Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: JTq7sVkLI4avd0Yy94f2c9Ty6YVdBgtexym2dXixf0c=
Subject key identifier: E4:1D:36:9A:9A:CE:B9:8D:3C:23:03:82:D4:80:C6:D2:E0:2D:1E:12
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019EB733BEB5426B39814ADE4B94FF73E50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 1077
Signing time: Thu 11 Jun 2026 15:01:22 +0000
Manifest this update: Thu 11 Jun 2026 15:01:22 +0000
Manifest next update: Fri 12 Jun 2026 15:01:22 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: Eac9mco9wnBdYkVzF7sxJT6eY+GkbtAYMauI+ZIxOKw=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:be:b5:42:6b:39:81:4a:de:4b:94:ff:73:e5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jun 11 15:01:22 2026 GMT
Not After : Jun 12 15:01:22 2026 GMT
Subject: CN=e41d369a9aceb98d3c230382d480c6d2e02d1e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:83:e7:d1:ce:5a:9c:fd:bf:69:62:ef:dd:
18:24:bf:93:cd:cc:01:f3:4e:51:7c:11:b2:19:65:
32:69:5f:97:28:24:1f:34:c1:32:c7:72:44:e3:75:
83:db:7d:24:a8:da:76:c2:aa:73:5b:87:ca:eb:3b:
66:25:f0:b2:0c:52:96:6b:5c:4b:d2:b4:fd:ba:94:
aa:84:28:2b:2b:4f:eb:60:d7:40:4d:3c:10:d6:54:
be:5f:8c:9f:90:20:9a:d2:3c:9b:62:a7:1f:5b:f9:
91:05:46:50:76:1f:69:5e:ac:d1:d7:16:fc:57:b4:
6d:75:c8:e3:92:d3:b0:4b:ec:02:60:13:7f:e6:80:
f6:4b:23:b9:27:5e:cf:d0:f6:7e:80:2b:19:a0:51:
bf:e0:32:74:80:b8:7b:5c:00:64:f1:df:17:af:f9:
6a:b6:09:47:2d:d3:42:6f:bd:cf:30:9e:f6:2e:52:
da:8e:bc:3b:38:e7:b6:bf:ce:63:b9:4c:b0:0f:2f:
2c:85:6e:ea:e6:be:82:ce:e6:f6:68:e6:f3:4a:6e:
5d:85:65:a7:6c:f0:cd:f6:ee:fc:4c:d9:1c:42:7c:
40:46:db:f2:3c:7c:06:09:00:5a:05:df:d5:09:43:
23:4c:86:c6:83:9f:00:51:dc:14:3e:73:7d:c6:d2:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:36:9A:9A:CE:B9:8D:3C:23:03:82:D4:80:C6:D2:E0:2D:1E:12
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:10:37:62:d2:11:69:a0:fb:1a:68:81:ec:06:ea:23:26:e3:
57:83:b4:50:4a:d8:80:b5:fe:4c:9c:88:b0:d8:11:f6:06:55:
21:02:ed:fd:a1:68:d8:05:cd:25:ab:12:b6:4c:5b:23:4e:82:
67:0d:54:a7:41:35:6c:9f:0d:ec:42:28:af:6b:73:b6:94:8e:
4a:75:47:ae:59:2c:93:2d:2f:46:22:01:30:e4:df:89:ed:cf:
e8:01:17:39:e4:a2:b3:f5:ad:92:01:62:1e:2b:6a:48:ae:36:
d5:f2:93:8d:9a:a4:36:d1:cf:c7:22:bb:a3:cb:26:02:98:9e:
5f:09:ea:01:b0:7a:47:3b:45:34:ce:81:47:00:42:c5:2b:5a:
d6:38:ac:c6:3f:6e:ea:5c:ea:18:b2:d4:94:52:88:62:d6:69:
96:72:c8:50:fd:57:08:77:ac:22:df:ee:50:63:ce:62:79:fd:
46:21:ab:30:40:02:22:5e:f2:15:26:43:e8:cf:84:34:74:70:
cd:d6:61:cc:cf:79:f6:5f:b8:f6:a6:a8:03:80:48:14:83:3d:
15:51:e2:56:6e:ce:2a:7c:6f:b0:92:40:52:88:45:29:99:33:
1e:11:15:01:9b:21:78:c6:60:8b:36:5c:32:54:7a:59:03:2a:
1b:2b:c6:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63M761Qms5gUreS5T/c+UPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1
ODJiNmMwHhcNMjYwNjExMTUwMTIyWhcNMjYwNjEyMTUwMTIyWjAzMTEwLwYDVQQD
EyhlNDFkMzY5YTlhY2ViOThkM2MyMzAzODJkNDgwYzZkMmUwMmQxZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMqD59HOWpz9v2li790YJL+TzcwB
805RfBGyGWUyaV+XKCQfNMEyx3JE43WD230kqNp2wqpzW4fK6ztmJfCyDFKWa1xL
0rT9upSqhCgrK0/rYNdATTwQ1lS+X4yfkCCa0jybYqcfW/mRBUZQdh9pXqzR1xb8
V7RtdcjjktOwS+wCYBN/5oD2SyO5J17P0PZ+gCsZoFG/4DJ0gLh7XABk8d8Xr/lq
tglHLdNCb73PMJ72LlLajrw7OOe2v85juUywDy8shW7q5r6Czub2aObzSm5dhWWn
bPDN9u78TNkcQnxARtvyPHwGCQBaBd/VCUMjTIbGg58AUdwUPnN9xtKEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQdNpqazrmNPCMDgtSAxtLgLR4SMB8GA1UdIwQY
MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt
Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2
LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxA3YtIR
aaD7GmiB7AbqIybjV4O0UErYgLX+TJyIsNgR9gZVIQLt/aFo2AXNJasStkxbI06C
Zw1Up0E1bJ8N7EIor2tztpSOSnVHrlksky0vRiIBMOTfie3P6AEXOeSis/WtkgFi
HitqSK421fKTjZqkNtHPxyK7o8smApieXwnqAbB6RztFNM6BRwBCxSta1jisxj9u
6lzqGLLUlFKIYtZplnLIUP1XCHesIt/uUGPOYnn9RiGrMEACIl7yFSZD6M+ENHRw
zdZhzM959l+49qaoA4BIFIM9FVHiVm7OKnxvsJJAUohFKZkzHhEVAZsheMZgizZc
MlR6WQMqGyvGDA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:52 2026 by rpki-client