Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: wsr40xutWfscXo8wnsSVw4pDk+VAQDIaYHWVHx3o3s8=
Subject key identifier: C5:4C:4B:34:C3:B9:E8:A2:D7:13:E7:A4:9D:54:25:73:1B:6C:93:DB
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 01A182624358256173978FA2844838CE1E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0FD4
Signing time: Wed 28 Oct 2026 12:00:39 +0000
Manifest this update: Wed 28 Oct 2026 12:00:39 +0000
Manifest next update: Thu 29 Oct 2026 12:00:39 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: BAHfRWYLvr5DEzgdkdGrrZ7mDHDsBGuqdxmKYAQ4ygA=)
2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=)
3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:43:58:25:61:73:97:8f:a2:84:48:38:ce:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Oct 28 12:00:39 2026 GMT
Not After : Oct 29 12:00:39 2026 GMT
Subject: CN=c54c4b34c3b9e8a2d713e7a49d5425731b6c93db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:64:b3:89:ca:5b:31:98:a8:fd:01:45:1a:
89:94:10:68:de:7e:64:6f:c4:b6:9e:cd:2c:ec:6c:
4d:1d:04:74:ed:e8:41:57:7f:c8:40:81:29:0b:a1:
b6:b6:9a:1d:b4:3f:bc:ff:72:56:7b:37:b9:fa:4a:
ef:38:21:4f:3d:e7:1e:7c:58:32:1b:71:2d:33:91:
a1:1f:87:9d:e9:3d:22:0f:4f:7a:ff:de:7b:e5:be:
c6:19:62:0c:26:5f:37:15:17:c3:2b:39:17:0c:62:
d4:79:95:bb:cb:5b:2b:eb:cd:91:09:01:a9:0a:72:
f5:a0:23:82:19:8a:b5:b4:2a:53:fa:ad:40:ae:5f:
4f:bd:37:4c:84:91:9e:8b:f1:b9:c5:37:6a:06:ff:
42:d0:e7:d6:c7:ea:ba:81:45:08:c9:60:19:0c:e1:
9b:c8:57:8f:03:e1:c1:a2:62:0c:e6:94:a7:a4:98:
df:2f:4c:3f:16:91:cb:a5:8e:38:af:4c:b6:9a:53:
87:b3:ee:bb:09:0f:a1:9f:90:a8:b4:85:54:ff:76:
47:28:a9:c4:5f:ad:a6:2a:ce:cb:c1:18:69:24:a6:
ee:e5:04:99:b6:10:c6:2a:d0:16:9e:38:5f:90:69:
ba:2a:53:58:8e:fb:8b:28:f1:c6:23:a5:39:1e:06:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4C:4B:34:C3:B9:E8:A2:D7:13:E7:A4:9D:54:25:73:1B:6C:93:DB
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:60:eb:c7:b2:82:c1:bd:81:18:48:61:ef:32:a9:32:c7:2e:
fd:87:a8:3c:e7:fe:7e:ef:c4:90:ff:83:4f:d8:00:66:56:45:
0e:0a:c0:1e:5f:68:30:76:b6:5d:be:36:87:62:43:30:f8:49:
46:28:f3:20:39:eb:e1:fc:50:cc:4d:0b:5a:8a:cb:dd:4c:21:
4d:3d:26:d7:bf:52:31:9b:7f:38:26:b6:89:74:75:5a:96:69:
22:e3:70:1b:6e:2d:62:04:24:a1:56:91:3a:f7:76:de:f0:42:
4e:8e:1e:a0:c1:88:54:4b:cb:4f:9c:2f:e9:a3:18:75:2e:1d:
de:83:fe:73:71:82:fb:7d:66:1a:1a:bc:e9:82:ec:79:7d:e6:
0a:f3:74:e2:5b:8f:58:0d:cb:f2:8f:09:c2:ec:eb:8a:ff:36:
cf:95:b4:ef:aa:c8:f5:64:7e:28:e0:ef:90:3b:43:20:85:b4:
ef:94:ed:d0:49:b5:c5:ce:3b:33:39:44:38:a2:7c:2a:0a:73:
91:48:55:83:ce:ac:9c:23:44:d9:0b:97:35:80:64:ee:e3:d7:
54:47:15:5a:92:5e:d4:68:f9:94:d0:8d:ff:5b:a1:32:2e:87:
bd:2d:5f:00:7c:9b:ba:77:a8:92:27:97:d8:01:e1:a0:7a:bd:
9a:86:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:08:55 2026 by rpki-client