Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: DV9oPskWH5qh1Y4hTWe8ci8s3QTMTjyvo37MK/iaMRQ=
Subject key identifier: 87:07:87:F4:DF:55:F0:CA:92:8E:6C:50:AC:D0:B0:5E:4A:A1:67:32
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019FA37297BF8CB264D78EA9247208F21C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0EDC
Signing time: Mon 27 Jul 2026 12:00:23 +0000
Manifest this update: Mon 27 Jul 2026 12:00:23 +0000
Manifest next update: Tue 28 Jul 2026 12:00:23 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: rbSSajUM3vt/xt9ql2TpbQuPMnKMBaSpKAcKchpjla4=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:97:bf:8c:b2:64:d7:8e:a9:24:72:08:f2:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jul 27 12:00:23 2026 GMT
Not After : Jul 28 12:00:23 2026 GMT
Subject: CN=870787f4df55f0ca928e6c50acd0b05e4aa16732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:89:8f:6f:fa:9d:36:ac:d4:ad:97:0c:f3:
32:a0:ec:2c:d3:a8:86:7e:08:15:09:e5:32:34:90:
33:3a:98:15:e7:a2:5e:f8:4a:1e:aa:21:b5:95:0b:
86:ae:e4:4d:51:30:6d:b8:5f:9b:cb:02:dc:7e:f1:
21:50:54:8d:ff:cc:fe:37:4d:a7:93:24:80:09:a2:
aa:56:a9:3d:d7:16:8a:ff:20:0d:a2:80:c5:14:ac:
48:df:73:43:da:c4:0a:47:c1:9f:5a:ac:8b:c5:4c:
40:68:d6:8e:f0:3e:2b:77:8c:24:98:a6:6b:05:b1:
ac:7a:e4:7e:e5:c3:04:b0:5b:87:a9:49:29:51:ab:
03:23:1d:1b:74:b3:7a:e5:d5:a8:84:a4:8c:2e:fd:
b1:bc:ec:58:61:e4:34:59:88:04:fa:e8:14:e7:66:
0c:ab:ac:ad:00:3e:31:88:97:c4:88:3a:48:72:b3:
b6:a1:8f:98:0c:6f:af:df:80:f8:2a:08:c7:94:28:
ff:f7:27:e3:0b:c3:71:1a:2b:18:40:30:38:b9:6f:
e3:4b:b8:8e:fa:55:2b:44:ea:fc:c1:e6:e6:75:9f:
08:7f:52:70:17:68:29:a2:15:35:ff:b8:15:b5:a4:
ce:aa:39:31:b0:9c:b7:50:a9:5c:4f:ee:1d:a5:86:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:87:F4:DF:55:F0:CA:92:8E:6C:50:AC:D0:B0:5E:4A:A1:67:32
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:81:e1:e8:f7:dd:1b:8f:9b:76:28:95:60:34:7b:a9:99:89:
ae:fc:6f:fb:96:85:da:2e:bb:5e:ba:5b:ab:e3:20:43:3c:ec:
08:c0:e0:f8:33:15:01:41:b5:4f:4d:73:05:a8:66:a8:ec:76:
ea:e9:69:29:68:3f:9c:4e:0a:e6:f8:66:16:7f:c7:4a:b1:d8:
8a:15:d4:75:55:05:a9:cf:b5:5f:0a:20:02:7a:0e:c6:e7:4c:
6c:e4:05:58:2e:0a:4e:12:6a:90:65:de:27:1b:d4:99:a3:5e:
cc:0d:8f:60:67:24:9b:63:61:e1:4f:66:b0:07:e8:92:58:ca:
0b:a1:1b:d7:4b:eb:0e:00:5e:88:4a:e2:51:7e:45:56:1a:24:
29:88:e6:e3:b6:88:80:3a:ef:35:bd:cc:d5:69:ac:2f:24:a2:
cc:c5:13:37:d1:6d:58:e5:a5:c8:b4:ae:9d:12:1c:99:6e:f3:
6f:90:b1:0a:b9:94:b8:8e:1a:f4:12:9f:b6:e8:ed:24:93:69:
17:c1:98:e2:a5:39:8f:70:39:04:cd:90:ee:1f:0b:82:a5:5b:
e7:0b:82:51:fd:44:41:d8:84:d7:6d:94:25:4f:8e:b1:47:31:
79:df:94:18:a0:ed:68:c2:ab:f9:9f:4c:d5:08:3d:ea:fb:7a:
01:99:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:44 2026 by rpki-client