Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: /cVQ+aYVlaQA+YY1ZeejqTRjQBJWD/7UN9ecczPCHjE=
Subject key identifier: BE:BB:48:6A:6C:09:15:31:EC:54:B5:CB:2C:1B:03:E0:CB:DC:C5:7E
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019F9EF2630E68E4B1E3E1461A3AB97FE704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 10EF
Signing time: Sun 26 Jul 2026 15:01:52 +0000
Manifest this update: Sun 26 Jul 2026 15:01:52 +0000
Manifest next update: Mon 27 Jul 2026 15:01:52 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: 1SWPk66/e1jptGtt8ruUG+TDqCjMK0lvas5r+NZOFeQ=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:63:0e:68:e4:b1:e3:e1:46:1a:3a:b9:7f:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jul 26 15:01:52 2026 GMT
Not After : Jul 27 15:01:52 2026 GMT
Subject: CN=bebb486a6c091531ec54b5cb2c1b03e0cbdcc57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:76:ca:23:dc:f0:fc:59:b3:06:2a:43:0b:
ff:64:09:85:a8:4f:8f:64:1a:ea:5e:6e:d9:2c:f3:
d5:04:a0:bc:92:67:aa:f3:45:96:93:18:36:d4:38:
92:5e:07:db:a4:2b:e9:75:f3:7f:a5:3d:3a:41:2c:
a7:95:cd:5d:5e:0f:a4:2f:86:b1:04:9f:5a:89:99:
e3:65:03:c4:51:e1:f3:3c:e4:b4:26:e0:79:5b:5a:
7f:dd:a8:f1:ae:7d:dd:22:ef:86:fd:0b:d6:5b:14:
46:c3:e9:fe:12:2c:68:58:ca:99:ed:e9:3b:e3:6e:
a7:78:6f:2e:2a:97:40:16:0b:0b:b0:f1:3c:2f:1b:
3a:b6:c7:db:7b:29:a2:4f:01:51:94:46:47:8a:28:
97:e4:ff:da:fc:a6:28:a8:c1:ff:ef:e8:54:d2:d5:
fe:fd:16:bf:e1:35:e0:5f:82:c1:cd:a5:22:72:8a:
ac:ad:af:56:c6:62:a0:9d:83:76:8d:0e:25:90:47:
09:6e:78:49:9d:0f:73:11:1c:f6:b7:09:12:e7:40:
82:04:b7:4a:a4:95:22:11:85:db:d7:2a:b5:d6:5e:
c5:43:f3:b1:06:1a:c0:98:e0:b1:38:c3:b7:04:d1:
4f:98:c4:90:fc:56:bd:0f:0f:d3:fe:2b:c4:be:9f:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:48:6A:6C:09:15:31:EC:54:B5:CB:2C:1B:03:E0:CB:DC:C5:7E
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:66:84:9c:4a:1a:51:e3:51:7b:5b:6d:64:96:d2:09:28:
c8:9d:51:de:29:4a:f7:d7:43:1c:d1:df:82:35:9a:3f:7b:2a:
a2:97:bc:0a:b8:12:c7:12:22:7c:1c:f3:c8:c1:b0:df:65:0d:
51:e0:ee:67:fc:c5:66:91:c5:6e:22:e5:19:17:1c:a5:fd:da:
02:c8:68:52:dd:7f:33:5f:33:81:f9:33:3e:99:02:fe:56:2a:
59:82:76:72:33:df:c9:79:cc:af:d6:49:f0:28:91:aa:17:30:
fe:49:80:fb:f8:1b:53:6a:cd:d6:ca:64:dd:90:a8:b8:a6:9e:
dc:d8:ea:7f:ef:06:65:d0:8f:ff:0d:eb:06:bf:9d:6d:68:41:
a7:c8:8f:ab:9b:45:c3:e0:11:8a:1a:f2:c6:2a:76:2d:bb:88:
aa:33:ad:13:3e:52:54:8d:eb:29:6a:55:7b:b0:ab:22:1a:3e:
04:d5:b0:f4:41:c0:67:06:1d:a2:0b:83:fd:ff:6a:91:67:92:
58:7e:2a:64:ff:ec:bc:af:ea:7c:d0:b9:94:34:59:c1:f7:43:
09:0b:05:0a:ec:58:69:00:8c:b6:10:cb:21:cb:27:f2:c9:6f:
49:e6:4c:27:a4:5c:26:90:11:bf:ad:4e:38:1b:0c:bc:5c:b9:
ba:fc:c2:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+e8mMOaOSx4+FGGjq5f+cEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1
ODJiNmMwHhcNMjYwNzI2MTUwMTUyWhcNMjYwNzI3MTUwMTUyWjAzMTEwLwYDVQQD
EyhiZWJiNDg2YTZjMDkxNTMxZWM1NGI1Y2IyYzFiMDNlMGNiZGNjNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL52yiPc8PxZswYqQwv/ZAmFqE+P
ZBrqXm7ZLPPVBKC8kmeq80WWkxg21DiSXgfbpCvpdfN/pT06QSynlc1dXg+kL4ax
BJ9aiZnjZQPEUeHzPOS0JuB5W1p/3ajxrn3dIu+G/QvWWxRGw+n+EixoWMqZ7ek7
426neG8uKpdAFgsLsPE8Lxs6tsfbeymiTwFRlEZHiiiX5P/a/KYoqMH/7+hU0tX+
/Ra/4TXgX4LBzaUicoqsra9WxmKgnYN2jQ4lkEcJbnhJnQ9zERz2twkS50CCBLdK
pJUiEYXb1yq11l7FQ/OxBhrAmOCxOMO3BNFPmMSQ/Fa9Dw/T/ivEvp9gnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL67SGpsCRUx7FS1yywbA+DL3MV+MB8GA1UdIwQY
MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt
Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2
LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4VmhJxK
GlHjUXtbbWSW0gkoyJ1R3ilK99dDHNHfgjWaP3sqope8CrgSxxIifBzzyMGw32UN
UeDuZ/zFZpHFbiLlGRccpf3aAshoUt1/M18zgfkzPpkC/lYqWYJ2cjPfyXnMr9ZJ
8CiRqhcw/kmA+/gbU2rN1spk3ZCouKae3Njqf+8GZdCP/w3rBr+dbWhBp8iPq5tF
w+ARihryxip2LbuIqjOtEz5SVI3rKWpVe7CrIho+BNWw9EHAZwYdoguD/f9qkWeS
WH4qZP/svK/qfNC5lDRZwfdDCQsFCuxYaQCMthDLIcsn8slvSeZMJ6RcJpARv61O
OBsMvFy5uvzC9A==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:18 2026 by rpki-client