f:f0:89:31:ee:58:8d:99:2b:3e:
a7:53:f9:cf:48:2a:17:2a:37:64:78:49:be:97:00:
4b:1b:b7:76:db:f6:f4:2f:5d:aa:0b:ad:f0:53:38:
a4:df:3b:58:3d:86:0d:3f:97:e5:5f:26:75:70:de:
e5:8b:76:b3:15:3d:44:e2:c3:ce:75:3c:a0:13:ce:
9a:c4:0f:c2:eb:d5:dc:37:f6:97:f8:a4:2d:72:bf:
e4:b1:63:7e:3f:ae:00:c6:8d:a1:91:3d:7a:94:94:
5a:65:df:c5:3b:f0:53:d8:ef:36:c8:ec:71:45:3d:
1a:a8:45:b2:c3:e5:8b:95:fc:40:f9:d2:c4:b6:39:
e8:b8:a8:5f:66:9c:a8:7f:51:10:d2:49:63:8b:ef:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:01:CA:4A:11:9A:FC:74:FD:A2:28:81:53:4F:05:AD:D3:C1:0A
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dd:ae:aa:16:17:12:65:a5:97:4b:81:01:ca:34:10:37:55:
eb:42:7f:96:31:bb:ed:f0:a6:a7:88:54:f2:62:e9:84:14:e0:
25:88:79:b5:34:1d:ae:25:df:23:16:46:74:23:71:3d:83:b6:
7c:3b:f1:44:73:d8:1f:c6:c3:24:a6:5e:d2:7e:5a:42:72:dc:
7e:c0:32:0a:95:33:19:9d:af:b6:69:0f:3a:90:ab:e2:d9:bc:
38:49:7b:f0:6f:ec:aa:aa:2b:cb:bc:8b:1d:bc:d7:db:9f:1f:
d5:fc:e7:52:6f:c1:63:4c:2f:66:eb:6b:bd:20:5a:10:2f:4f:
02:c3:9b:bc:b2:d7:6d:c2:70:89:70:7e:f5:4c:46:7d:dc:fa:
e0:0f:b7:1d:3d:c9:15:d8:3c:06:15:3c:0c:13:90:8e:2e:e5:
e8:a9:c3:60:1b:bf:bf:4b:34:aa:53:0b:5f:70:aa:18:09:db:
ec:e1:58:fc:7f:37:96:12:16:42:ad:61:ec:6c:5a:15:35:e9:
d9:53:11:c5:fb:01:79:f1:4a:44:31:00:f6:ff:3d:56:56:0a:
bf:3f:79:d1:4c:80:8c:f7:a3:83:ab:38:6a:24:c6:a9:6c:a4:
6b:92:4b:a9:6f:55:ad:92:d0:57:58:0e:7d:ff:ad:f1:b4:fc:
48:02:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:05 2026 by rpki-client