
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json)
Hash identifier: cwSJajBPbyyVjUOdf/2xzpYLzMbJcwyYaZiTl+T8HPc=
Subject key identifier: 0E:0E:76:12:3E:DF:AE:64:A7:7F:0E:C5:7D:22:FD:F2:12:C4:40:2D
Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843
Certificate serial: 019F91A4288A8BF7CDF4CF0A335E5B810D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
Manifest number: 01B4
Signing time: Fri 24 Jul 2026 01:01:22 +0000
Manifest this update: Fri 24 Jul 2026 01:01:22 +0000
Manifest next update: Sat 25 Jul 2026 01:01:22 +0000
Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=)
2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=)
3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=)
4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=)
5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: 37/x+ackIWi5ygyUKbasOBzTUQeI/ioOelrCwCu3Rtw=)
6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=)
7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=)
8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=)
9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=)
10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=)
11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:28:8a:8b:f7:cd:f4:cf:0a:33:5e:5b:81:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843
Validity
Not Before: Jul 24 01:01:22 2026 GMT
Not After : Jul 25 01:01:22 2026 GMT
Subject: CN=0e0e76123edfae64a77f0ec57d22fdf212c4402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:1e:9a:cc:7a:df:ef:24:51:18:81:bf:59:
0c:53:7e:08:e8:64:92:0a:60:6f:a4:9d:f7:24:a8:
bb:f3:ac:fd:d1:87:9a:14:c5:0c:8a:fa:0c:14:2f:
ea:53:56:61:0b:31:27:34:ea:1f:ea:1c:9f:7b:69:
09:bb:c9:e2:0e:22:e3:c8:eb:79:63:f7:19:62:3c:
79:b5:d7:b4:13:ce:e6:2d:ae:1d:5b:c4:4b:d7:20:
1d:70:ca:38:b7:17:4a:e5:1f:49:b3:0f:c7:68:a9:
61:9d:7d:87:a3:76:34:ca:f1:1a:23:55:f6:88:42:
8b:0b:8a:54:a2:07:86:9b:d4:86:b9:db:2c:55:4a:
b2:27:b7:c0:c1:8d:3d:6f:b3:44:4a:8b:e0:77:e0:
76:10:bb:56:66:47:08:cf:a8:b8:ea:e6:c5:4a:a4:
59:37:31:26:c8:84:5d:73:26:cc:cb:e0:af:5e:c3:
3d:20:95:44:7a:f7:96:1b:dc:ad:51:48:f5:f7:cf:
21:7e:1e:a6:4c:5a:85:98:b3:3c:4a:72:8d:fb:06:
d2:c9:1b:f0:7c:4a:e2:41:e2:0b:24:b4:f2:e6:f7:
83:25:61:29:a0:15:95:ff:85:29:ef:59:94:e2:22:
71:22:35:80:34:0d:89:ce:48:7c:8b:84:7c:09:94:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0E:76:12:3E:DF:AE:64:A7:7F:0E:C5:7D:22:FD:F2:12:C4:40:2D
X509v3 Authority Key Identifier:
keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:a7:16:92:37:c2:c0:51:3f:f1:0d:4f:20:23:94:25:87:
b8:7f:32:7c:d2:10:4d:42:f6:7a:6e:d9:e5:68:cc:07:4c:29:
b3:02:7d:3d:92:fd:01:1c:2e:6f:be:c8:83:21:9e:01:f5:79:
14:3f:37:6c:4e:41:e7:1d:4e:66:b6:69:0a:ea:73:c6:0a:b6:
7f:ce:95:26:ea:fb:9d:e5:eb:f3:be:ea:64:8e:57:cf:1c:e9:
c8:fb:e9:ea:d3:7b:5f:91:dc:fe:4b:03:63:c2:8c:e9:11:5b:
1e:43:6c:63:58:58:6e:a7:28:59:56:20:13:95:1e:98:ac:b7:
a1:4e:45:ae:1b:49:a8:ac:6f:5c:d0:e2:84:50:25:8c:18:ce:
b7:f7:95:91:f6:de:0f:d2:14:95:69:d9:f2:a6:83:31:9e:ff:
30:68:f0:e2:3f:06:6f:ed:f8:1e:23:61:11:13:77:0a:99:cc:
f1:93:ac:e0:1b:74:69:50:59:c3:ca:75:93:81:3f:ee:eb:d5:
47:cb:a1:e6:92:eb:17:fe:ab:b9:eb:93:97:74:7b:f8:be:07:
f4:95:0e:ea:ce:ec:38:35:72:fc:88:08:a8:6a:df:c5:1d:cc:
61:20:d2:86:ce:d0:c0:a6:0d:4b:34:73:66:58:83:05:41:df:
26:b3:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:02 2026 by rpki-client