
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier: 700TYNelsj665CI4cW07kG5mJPGKAw7WAD3jAhU2wEA=
Subject key identifier: 66:E9:1A:97:6E:C5:FF:D8:F2:C8:B2:6A:F2:23:90:D0:BD:00:53:0D
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019E1D22CA690D20D5EF1061C87AB70773BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number: 0FB1
Signing time: Tue 12 May 2026 17:01:19 +0000
Manifest this update: Tue 12 May 2026 17:01:19 +0000
Manifest next update: Wed 13 May 2026 17:01:19 +0000
Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: FUOw+a0iHxma28ubeA0e1wEiJ0yCxvgO8Z4Tgot+u+o=)
6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ca:69:0d:20:d5:ef:10:61:c8:7a:b7:07:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 12 17:01:19 2026 GMT
Not After : May 13 17:01:19 2026 GMT
Subject: CN=66e91a976ec5ffd8f2c8b26af22390d0bd00530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:ae:a1:b9:4a:fb:5b:9b:8c:31:23:07:fa:
14:06:08:ee:e5:f6:d1:7f:18:a9:60:af:24:bd:47:
1c:75:c4:33:d2:e5:b1:fb:c2:bb:0e:98:ec:81:9a:
b3:cc:6a:d7:84:c9:ac:0f:db:60:e3:57:33:b9:79:
11:78:cf:cf:d3:fa:12:67:b9:ac:d4:68:cb:07:90:
0a:79:a1:a4:69:5a:75:b1:13:c9:27:00:7f:8e:db:
a9:29:18:32:e3:d8:ea:b0:12:9a:b5:40:34:cc:fb:
07:0e:e6:44:72:8e:55:99:25:fd:8e:cf:fc:2b:d2:
ef:27:ac:8e:6b:e4:e6:4d:58:a1:6e:85:9e:4b:f5:
35:7a:d3:28:d8:fb:dc:71:96:04:4a:44:63:64:58:
35:af:af:d6:5f:fe:70:0a:0d:a9:f4:80:04:fb:e1:
e2:59:e3:19:fe:b3:1f:ab:49:07:ae:88:1b:fb:3f:
15:8b:b1:8c:4f:f6:df:1b:a7:7d:87:9d:61:ed:96:
8c:8a:dd:09:36:6c:09:94:67:70:60:50:02:71:46:
e4:27:c4:56:c4:66:d4:04:d7:13:76:1e:75:31:71:
3c:d1:87:b4:d7:85:d4:93:b4:35:27:dd:bd:7a:fb:
e7:b9:23:3a:be:3e:5c:6e:fc:5a:d7:03:7f:1b:52:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:1A:97:6E:C5:FF:D8:F2:C8:B2:6A:F2:23:90:D0:BD:00:53:0D
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e8:7e:69:69:47:94:d2:c6:b6:51:7a:bb:09:fa:7a:31:0a:
c3:2b:11:07:49:bc:79:a4:c3:8f:f2:20:5c:8d:bb:c6:04:82:
cd:8d:3e:15:0b:d6:04:e9:fc:57:c8:d7:61:93:c9:24:f4:84:
11:e8:08:8c:ff:06:d9:a8:e2:b4:0a:ef:1a:f0:81:7a:f5:df:
43:0f:2d:47:4a:77:0d:8b:ec:39:19:37:a1:93:e9:71:d4:18:
7c:96:88:8b:04:a8:63:da:cf:d4:36:24:4d:20:55:6b:80:36:
eb:11:fa:24:c2:1f:fa:e1:81:ba:81:5c:c4:f7:6b:b9:65:6e:
02:09:cd:dc:01:18:4d:b9:70:ee:ed:07:e8:d6:8c:1c:b8:cd:
b8:28:e2:2a:73:5a:cd:f9:49:cb:04:79:4a:fe:e5:f8:74:86:
41:3c:4c:69:e4:20:13:d7:3d:44:ac:14:1b:72:50:44:22:61:
10:78:15:31:fc:aa:ff:00:04:10:0e:0a:55:71:aa:8b:b6:c2:
8d:7c:72:bb:e7:df:20:66:2e:c2:42:9a:65:fb:54:32:b4:0b:
00:a7:b6:0b:a0:4f:46:b0:d1:7b:27:c7:ea:b1:cd:9c:a8:e8:
43:b3:d6:9b:f3:1e:9d:54:67:4e:ea:a8:31:ee:c1:c8:73:09:
0a:f7:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:37 2026 by rpki-client