Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: AhmDawO6OlLDuF1caZxscNnyq2kS5FRUqSE6iAKOx4s=
Subject key identifier: 84:0A:C3:32:25:DD:AD:0B:85:46:0D:B0:17:B8:23:62:9B:60:2A:C5
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 01A08A8C45DE4E5492733827DC2A3D8D7160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 1169
Signing time: Thu 10 Sep 2026 09:00:43 +0000
Manifest this update: Thu 10 Sep 2026 09:00:43 +0000
Manifest next update: Fri 11 Sep 2026 09:00:43 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: gCj0uypIOUicsJ1HvrViS1Oa4a24Eu/iWg9CfWTRpUM=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:45:de:4e:54:92:73:38:27:dc:2a:3d:8d:71:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Sep 10 09:00:43 2026 GMT
Not After : Sep 11 09:00:43 2026 GMT
Subject: CN=840ac33225ddad0b85460db017b823629b602ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:2d:e6:51:3a:ad:66:c3:89:1e:34:20:b9:
0d:2f:61:cb:92:93:26:d8:f2:82:58:0b:4f:76:8a:
a5:32:0f:1d:b3:48:47:34:d6:c0:b8:98:22:83:50:
d4:1a:20:c7:ac:c1:64:76:37:d4:c7:38:97:6f:5d:
61:20:21:4b:dc:4b:94:e3:b3:ad:40:49:15:f5:15:
83:75:a0:42:0e:43:97:00:69:37:07:32:57:e8:5e:
1b:cb:52:16:25:43:23:c8:a0:30:d0:65:34:65:16:
b5:70:67:31:77:02:d6:22:bc:dd:e4:e4:be:bb:b4:
84:6c:86:82:e2:fa:81:53:bc:e3:0b:6f:73:35:05:
da:2c:58:e2:5a:ff:98:94:f2:18:f4:bc:40:8f:09:
75:0a:c1:73:93:48:3f:03:7e:de:b2:f3:53:13:6f:
89:dc:ae:85:8f:0a:54:5f:e9:3e:04:fd:df:fa:8b:
50:ce:39:b3:b0:3f:34:7e:e7:79:c4:9b:de:f7:be:
ce:c5:b4:46:d2:05:79:25:cb:b0:8a:90:2f:b3:03:
d5:08:74:2a:17:64:70:a9:d3:64:c7:ef:24:da:40:
27:ec:55:e4:12:40:ca:79:a4:9c:01:6e:26:38:6d:
07:1a:4c:cb:9b:91:d7:ba:25:60:92:32:16:a6:9d:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:C3:32:25:DD:AD:0B:85:46:0D:B0:17:B8:23:62:9B:60:2A:C5
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:87:10:e3:66:75:2f:a2:3f:2a:6e:5b:61:84:b6:76:47:
31:71:fe:a2:fb:d1:e2:3c:d1:3e:14:dc:e7:f9:e9:92:d3:eb:
60:b6:15:eb:fd:fc:39:bf:62:a2:4c:29:34:be:fd:48:d1:ed:
a5:a5:21:88:c9:4d:84:5a:8f:6d:37:5e:e4:2d:8b:3a:a4:d4:
e4:24:e9:dd:ba:fd:c5:16:af:3f:d3:7c:d2:59:47:f0:6b:d1:
92:a2:00:dc:a8:64:dd:23:09:47:9b:9a:a9:89:5a:12:ce:00:
59:f8:85:0e:f8:2b:70:f2:e6:18:49:23:6c:da:4e:27:a8:36:
44:29:db:c3:d8:3c:0e:73:4a:63:f6:22:ce:36:88:88:bc:33:
16:f1:8e:1c:85:31:73:58:d2:60:fc:ec:4a:f4:a5:63:b4:b0:
d9:3f:05:93:98:83:e0:0b:ca:45:66:c0:f2:80:bf:a6:88:04:
b9:e5:51:2c:b4:27:4c:91:50:37:7e:e6:7b:c1:06:70:36:6c:
a9:4c:df:f2:63:dc:79:4f:7c:d9:dc:8d:73:a6:3c:ab:6a:88:
e8:e7:ff:c1:1b:b6:c2:fc:35:cc:87:1b:64:07:0d:71:b3:4f:
a0:3b:90:3e:27:93:d3:dc:6c:13:21:21:e0:06:96:80:af:43:
5e:07:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:56 2026 by rpki-client