
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier: Qw6vsrjnkmKNZsH8ByjStJ5y/Z39BBa3pjBJaGELU2U=
Subject key identifier: 1F:2A:66:45:94:06:13:EE:41:C6:3C:F8:25:34:08:6C:76:A8:D8:E0
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019D27E092A400FA82C592DB53C1BB0D019D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number: 0F32
Signing time: Thu 26 Mar 2026 02:02:02 +0000
Manifest this update: Thu 26 Mar 2026 02:02:02 +0000
Manifest next update: Fri 27 Mar 2026 02:02:02 +0000
Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: +oWagIjE/cJV8EysqiDikAJThK5NCesT0kN4ZSxiv6w=)
6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:92:a4:00:fa:82:c5:92:db:53:c1:bb:0d:01:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Mar 26 02:02:02 2026 GMT
Not After : Mar 27 02:02:02 2026 GMT
Subject: CN=1f2a6645940613ee41c63cf82534086c76a8d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:7b:db:59:f4:ab:e2:56:c1:80:e1:11:70:
f0:be:d6:f7:6f:2e:7f:9c:f3:19:cb:e8:6b:cd:1b:
e0:f0:d3:df:09:21:a5:07:d9:2b:53:02:a2:1a:98:
13:b1:64:87:b8:f6:c2:d6:01:84:bc:a6:81:ef:85:
31:58:bb:54:e8:41:f8:53:60:b6:ef:37:6f:19:9c:
ca:c6:22:dd:9c:a4:57:e4:d3:9f:c8:96:4f:c6:4d:
5c:03:03:ab:b8:e6:12:18:cf:62:f1:ae:5c:fc:bf:
9b:2f:a6:75:99:4c:df:90:b9:a5:e7:d6:37:8a:cf:
e9:75:2e:45:80:7f:92:1d:4c:06:6b:47:3b:50:12:
ae:05:fa:c8:f1:56:12:f9:be:c7:c2:70:e4:d1:00:
7b:9c:d0:0a:16:4c:30:42:c2:61:96:d0:75:37:9b:
bc:1a:31:d4:33:cc:78:dd:34:58:1a:82:7d:7b:ab:
48:d8:8f:28:25:30:9a:36:5b:10:77:87:0e:c4:76:
c3:60:30:e3:58:e3:cd:8f:81:9f:77:43:8e:28:7f:
38:d3:15:f1:d0:3c:f6:00:c0:11:f7:67:e2:70:a7:
ed:4b:4a:73:2c:ca:84:72:45:84:4b:00:13:5b:65:
0a:f0:0f:60:6a:d6:61:5f:86:d4:ff:5c:c3:35:e3:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:66:45:94:06:13:EE:41:C6:3C:F8:25:34:08:6C:76:A8:D8:E0
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:20:76:d7:b8:37:93:d0:59:48:73:06:ae:d2:e1:89:60:12:
cc:b3:4d:b0:bb:30:9f:fa:a4:89:6a:a7:4d:29:2b:8f:73:93:
78:32:37:e8:dc:a6:59:b8:4e:43:c7:35:18:ef:50:3e:2c:b7:
2e:28:73:69:1e:de:cb:b1:d5:f8:84:78:a3:05:77:03:fc:1a:
92:22:93:cb:fa:5c:dc:b6:16:ef:6e:86:5e:16:66:2b:e2:e0:
f8:a0:af:a3:43:b0:66:a7:13:bc:8e:3e:ab:91:fc:82:12:14:
a4:cb:11:3b:f3:2b:f3:f4:18:f1:fa:f7:86:84:ca:3a:35:81:
15:c6:10:03:45:16:65:d8:2d:c8:21:c9:dd:d6:41:03:a5:98:
1d:25:bd:f8:c0:c4:d7:de:e6:b8:84:c9:60:c1:b7:c6:68:a6:
4f:e9:72:96:0b:9a:f7:02:c0:e9:ef:64:f5:de:cd:bc:fe:f8:
20:c4:b2:7f:36:75:e3:b1:9c:da:ad:91:46:ef:78:62:09:a3:
2d:f0:7d:70:b0:fe:38:13:47:b0:5a:74:57:96:59:44:42:61:
cc:2e:1f:51:af:47:d0:c3:9c:a3:50:10:2d:cd:93:67:4f:26:
37:98:32:3b:9b:ef:c7:8b:cf:64:57:01:19:ad:19:46:75:f9:
05:73:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:49 2026 by rpki-client