
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier: TQ2SwAeW7Jb5bzBRUJZ92qCgK6TyLlDCe8PJBnX5EDk=
Subject key identifier: 22:40:51:C3:45:CF:9D:2B:49:C6:3F:3A:1C:5A:14:C7:BC:36:53:E3
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01A189E48D71B7274DD9B1A440461AE71690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number: 1177
Signing time: Thu 29 Oct 2026 23:00:19 +0000
Manifest this update: Thu 29 Oct 2026 23:00:19 +0000
Manifest next update: Fri 30 Oct 2026 23:00:19 +0000
Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: 9pEYCYcUPGraJacWmVNt9XNqS4MGf7ew1w9n2xTtQeo=)
6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:e4:8d:71:b7:27:4d:d9:b1:a4:40:46:1a:e7:16:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Oct 29 23:00:19 2026 GMT
Not After : Oct 30 23:00:19 2026 GMT
Subject: CN=224051c345cf9d2b49c63f3a1c5a14c7bc3653e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:a7:47:46:6b:60:bb:ab:08:29:71:4d:d8:
10:ad:2b:25:af:d2:1d:a8:5a:85:40:07:7f:6f:3d:
bc:b4:c7:ae:5e:a5:f6:f0:40:3a:dd:8b:93:1b:16:
d1:52:d6:97:08:d8:0a:c6:07:b4:97:dc:75:d8:c7:
c6:88:a0:52:81:8e:9c:18:1b:89:f7:12:01:86:28:
e0:50:a2:d4:4a:be:3d:f1:97:0d:7e:db:8b:66:82:
6b:06:a4:13:ac:6b:9d:8e:c9:84:f3:47:10:92:af:
ba:df:05:b8:ba:6a:11:0b:62:93:77:5b:63:f3:d9:
6c:7a:12:e6:b2:56:9d:30:a9:39:1f:a1:2e:bd:1c:
24:9c:fe:b2:65:57:56:5e:32:d8:78:8f:fb:68:89:
00:6b:f7:9d:b5:26:bf:c8:19:61:7f:52:02:1a:d5:
d2:6d:d8:39:48:be:7a:76:94:3c:f7:f8:a1:f3:5e:
b3:34:b7:04:de:e4:fa:b3:b4:b0:aa:bb:04:63:3a:
b0:f5:5b:66:95:b9:83:83:0c:3f:51:e6:af:38:1b:
eb:3c:56:9d:7a:73:72:c5:af:38:08:71:01:5c:dd:
ed:a2:16:74:7e:5e:38:4e:1d:a3:e0:a7:6f:15:03:
e4:28:7f:9e:3e:68:46:90:62:55:35:09:c5:b5:38:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:51:C3:45:CF:9D:2B:49:C6:3F:3A:1C:5A:14:C7:BC:36:53:E3
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b5:47:13:a1:c3:23:e3:22:e8:02:7c:13:ce:c1:05:4e:46:
51:b5:d6:d1:9a:5b:f8:d0:19:65:ca:2b:68:4c:da:c7:6d:56:
3a:21:51:9c:42:11:7e:8d:d9:a5:ec:f8:ae:cb:de:78:78:ba:
09:74:94:0b:22:c9:ec:2e:12:f2:d8:05:00:51:28:ee:b3:fb:
40:bc:1a:40:22:a7:46:74:72:73:b2:c7:3a:24:e5:89:4f:cc:
74:eb:c1:03:3e:1c:39:d5:82:92:5e:a9:80:46:1a:7a:db:dd:
ad:81:12:87:db:76:fd:92:54:89:ea:54:4c:f6:15:46:05:cd:
d3:c7:bc:6c:77:ed:16:4b:d5:5b:52:31:08:ec:3b:d9:17:19:
54:c2:da:78:1c:58:b1:95:5e:12:f6:b4:44:39:a7:9b:e4:51:
02:d6:6b:0e:ce:31:a5:ef:20:99:71:57:5f:61:e9:8e:1c:16:
3d:2a:25:26:35:7a:d0:d6:7b:0b:5a:07:a0:00:54:bd:10:bf:
4a:4f:e2:57:9b:09:ac:0c:0d:1f:3c:9f:c6:55:b9:1f:9a:39:
f3:ba:b7:8b:21:7c:3d:b9:89:53:e2:c1:ae:6e:a5:4d:e3:72:
94:11:a5:f4:4d:31:cb:3f:5e:b0:f1:4e:9c:66:38:f6:54:0a:
58:b9:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:06:18 2026 by rpki-client