Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
File: Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft (raw, json)
Hash identifier: eMUtF3CRJbxZB7bfwomTl8DSu9jGJU952nBSpyeI0GM=
Subject key identifier: AD:98:1C:75:6A:97:3B:7C:6F:8A:AE:C5:38:1B:B7:07:AA:5B:D7:E4
Authority key identifier: 41:EE:F1:FA:5C:42:86:2F:64:A5:35:D7:D5:9A:E6:07:48:25:5A:AC
Certificate issuer: /CN=41eef1fa5c42862f64a535d7d59ae60748255aac
Certificate serial: 01A0F2D6B013EB2B7612017BA801BAFDF0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
Manifest number: CA
Signing time: Wed 30 Sep 2026 15:02:31 +0000
Manifest this update: Wed 30 Sep 2026 15:02:31 +0000
Manifest next update: Thu 01 Oct 2026 15:02:31 +0000
Files and hashes: 1: Qe7x-lxChi9kpTXX1ZrmB0glWqw.crl (hash: rE8M9sPwV86/aofyDsQpcH2VwcBFFAJVHR4tJNjLcx0=)
2: tUqOm06OB6RZm3zaDjKE-rTKlwg.asa (hash: iS3zeFiFnvpnygQL7eeVN3ENJGO2j67775SlLotB2Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:b0:13:eb:2b:76:12:01:7b:a8:01:ba:fd:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41eef1fa5c42862f64a535d7d59ae60748255aac
Validity
Not Before: Sep 30 15:02:31 2026 GMT
Not After : Oct 1 15:02:31 2026 GMT
Subject: CN=ad981c756a973b7c6f8aaec5381bb707aa5bd7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:53:d7:4d:32:ae:3d:38:fd:9d:b0:6d:4e:
e2:b4:af:36:bb:ba:2d:cb:d5:c7:00:88:93:15:d9:
af:03:10:46:d4:2a:0d:8b:db:d2:17:6f:46:30:bc:
c9:78:fb:bb:3e:7f:ff:76:2a:18:82:84:92:fa:33:
7c:ce:b5:9a:7e:45:9d:2b:9e:78:56:de:e2:ad:a0:
79:3f:26:91:0c:2e:16:b2:e5:b4:2e:09:9b:6a:c9:
27:dc:df:f5:29:4e:7c:a2:60:40:03:de:78:fb:38:
4f:4c:35:0e:9b:45:13:1a:c1:c4:e0:29:6f:09:9c:
d7:f1:ed:a9:61:b4:15:2e:d6:e6:49:10:ac:2e:e9:
15:11:6d:a6:94:54:3a:bf:39:c2:1d:7b:3d:8b:f5:
8c:80:f9:29:0a:9d:68:9b:7a:12:fb:bb:93:d1:29:
b5:f5:44:f9:6a:0e:8f:6a:97:50:03:30:c1:c6:7a:
4e:3f:32:c9:b8:d1:04:9a:60:78:df:a8:3a:1c:cb:
7b:8e:e2:2f:46:89:df:a1:34:7b:81:9d:be:d4:9e:
1d:ab:b4:e0:6d:e6:0e:0c:7d:fe:48:05:1b:df:34:
ca:29:a4:2f:32:04:fc:c1:75:d9:cf:e7:97:eb:b1:
38:79:f5:a6:a7:5a:06:c7:6a:68:d7:e1:73:8d:31:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:98:1C:75:6A:97:3B:7C:6F:8A:AE:C5:38:1B:B7:07:AA:5B:D7:E4
X509v3 Authority Key Identifier:
keyid:41:EE:F1:FA:5C:42:86:2F:64:A5:35:D7:D5:9A:E6:07:48:25:5A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe7x-lxChi9kpTXX1ZrmB0glWqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/49c2c9-895c-4cc5-9e88-3fc7c8912b8a/1/Qe7x-lxChi9kpTXX1ZrmB0glWqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:e0:59:60:6b:96:35:b5:71:45:f2:9e:a7:f7:23:b8:8f:
91:f8:39:4d:27:6f:c0:52:e0:8c:6e:26:ae:fe:9a:8d:90:9d:
f8:1a:8a:2b:af:c5:7c:5e:70:79:f3:6c:90:12:a8:da:d1:54:
30:92:66:cc:6b:bf:50:d8:9d:9c:cd:b9:19:b1:2b:77:25:05:
1f:cf:40:9d:c8:d6:f8:66:c2:2f:78:90:5a:8d:99:99:3e:49:
a6:d6:17:c1:48:aa:44:9f:71:51:54:62:8b:8e:5a:a6:d0:f8:
d2:b6:c1:09:cb:b0:7b:83:8c:26:63:7e:53:c6:1d:d7:2d:a8:
63:d3:51:5e:85:d1:f7:76:26:84:0f:e7:6d:7c:fd:d1:de:63:
17:da:b8:7d:16:1c:b5:db:b8:60:2b:2d:43:8a:3d:66:a5:9d:
29:e3:b4:a3:5f:2a:14:01:e9:c3:27:34:91:70:9e:75:9f:bd:
f9:bd:4a:99:f5:84:8e:2d:72:f2:bf:be:a3:34:cc:58:c6:a9:
d1:fa:65:93:c4:39:b4:75:cf:fa:ff:8a:7b:91:07:19:ae:e7:
80:ee:50:46:74:12:b0:64:91:b9:a0:ed:c9:01:e0:cb:1b:d2:
97:78:b3:e3:c9:23:86:93:e1:0e:ff:c8:9a:6e:3a:ca:f6:59:
26:29:58:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDy1rAT6yt2EgF7qAG6/fDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZWVmMWZhNWM0Mjg2MmY2NGE1MzVkN2Q1OWFlNjA3NDgy
NTVhYWMwHhcNMjYwOTMwMTUwMjMxWhcNMjYxMDAxMTUwMjMxWjAzMTEwLwYDVQQD
EyhhZDk4MWM3NTZhOTczYjdjNmY4YWFlYzUzODFiYjcwN2FhNWJkN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H1T100yrj04/Z2wbU7itK82u7ot
y9XHAIiTFdmvAxBG1CoNi9vSF29GMLzJePu7Pn//dioYgoSS+jN8zrWafkWdK554
Vt7iraB5PyaRDC4WsuW0Lgmbaskn3N/1KU58omBAA954+zhPTDUOm0UTGsHE4Clv
CZzX8e2pYbQVLtbmSRCsLukVEW2mlFQ6vznCHXs9i/WMgPkpCp1om3oS+7uT0Sm1
9UT5ag6PapdQAzDBxnpOPzLJuNEEmmB436g6HMt7juIvRonfoTR7gZ2+1J4dq7Tg
beYODH3+SAUb3zTKKaQvMgT8wXXZz+eX67E4efWmp1oGx2po1+FzjTEihwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2YHHVqlzt8b4quxTgbtweqW9fkMB8GA1UdIwQY
MBaAFEHu8fpcQoYvZKU119Wa5gdIJVqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWU3eC1seENoaTlrcFRYWDFacm1CMGdsV3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80OWMyYzktODk1Yy00Y2M1LTllODgt
M2ZjN2M4OTEyYjhhLzEvUWU3eC1seENoaTlrcFRYWDFacm1CMGdsV3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80OWMyYzktODk1Yy00Y2M1LTllODgtM2ZjN2M4OTEyYjhh
LzEvUWU3eC1seENoaTlrcFRYWDFacm1CMGdsV3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqfgWWBr
ljW1cUXynqf3I7iPkfg5TSdvwFLgjG4mrv6ajZCd+BqKK6/FfF5wefNskBKo2tFU
MJJmzGu/UNidnM25GbErdyUFH89AncjW+GbCL3iQWo2ZmT5JptYXwUiqRJ9xUVRi
i45aptD40rbBCcuwe4OMJmN+U8Yd1y2oY9NRXoXR93YmhA/nbXz90d5jF9q4fRYc
tdu4YCstQ4o9ZqWdKeO0o18qFAHpwyc0kXCedZ+9+b1KmfWEji1y8r++ozTMWMap
0fplk8Q5tHXP+v+Ke5EHGa7ngO5QRnQSsGSRuaDtyQHgyxvSl3iz48kjhpPhDv/I
mm46yvZZJilYWA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:53:36 2026 by rpki-client