Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: TjPZrqXPjrWHc8Ws3BMbN+H0TGkX8t6T+JH6XCR+lzo=
Subject key identifier: 17:24:1E:82:5F:0A:52:97:F1:CA:F6:DB:21:55:6E:3F:92:8E:94:E3
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019DCD878A5E24BA27D429B27115BB0329B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0FFE
Signing time: Mon 27 Apr 2026 06:01:45 +0000
Manifest this update: Mon 27 Apr 2026 06:01:45 +0000
Manifest next update: Tue 28 Apr 2026 06:01:45 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: 3ytK3NiZT9LPDTuKHCyWRMlbrA0gUciv0p4Korl9WCg=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:8a:5e:24:ba:27:d4:29:b2:71:15:bb:03:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Apr 27 06:01:45 2026 GMT
Not After : Apr 28 06:01:45 2026 GMT
Subject: CN=17241e825f0a5297f1caf6db21556e3f928e94e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:6e:df:ea:d3:45:6e:03:e6:93:6a:37:e0:
f3:82:32:da:70:2e:61:99:7c:20:4c:41:50:df:32:
af:14:fc:aa:d5:95:61:75:4d:b2:6e:0d:7d:39:b6:
ea:7a:fd:c2:46:c2:53:6b:64:54:dd:33:9c:d9:6d:
d3:df:fe:56:11:65:9b:82:30:82:d8:40:38:3e:ae:
e8:ff:30:67:2a:51:c9:cc:3d:ab:b4:de:c1:94:f2:
bf:c2:da:ba:a8:b6:d4:e1:5c:e8:c5:ea:71:10:5d:
6d:f9:09:3a:ff:95:48:1e:a5:c8:19:ce:ce:a5:1a:
7d:b2:f2:fc:9b:7a:68:5f:1a:b7:dd:42:3a:18:5f:
2d:ce:f9:27:a0:3b:3a:0f:ca:fa:79:4c:9f:98:97:
3f:a1:40:75:ef:a8:a6:78:a8:23:e8:b3:04:32:39:
51:36:68:4d:38:38:e0:29:9c:73:0b:e5:66:44:83:
3e:2b:d8:24:a8:ab:f0:6c:bd:33:c1:7c:ac:9c:d9:
59:89:57:48:8a:79:15:7c:04:60:8c:1b:9b:7e:7f:
e3:62:22:ff:6c:35:89:5a:94:c1:fb:67:c1:d0:2e:
a6:9c:43:dd:76:cf:27:45:68:f1:10:67:c0:9b:3d:
4b:d0:02:2c:08:85:ce:05:15:50:ff:0a:5e:b1:43:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:1E:82:5F:0A:52:97:F1:CA:F6:DB:21:55:6E:3F:92:8E:94:E3
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:ea:b5:36:b4:38:08:be:95:3b:63:e4:37:97:d1:5f:cd:
b6:47:97:78:78:2e:87:24:c8:b8:9a:3b:2c:78:ca:b9:3d:52:
cb:f1:5e:da:24:3a:e5:70:b7:5c:08:d1:e4:6e:f6:27:c3:83:
ed:be:04:93:aa:11:a2:b0:cf:72:e8:ea:4b:c6:ab:0e:63:5d:
10:93:83:cc:4b:29:58:6c:d6:4d:5f:c9:d5:b9:67:6a:c7:4b:
60:a9:26:38:48:58:59:5d:77:db:e1:b0:b5:b3:f7:b3:7d:00:
8b:97:04:49:eb:07:7d:3f:7a:98:f7:b1:78:5f:f1:78:20:1d:
16:f7:07:40:38:30:87:fb:48:35:61:f1:5b:d6:e4:dc:17:0b:
79:59:d0:96:74:34:2a:15:0f:f6:50:2d:0b:2a:12:a6:9f:3e:
0f:e2:8a:2c:8e:c4:c6:84:a9:d0:6c:94:01:6c:71:57:ad:78:
69:24:69:2c:0d:37:69:58:ca:59:be:d3:86:98:c3:df:1f:cd:
e4:f1:e1:8a:b2:ef:c8:8f:d8:70:ca:80:f8:fa:14:75:d6:8e:
cb:6f:72:55:cd:ed:98:6b:5a:20:7d:e4:43:41:b5:df:e3:69:
6e:bf:19:b9:9a:b9:cf:e6:70:33:03:f9:60:1d:1b:87:55:61:
85:45:13:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh4peJLon1CmycRW7Aym4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1
ODJiNmMwHhcNMjYwNDI3MDYwMTQ1WhcNMjYwNDI4MDYwMTQ1WjAzMTEwLwYDVQQD
EygxNzI0MWU4MjVmMGE1Mjk3ZjFjYWY2ZGIyMTU1NmUzZjkyOGU5NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuApu3+rTRW4D5pNqN+DzgjLacC5h
mXwgTEFQ3zKvFPyq1ZVhdU2ybg19Obbqev3CRsJTa2RU3TOc2W3T3/5WEWWbgjCC
2EA4Pq7o/zBnKlHJzD2rtN7BlPK/wtq6qLbU4VzoxepxEF1t+Qk6/5VIHqXIGc7O
pRp9svL8m3poXxq33UI6GF8tzvknoDs6D8r6eUyfmJc/oUB176imeKgj6LMEMjlR
NmhNODjgKZxzC+VmRIM+K9gkqKvwbL0zwXysnNlZiVdIinkVfARgjBubfn/jYiL/
bDWJWpTB+2fB0C6mnEPdds8nRWjxEGfAmz1L0AIsCIXOBRVQ/wpesUMsiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBckHoJfClKX8cr22yFVbj+SjpTjMB8GA1UdIwQY
MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt
Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2
LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozrqtTa0
OAi+lTtj5DeX0V/NtkeXeHguhyTIuJo7LHjKuT1Sy/Fe2iQ65XC3XAjR5G72J8OD
7b4Ek6oRorDPcujqS8arDmNdEJODzEspWGzWTV/J1blnasdLYKkmOEhYWV132+Gw
tbP3s30Ai5cESesHfT96mPexeF/xeCAdFvcHQDgwh/tINWHxW9bk3BcLeVnQlnQ0
KhUP9lAtCyoSpp8+D+KKLI7ExoSp0GyUAWxxV614aSRpLA03aVjKWb7ThpjD3x/N
5PHhirLvyI/YcMqA+PoUddaOy29yVc3tmGtaIH3kQ0G13+Npbr8ZuZq5z+ZwMwP5
YB0bh1VhhUUTfg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:12 2026 by rpki-client