Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: IFZleqfVtDc71GI5QrUwLgAFzq4IWSdniXD5adZlyrs=
Subject key identifier: C0:BB:6F:8B:13:AA:00:48:5C:FC:0F:3B:E4:E0:87:3C:5D:14:F3:00
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019D296169150BFC0ECC7B072BD2168DA19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0FA9
Signing time: Thu 26 Mar 2026 09:02:22 +0000
Manifest this update: Thu 26 Mar 2026 09:02:22 +0000
Manifest next update: Fri 27 Mar 2026 09:02:22 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: S6GRttjRIXqahDk+PWE47tqLZgkU0qVZx9a/Duy3n8g=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:69:15:0b:fc:0e:cc:7b:07:2b:d2:16:8d:a1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Mar 26 09:02:22 2026 GMT
Not After : Mar 27 09:02:22 2026 GMT
Subject: CN=c0bb6f8b13aa00485cfc0f3be4e0873c5d14f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:e6:1a:f2:7d:eb:ac:d2:50:5c:33:f5:40:
9e:9a:62:1f:a9:17:bc:90:6d:60:5e:2d:30:9b:c0:
1a:7a:f2:23:88:ef:4a:2d:0b:db:ef:9c:dd:10:63:
fd:51:a3:21:aa:da:57:ac:10:a1:f9:5c:e9:0e:37:
f2:6d:5a:59:b7:90:a7:ae:aa:2e:20:fe:ad:5b:30:
44:c5:dd:e0:68:a7:7d:ae:7c:47:86:b6:2f:23:aa:
57:ae:ae:28:31:7a:b5:e5:e1:0e:5b:0b:48:d9:2a:
13:c8:7d:84:a5:39:b9:e7:ea:80:db:05:83:0a:98:
dc:b3:92:a8:5a:69:7f:11:ec:16:14:fa:37:d6:26:
59:0a:bf:a3:81:be:fc:f0:14:c5:f3:51:35:7a:ed:
7b:94:30:06:8f:7a:14:0c:c1:67:1e:e9:4a:a1:ed:
dd:98:70:62:59:60:27:27:cf:96:f3:60:01:3f:4c:
c9:52:c3:56:fa:2b:c0:bd:dc:2e:99:05:c6:9a:5b:
39:ed:9a:62:1d:cb:a0:35:3b:bc:80:68:b5:dc:bb:
c8:27:a8:54:5d:57:bb:68:14:33:13:d1:d1:2b:1b:
64:b3:7c:e6:da:02:67:ba:6f:d4:e3:d1:62:09:5d:
3d:56:df:93:47:f7:4a:ff:d8:00:2b:35:14:bd:59:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:6F:8B:13:AA:00:48:5C:FC:0F:3B:E4:E0:87:3C:5D:14:F3:00
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:52:56:98:de:f0:a5:0c:a4:d2:4c:2f:4d:53:3f:74:8c:b5:
d2:59:c8:83:30:b7:22:7e:99:9c:e3:11:18:46:77:52:30:b1:
11:9e:d8:f1:01:bd:26:df:bd:31:c9:4b:e3:67:1d:80:b5:fc:
75:73:f6:57:2a:96:dc:81:46:33:94:eb:2d:a2:45:b9:ed:58:
a8:03:f7:e9:47:ed:ae:cd:8e:0a:4c:4c:74:8c:e1:60:3e:fa:
29:a9:bf:ba:f7:89:7b:61:ed:61:e7:e2:47:e4:9f:77:bd:e9:
44:f0:39:06:5e:47:56:92:c7:95:cd:e2:c6:f1:0f:26:c1:9a:
01:38:6f:e5:e7:c9:12:bc:fb:43:ec:51:9f:d2:93:aa:99:e6:
69:91:6b:ff:8b:34:51:80:ee:81:b9:83:a0:e6:a1:97:62:b2:
87:29:46:2b:1f:2a:ed:f5:38:50:1c:ab:ed:2a:a9:75:7b:fb:
61:cc:9c:b7:b7:3c:2c:c6:4c:0a:53:7f:01:43:15:5d:d4:9e:
23:55:a9:49:c6:47:ad:cc:6c:2e:f7:6d:bf:63:21:ae:50:fd:
01:89:82:54:9e:83:2a:2d:2e:f1:3a:4e:56:92:ae:d8:ab:2f:
8e:ea:35:db:d7:4e:33:b9:e2:96:4a:52:16:ca:19:8b:6c:a7:
5f:fc:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:41 2026 by rpki-client