Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: kzJgl+BsDIqcbLZd/jKklE56k2e4Nk4HigOJ0J3NgKI=
Subject key identifier: D7:29:1F:99:04:57:E5:06:2E:D4:6A:A5:63:EE:79:74:1F:78:11:B3
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019F09D0FD37B040BF612F764C02C2F6BD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 05DD
Signing time: Sat 27 Jun 2026 16:01:58 +0000
Manifest this update: Sat 27 Jun 2026 16:01:58 +0000
Manifest next update: Sun 28 Jun 2026 16:01:58 +0000
Files and hashes: 1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: L2rThhNOeffVlYUzRrq7RIqarsD1Isk/tcrsHq4xymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:d0:fd:37:b0:40:bf:61:2f:76:4c:02:c2:f6:bd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Jun 27 16:01:58 2026 GMT
Not After : Jun 28 16:01:58 2026 GMT
Subject: CN=d7291f990457e5062ed46aa563ee79741f7811b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:51:e1:92:e8:80:d0:b1:9b:b6:b2:73:1b:
a1:82:41:d1:33:4b:9d:7b:09:9a:75:14:6c:2d:9d:
fe:09:4d:b6:51:73:36:65:cb:80:4c:a0:26:ad:7e:
11:4c:0f:43:65:c9:68:41:2d:1b:15:6a:9d:db:90:
4e:da:20:3f:4d:a9:d0:0c:6c:46:2d:f9:24:b8:88:
43:a9:f0:05:95:30:b9:dc:03:3e:09:2d:ff:3a:dc:
51:be:39:48:1f:03:6a:14:9f:12:f5:0f:94:ea:0a:
69:62:fb:67:3f:10:24:f0:a8:a4:42:11:17:e8:6f:
11:97:33:c3:ad:ca:e8:61:44:45:7b:ca:8d:ea:a2:
31:02:47:ad:8a:88:96:23:fc:6f:6a:6e:97:ce:13:
74:bd:52:45:1f:c4:96:e9:76:1d:1d:ab:c7:4d:b8:
15:e0:d2:a8:e8:ee:62:f4:3e:78:00:f1:fc:de:35:
5f:3f:32:f5:f8:59:18:ea:46:32:af:43:e0:84:01:
5f:e7:d2:13:ab:21:be:15:b8:03:fb:f9:58:a0:e5:
27:26:d1:75:6d:39:3c:3f:78:29:bc:35:59:82:dd:
75:79:16:f7:08:3d:ad:80:a1:16:1a:8c:2c:b4:f7:
2f:82:58:66:7f:97:81:87:32:b5:cc:d8:e5:6c:c3:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:1F:99:04:57:E5:06:2E:D4:6A:A5:63:EE:79:74:1F:78:11:B3
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:44:10:8e:11:a0:f5:5b:ad:86:90:26:12:9a:89:e9:1b:
9c:be:46:66:d7:23:57:8e:21:99:bc:12:30:35:5f:09:46:1a:
81:11:a8:fd:a1:55:e5:b2:78:18:32:c1:c9:af:89:d7:43:51:
58:91:79:20:cb:b3:2d:c9:43:8c:f3:98:29:f0:0d:b0:c8:d5:
a9:c6:43:e0:70:cc:ce:b4:12:99:07:b8:96:2b:e6:a2:dc:f6:
db:7f:38:62:e6:bc:17:3e:85:ac:42:5c:74:8f:83:f7:90:0a:
a1:ec:93:7c:82:74:24:e0:ca:dc:f0:88:5e:59:52:20:bd:01:
e1:c9:9d:e3:d2:b8:8e:56:2b:ac:34:b3:df:ac:b2:0a:97:92:
9d:55:4a:0d:df:78:dd:59:3f:90:ad:7e:4c:9d:7a:e4:db:ab:
43:2e:b2:a8:64:b4:52:eb:74:e6:94:88:f2:d2:8d:9a:90:0c:
4f:64:fe:93:25:50:83:73:08:fa:68:de:25:9a:37:df:c6:94:
ae:70:7c:e1:43:5b:ba:af:b1:b9:ee:56:77:57:22:94:55:03:
c0:5a:b1:35:5a:e7:3a:11:60:b0:52:40:67:9d:a2:84:b1:f2:
eb:5e:62:d2:cb:22:8f:c3:63:e6:cb:f9:44:92:5f:68:16:98:
a6:8f:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:17:24 2026 by rpki-client