Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: 2o2Rw3ue74LcamCed9tMn4+M8cV/teMg/13VPk339mk=
Subject key identifier: 29:FF:1C:F9:CE:59:55:5C:39:CE:92:A8:59:8A:DC:9E:4A:D6:DD:C1
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019CE85BE289723C1EC6785F83C21FF458EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0D72
Signing time: Fri 13 Mar 2026 18:01:01 +0000
Manifest this update: Fri 13 Mar 2026 18:01:01 +0000
Manifest next update: Sat 14 Mar 2026 18:01:01 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: FH4Z1qqhwDxpRhuN4h+16lhqvA6a7JSY9EkXKCQqud4=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5b:e2:89:72:3c:1e:c6:78:5f:83:c2:1f:f4:58:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Mar 13 18:01:01 2026 GMT
Not After : Mar 14 18:01:01 2026 GMT
Subject: CN=29ff1cf9ce59555c39ce92a8598adc9e4ad6ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:61:d7:42:51:4a:d1:0a:e3:21:ed:99:cc:
d4:62:c9:3a:14:e8:b9:84:64:5c:72:0f:58:96:18:
a3:94:6f:c1:3c:72:55:3d:5e:db:0d:5c:3d:95:d5:
4c:be:3b:b1:f2:78:0d:84:84:69:89:cb:be:b2:ed:
62:f4:23:b2:95:35:1c:80:7b:dd:9e:b5:ec:df:50:
40:65:dc:96:ed:37:a9:7a:16:62:14:88:ce:a1:28:
dc:4a:b5:e3:b9:bf:07:47:21:be:e4:6b:6f:17:d6:
08:9c:48:99:0f:27:c9:b7:50:c0:a1:3b:c9:ad:32:
87:e6:49:2e:83:49:d9:fb:31:59:3c:2a:f9:b7:d8:
b1:4c:fc:5b:d9:68:45:6c:31:c1:de:74:67:87:0c:
52:2f:df:22:aa:20:06:d7:06:2f:8d:19:71:d4:7c:
73:bb:86:25:59:98:b8:2e:70:d8:95:91:24:78:5d:
61:45:42:1d:52:33:87:da:de:60:55:da:21:fd:a5:
44:f0:de:22:b2:61:3c:e1:7d:0d:8c:1c:06:31:d9:
5d:be:b2:65:ab:26:fd:66:07:23:79:34:7c:a2:4c:
98:36:94:7d:bb:84:6a:57:66:74:ec:61:9e:c8:01:
91:c7:c0:42:f8:ec:20:d3:ba:c0:e6:34:71:89:b4:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:1C:F9:CE:59:55:5C:39:CE:92:A8:59:8A:DC:9E:4A:D6:DD:C1
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:b7:0f:96:fe:19:15:1a:71:c2:6f:8f:1a:3e:dc:4b:cd:
f6:8e:74:f8:2e:af:31:7c:63:96:40:44:44:b8:dd:7e:5e:a1:
39:64:79:5b:14:39:41:bc:d3:b8:e1:b3:2a:0e:60:e7:4c:fc:
5b:af:fc:04:c1:40:1c:64:1d:86:4f:78:2a:6a:eb:36:68:02:
58:09:73:b9:1c:33:2b:e9:2a:ca:2c:c1:46:12:ec:24:60:1e:
a8:5b:4d:42:21:3b:0d:fe:d1:ec:73:48:41:26:79:05:91:a8:
a3:f3:5c:9e:e9:98:41:93:64:f4:2c:cc:99:25:98:4e:e9:29:
23:f7:58:06:66:3f:02:14:49:e7:36:04:83:a7:67:40:cb:16:
a8:6e:55:c4:f6:36:ff:6c:85:a1:50:f1:c0:4f:25:ef:53:2a:
99:d8:69:c3:b2:b4:aa:cc:c0:aa:ed:75:57:8c:b3:97:8d:4f:
72:97:7d:32:be:ca:40:66:5c:f7:dd:63:2c:ef:fe:83:b5:79:
d3:da:ca:4f:93:ce:ff:34:8d:42:fd:9c:34:e4:97:9b:28:e6:
1f:aa:37:b8:95:09:4c:eb:ab:68:c1:31:f9:be:80:4f:c8:83:
b5:f0:f3:86:29:23:3c:67:3c:d4:db:97:c6:3a:81:3e:15:d3:
f4:87:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:05:14 2026 by rpki-client