Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier: 5nEfh8l8hX4CmAsd507PHPgvpwYWcN586GzCSTTNXyQ=
Subject key identifier: 49:85:4C:1C:C7:36:0D:28:BA:69:E1:37:5C:50:E4:C7:35:3A:84:98
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 01A16E6E9CD5D515484DD7BD9D70A4FB8371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number: 1AC2
Signing time: Sat 24 Oct 2026 15:01:45 +0000
Manifest this update: Sat 24 Oct 2026 15:01:45 +0000
Manifest next update: Sun 25 Oct 2026 15:01:45 +0000
Files and hashes: 1: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
2: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
3: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: L0K+CzcKP4TbYW0IVMKPncl4iX/MppjjjdvuhO3jkpA=)
4: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (hash: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=)
5: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
6: qsZILvHhUD5atVe56CMbQMX9BQA.roa (hash: nOyOuxZrTHnD4A9JzbbAHdCO/Q5zojodi32HnVLBWNs=)
7: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
8: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6e:9c:d5:d5:15:48:4d:d7:bd:9d:70:a4:fb:83:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Oct 24 15:01:45 2026 GMT
Not After : Oct 25 15:01:45 2026 GMT
Subject: CN=49854c1cc7360d28ba69e1375c50e4c7353a8498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:6c:c9:54:e3:a8:43:e3:f6:5d:f2:df:9a:
ab:e3:2e:90:00:86:4b:cf:cc:ed:23:d8:c5:bf:51:
8b:f7:db:93:6f:01:60:0f:ff:dd:c7:da:e3:0e:1b:
5b:de:7c:fd:22:67:54:40:bd:6c:66:72:2c:23:12:
2f:ee:e9:1b:f0:bc:b8:c2:65:73:f5:da:55:c3:8e:
11:49:75:34:bd:54:23:98:74:f4:d0:23:53:8a:25:
59:3c:8b:31:c7:1a:88:c3:52:ff:38:27:a0:52:25:
5d:1a:e5:7e:d5:4f:b3:f1:dc:ec:b1:58:fc:8a:5f:
77:10:f6:3f:23:e1:1e:ec:e0:55:63:c8:22:11:83:
7c:75:f5:b8:00:34:74:c5:89:40:6d:73:b0:c2:32:
8e:c3:e6:4e:20:f4:01:06:d1:0a:2b:b8:9c:c4:8c:
55:83:f2:10:7d:21:2f:fb:73:6b:9a:63:cd:c6:b0:
49:f1:ec:2c:9f:08:d2:80:8e:83:cc:45:30:d6:f2:
8a:f8:ef:d3:9c:b2:a0:ac:c0:bd:8f:76:82:a4:41:
c4:6e:97:66:93:8d:70:7a:e6:29:6a:d2:11:13:2e:
7e:bc:10:48:77:94:eb:e6:81:b9:67:57:0a:5c:a0:
77:ee:f4:2d:5a:d9:84:43:a6:b4:ff:34:18:1f:83:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:4C:1C:C7:36:0D:28:BA:69:E1:37:5C:50:E4:C7:35:3A:84:98
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a3:8f:61:e7:bd:a3:8a:ca:50:25:36:ac:5a:c4:e5:8b:ff:
d5:a1:2c:85:bc:25:3f:7e:94:ba:bd:ac:7b:aa:c1:74:32:df:
ec:cc:7c:e0:85:a8:cf:47:6c:02:57:95:da:7b:c3:73:fe:2c:
bd:5d:4f:1c:a8:83:f2:a4:49:df:ff:26:12:af:d9:18:48:ec:
e2:31:22:fe:a2:04:5c:46:10:7b:fc:f1:e4:f7:96:36:08:45:
01:e7:e0:de:ba:16:87:b8:9b:cc:61:53:5a:55:a5:92:c6:f2:
05:a9:d9:fd:02:50:e7:4e:74:a6:1b:e3:af:8c:73:25:71:b9:
ad:bf:0b:eb:1c:8f:79:03:05:1f:52:a3:4f:5a:98:87:75:d4:
ea:82:b7:19:42:52:54:70:ae:09:07:a7:ec:a0:e5:cf:ad:db:
af:7a:ea:f0:40:4b:e8:64:01:ed:86:da:9d:36:71:83:9e:53:
d9:67:2e:75:a6:c2:c7:98:48:e2:7d:02:0b:66:d2:9a:a5:95:
57:27:99:fb:e5:4a:75:8c:53:76:3c:ea:35:cb:a3:ef:b4:c3:
b5:6c:46:ce:c6:36:d8:60:65:47:5e:0f:0b:42:20:1f:70:4a:
71:11:f7:65:55:7e:fb:d3:e6:57:cb:6b:03:ec:91:40:df:27:
1a:56:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:39 2026 by rpki-client