Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: 6w+nXIKZA0nq3E8QgU2WHbmfS3/dAeXosAk54jGLwRg=
Subject key identifier: A3:FA:68:58:9C:78:65:50:B2:47:06:0D:D3:18:49:4A:3F:AC:0A:BE
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 01A0E174AAF2D46A4690B2389BF9CDABB1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 1196
Signing time: Sun 27 Sep 2026 06:01:54 +0000
Manifest this update: Sun 27 Sep 2026 06:01:54 +0000
Manifest next update: Mon 28 Sep 2026 06:01:54 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: awO6j40izFh7RaTv3IVcF3xb6f4BP6RR0Sj1/duefYQ=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:aa:f2:d4:6a:46:90:b2:38:9b:f9:cd:ab:b1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Sep 27 06:01:54 2026 GMT
Not After : Sep 28 06:01:54 2026 GMT
Subject: CN=a3fa68589c786550b247060dd318494a3fac0abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:39:65:d2:08:0f:f4:bc:1b:0f:6f:4d:80:
52:02:b2:53:9b:d9:5e:93:64:72:e4:dd:40:b0:e2:
0d:98:0b:fe:0b:0e:6f:df:86:23:4f:c0:1c:a8:29:
57:36:00:f5:54:5c:fc:b1:6f:a5:e4:33:44:7d:6b:
b1:04:cb:70:d0:25:d2:9b:b2:3e:cf:1f:bc:9c:1a:
31:78:02:30:35:a2:19:89:18:5c:ea:96:78:32:4e:
74:e5:19:32:05:a5:c3:7c:42:70:de:9e:12:68:00:
b6:ef:f9:98:d0:33:58:54:2a:27:e4:ee:44:e0:90:
4d:5a:dd:ec:6e:89:b6:6a:e3:c5:4f:b3:03:f7:73:
21:75:75:c3:72:a5:35:a8:40:cd:02:23:02:3e:81:
50:cf:9e:98:99:dd:f7:2a:d4:d8:ec:9c:fb:0c:e3:
03:94:fb:40:43:e7:44:71:22:f4:e6:fb:dd:50:ec:
25:0c:21:bc:b4:25:3a:e8:b7:27:a5:2f:9e:f6:0f:
5a:8c:9e:12:21:78:2a:75:6e:4c:d7:13:6c:df:e6:
96:0b:99:3a:26:4e:9f:a8:67:81:a4:2b:1f:3e:d1:
f1:cf:3b:81:78:d0:25:5b:7f:45:31:f3:c9:ef:a3:
4b:92:45:dd:d7:40:07:db:cf:be:03:f9:ad:23:cb:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:68:58:9C:78:65:50:B2:47:06:0D:D3:18:49:4A:3F:AC:0A:BE
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ef:e3:c0:48:ce:49:c7:5e:80:83:95:83:60:61:a0:e5:bd:
fb:1e:70:04:79:f7:8e:f3:5f:2c:c2:a9:1c:77:73:58:29:b7:
3a:0d:9f:d5:37:4b:7b:df:d6:6b:d1:72:06:af:3b:8e:0b:5d:
5c:8e:1c:c7:6b:87:b6:90:41:48:ec:1c:fa:67:63:df:67:e4:
04:d3:08:86:cc:10:94:78:c1:a6:8e:38:c3:f0:39:17:52:e4:
2f:6c:46:47:f1:3d:70:56:bd:21:ba:fa:18:3d:7b:c7:ee:9d:
bd:f8:69:f0:cd:ef:5f:62:11:99:68:81:6b:be:94:37:8f:5d:
2e:97:7f:c1:8f:99:f7:c5:10:dc:52:85:41:1b:7b:be:2a:e9:
fd:b6:28:bd:d3:ea:47:91:dd:bc:c3:ce:5b:3d:ae:34:ec:df:
f4:68:5c:b9:c2:0d:b2:17:85:47:21:6c:68:80:79:3c:cf:de:
25:10:8f:90:3c:26:86:28:50:c7:74:ac:9f:4f:cd:42:47:5e:
38:76:3c:81:6a:80:13:43:63:df:66:0c:52:2d:e0:51:9b:a5:
39:99:2c:03:19:6d:76:ef:ae:75:27:19:b4:68:4d:69:44:87:
d0:ab:f4:4a:5b:aa:53:97:72:03:be:bd:fb:c1:92:c5:95:aa:
33:ea:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:31 2026 by rpki-client