
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier: 4hL5IVA2PLX9xUP6eK5AewqAQxZs3koIfRI0Ictdkd0=
Subject key identifier: 1D:67:39:D6:E9:0C:5E:C7:09:44:28:AC:6E:AB:2B:4E:FB:C6:E0:A6
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019F916DCF0E892A02FE1B0D7EA21DB6E764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number: 16C0
Signing time: Fri 24 Jul 2026 00:02:00 +0000
Manifest this update: Fri 24 Jul 2026 00:02:00 +0000
Manifest next update: Sat 25 Jul 2026 00:02:00 +0000
Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: jbswIn1UHgzihD5Bmwz0FWF8CU6XwbfiE1BAoVSP8+8=)
6: _zP73NXlOD_8EgcbXNN-hPdzSQo.roa (hash: XVZFe/ZBZLQR/k8FwFmC9dpWix1IncPAmzb2M0KXlGk=)
7: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
8: h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa (hash: kiAKvXhdtX2kzyGIv4FUOZn9GRgVG3rv957GsPh/b7w=)
9: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
10: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
11: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:cf:0e:89:2a:02:fe:1b:0d:7e:a2:1d:b6:e7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 24 00:02:00 2026 GMT
Not After : Jul 25 00:02:00 2026 GMT
Subject: CN=1d6739d6e90c5ec7094428ac6eab2b4efbc6e0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:6a:3b:bc:5c:5e:56:46:65:c8:7a:2e:a3:
9c:8c:38:fe:13:32:08:e1:af:4a:c0:24:fc:0e:10:
88:47:88:3f:82:33:d6:2a:55:c5:4b:31:93:9d:b7:
3e:1e:ca:aa:02:78:2e:d6:8d:f3:ff:23:73:a2:c6:
81:32:ba:a6:05:e1:1b:25:a1:2d:51:03:77:65:34:
7b:4f:9d:b4:d3:4a:c9:63:9b:7a:12:88:3b:ab:de:
21:e4:96:84:09:32:86:a2:55:c6:43:c6:94:0e:cd:
44:1b:e7:cf:8b:d8:e8:70:cb:01:40:9a:35:f1:c4:
73:36:29:8d:11:0a:43:52:da:b9:28:18:66:1a:46:
03:e5:47:6c:3f:23:30:1c:67:80:c4:ea:c1:b4:e4:
30:8e:85:c5:9e:f2:65:8f:a5:84:18:3b:85:9f:82:
66:2a:9b:23:c0:bf:fb:09:94:31:1e:1a:02:52:3f:
c4:f3:7a:e0:47:a8:e0:a4:c4:b9:dd:ba:6f:50:76:
c0:84:cd:98:af:29:98:66:0f:42:f1:5c:b3:d0:c6:
12:f8:02:15:98:f3:91:79:39:78:02:fc:80:11:dd:
e3:e5:63:e5:49:dd:67:d4:fd:a6:a2:a3:fa:30:92:
b2:2b:df:e9:7e:3c:70:78:a1:f6:0c:ad:03:0e:4a:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:67:39:D6:E9:0C:5E:C7:09:44:28:AC:6E:AB:2B:4E:FB:C6:E0:A6
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:77:11:5b:fb:84:76:f5:b5:75:9c:17:c7:ca:c0:e6:93:cc:
fa:3a:70:84:66:b8:6b:18:bc:ad:14:48:6f:5c:10:d9:d6:b2:
4a:f4:99:c4:e5:76:21:4b:9f:84:62:e5:c5:42:44:4e:85:8b:
2b:c1:6c:7d:ff:40:dc:0e:41:fe:90:7c:2a:69:e1:6b:17:21:
4d:e7:c4:09:c4:c6:65:88:eb:5e:18:3a:9d:44:b0:23:91:5e:
0e:94:81:b9:42:9c:72:a2:59:fd:2f:96:85:54:07:41:aa:a5:
ab:be:05:1a:b2:e3:8e:59:27:b0:b4:c0:24:e8:c4:a2:59:64:
b0:2d:9b:df:4e:ff:55:c1:04:c0:b9:0b:b0:37:74:29:9c:06:
7d:aa:c2:88:ed:e5:38:30:eb:1d:0a:7f:1d:46:d2:1c:a6:5e:
39:fd:76:7f:57:f3:d3:ce:93:bc:18:6c:8d:55:06:72:94:e3:
f1:05:1d:6a:09:b2:ae:54:d2:71:92:27:fe:f6:30:22:dc:59:
29:55:d2:af:ff:22:d3:e2:8d:50:b7:aa:93:16:7e:e0:8e:3c:
41:0b:1d:b4:0a:e8:d2:f9:13:b4:e7:c5:94:75:32:45:4b:99:
a1:42:4d:b5:64:64:2d:be:06:17:ff:39:95:25:0c:2e:23:03:
d9:6b:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:10 2026 by rpki-client