Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: P79YyhQeBhnWkwWoxUUernGUH2ktGdRufBRjySd/uVE=
Subject key identifier: B7:85:E2:3B:E2:40:74:63:F3:15:94:0E:AC:90:E4:0B:9B:37:36:DE
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019CE3DA2A6BBEA660D0E207580B39605855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0F85
Signing time: Thu 12 Mar 2026 21:00:51 +0000
Manifest this update: Thu 12 Mar 2026 21:00:51 +0000
Manifest next update: Fri 13 Mar 2026 21:00:51 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: +KVP5utlTE0C14QqdA1BAimru5n5wHqWTEkuJFARCEk=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:2a:6b:be:a6:60:d0:e2:07:58:0b:39:60:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Mar 12 21:00:51 2026 GMT
Not After : Mar 13 21:00:51 2026 GMT
Subject: CN=b785e23be2407463f315940eac90e40b9b3736de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:ff:93:1f:98:01:f2:e2:99:25:14:76:a6:
6d:b9:60:d7:0c:88:3d:ee:9c:db:6c:99:c9:ec:f4:
1e:0d:15:63:7c:e1:58:b3:ce:15:ba:95:c3:ec:88:
c0:d8:c7:11:cc:9f:26:66:73:ea:bd:c8:56:f6:85:
fd:ff:79:0a:2c:9e:b4:17:94:be:3e:07:e6:f7:76:
b8:8f:26:5d:03:4f:55:1f:b1:17:7c:e9:01:a9:06:
e7:c6:b9:c2:28:5f:36:86:19:7b:a1:f2:31:fe:a2:
51:86:f9:dd:24:f8:86:62:eb:eb:f3:c2:70:0f:bd:
93:34:29:d7:ad:cd:9a:6e:e8:b4:bf:73:6c:e3:90:
8e:19:bf:50:e6:f6:cb:1e:3e:12:91:61:ae:14:51:
00:81:46:ef:65:58:89:77:08:ba:1d:09:5e:e0:d0:
68:8d:28:6c:df:ac:3b:b6:9b:ba:54:38:e6:03:c7:
36:8a:7a:44:de:5a:b4:87:cd:5c:4e:4e:73:db:24:
2e:65:d3:9d:0d:aa:3d:b8:12:a2:cf:91:3c:10:88:
a6:f8:2c:aa:3b:49:00:bc:d0:16:ec:ee:b8:5b:bb:
bf:73:38:5c:17:87:c0:4e:5a:91:1d:e3:90:24:16:
c2:cc:94:46:66:85:f3:2c:ae:9c:40:a7:ef:4f:b7:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:E2:3B:E2:40:74:63:F3:15:94:0E:AC:90:E4:0B:9B:37:36:DE
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:76:e5:00:46:fd:82:76:09:de:63:d2:d8:87:3a:63:3b:
3c:d7:98:4c:3e:02:17:de:62:34:ba:3c:b6:89:6a:6d:f7:29:
69:7c:8d:b7:52:e0:8a:0c:5c:e6:77:17:9f:c3:8f:4a:3d:71:
a4:a8:ac:9d:ee:f0:dc:30:01:52:d9:7c:11:46:d5:c8:78:93:
a9:01:9c:0b:7e:a0:c1:4d:13:69:2a:65:6b:34:a0:85:ce:b2:
2c:da:f6:fb:37:02:08:86:7d:6d:4a:9b:c2:7c:4a:5d:44:0c:
b5:77:fa:5c:1b:04:b3:b9:9f:00:2a:2a:ea:a9:40:ba:ac:28:
25:b6:8a:60:07:a2:38:c7:88:a3:07:6b:63:f0:e9:d8:39:c7:
b0:06:3b:9c:00:29:b7:98:dc:1b:69:23:9b:3d:91:49:33:f7:
23:ee:14:a9:b7:05:01:48:a9:f7:01:e4:0c:ef:ca:95:39:ea:
6a:1d:93:3b:38:6b:7b:1b:98:69:6a:ea:34:68:7b:34:3c:1a:
8d:82:b2:8a:a8:c3:64:c0:a1:5c:8c:04:f7:86:f1:a3:1f:4f:
42:4e:17:c4:01:d0:f0:30:28:b1:9b:27:d9:1b:4b:41:cf:8b:
dc:2f:5b:23:61:f8:05:90:59:b6:3c:eb:03:04:ac:f2:59:fa:
94:28:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:50:12 2026 by rpki-client