Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
File: Qg_zglhintUOC3VkwjNBFYHh3w4.mft (raw, json)
Hash identifier: UrYlzDnbC/b9BUPQ4ar2SATCiHzlXesGgHoB3YqroDA=
Subject key identifier: 8F:0B:0C:B4:46:34:DA:14:07:7B:7C:84:BF:B4:81:6F:D4:24:4E:41
Authority key identifier: 42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
Certificate issuer: /CN=420ff38258629ed50e0b7564c233411581e1df0e
Certificate serial: 01A02055F22F41366FB7D09411CFECEE74F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:38 +0000
Manifest this update: Thu 20 Aug 2026 18:01:38 +0000
Manifest next update: Fri 21 Aug 2026 18:01:38 +0000
Files and hashes: 1: Qg_zglhintUOC3VkwjNBFYHh3w4.crl (hash: 4HaqcEfKCBOj7jKZsjqy64HLtHpxdCB2S4gOJsEtDhc=)
2: i44ZsQWX9kFjZrBXqxJShe4F4UY.roa (hash: BxMxpzl8UVGfzxTIfCiqxK6y7sVAleuv4Iaf2OthD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:f2:2f:41:36:6f:b7:d0:94:11:cf:ec:ee:74:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420ff38258629ed50e0b7564c233411581e1df0e
Validity
Not Before: Aug 20 18:01:38 2026 GMT
Not After : Aug 21 18:01:38 2026 GMT
Subject: CN=8f0b0cb44634da14077b7c84bfb4816fd4244e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:b6:95:d5:d6:ac:71:3a:80:63:c9:45:aa:
d6:b8:8a:d1:2b:07:f0:6a:cf:f2:4c:e6:ba:bf:04:
e1:95:8c:98:ee:21:57:8a:2a:ec:a7:cc:72:df:2a:
7b:8b:0a:be:95:31:ab:94:22:0b:08:eb:d2:0e:ff:
c9:b2:1e:c1:48:9d:d4:6d:a3:4f:91:56:17:00:d4:
8d:99:7c:ff:6b:2b:8b:3c:c3:f7:4a:1b:eb:ab:8f:
57:e7:b2:90:87:dd:13:25:94:f9:73:1e:57:4f:15:
86:94:2c:7f:4f:51:88:0f:ce:1e:32:8f:4e:fb:34:
95:30:f8:24:f6:96:03:80:bc:f1:e6:22:4f:cf:d1:
0f:76:19:32:df:5f:bd:f4:bb:50:87:0c:be:33:f7:
89:9d:e0:a4:65:43:57:d1:64:3f:88:bc:d8:80:cd:
ca:94:8d:c2:9e:64:20:f2:8b:f0:e0:da:14:3f:48:
e3:16:dd:23:6a:b0:b3:ec:e1:a1:b0:f7:4e:5a:89:
23:8b:a2:74:8b:6e:95:56:35:be:96:96:2d:59:f8:
e9:ee:9a:31:45:9c:fd:de:16:d2:8a:05:fb:25:e7:
a4:9c:dd:75:51:67:33:48:a9:ff:96:75:ea:53:be:
06:d7:e3:dc:9f:8b:e9:85:62:01:3e:0c:b2:7e:25:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0B:0C:B4:46:34:DA:14:07:7B:7C:84:BF:B4:81:6F:D4:24:4E:41
X509v3 Authority Key Identifier:
keyid:42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:60:a4:1b:bb:ff:bd:67:1c:a9:ac:3d:04:bd:31:88:6a:68:
db:ba:69:e3:bb:c1:83:08:22:08:03:eb:a1:8f:da:f0:19:bb:
d8:90:6b:2f:ed:69:23:88:9d:14:99:6c:d6:63:35:7e:15:2a:
7a:df:e2:42:4b:d1:86:99:ac:c0:c4:6c:42:03:de:66:2d:15:
49:13:10:c8:db:c6:fc:17:5a:80:c4:50:ce:c3:56:f7:9c:b5:
bf:60:1e:53:52:7e:ba:51:78:bd:67:38:7f:af:38:a9:62:a1:
c5:29:06:b8:e3:71:9b:60:fe:fb:7e:7b:68:18:da:52:19:ec:
3c:7b:6a:a3:cc:93:cf:23:d1:7a:c4:f5:41:9f:86:a2:85:0e:
1e:90:d5:b6:b0:ea:37:22:60:83:d5:f9:dc:44:b2:96:3d:b5:
65:f9:42:ec:4c:32:86:8a:3d:61:c9:20:83:c3:63:a7:15:4c:
06:69:64:a8:f5:2c:59:1e:92:d0:ec:08:fb:c0:22:c2:ce:27:
a4:4d:60:ee:3b:c6:af:e7:2d:f3:03:5f:f0:c2:2b:85:6a:b0:
43:7d:07:22:ca:bc:dc:91:09:e7:61:10:69:08:ac:62:ae:1a:
cc:3b:fb:a9:22:92:b9:20:88:0c:06:80:e7:4d:1b:b7:6e:21:
77:2f:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:32:37 2026 by rpki-client