Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: Hfz3ZTtqK5kHT350RcnFvivqYsxF5CAOW/IMdrd2yVE=
Subject key identifier: 58:D7:86:46:50:02:B2:D6:15:1B:47:7A:5F:B6:FD:E6:D6:D0:2B:85
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019E1EA317FDB62DFF962BE205E7000C7BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 1028
Signing time: Wed 13 May 2026 00:01:05 +0000
Manifest this update: Wed 13 May 2026 00:01:05 +0000
Manifest next update: Thu 14 May 2026 00:01:05 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: 6SJyrxYjmm5Y0fQd3ObRKviTmycn5fAVSqBsD2yTZfg=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:17:fd:b6:2d:ff:96:2b:e2:05:e7:00:0c:7b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: May 13 00:01:05 2026 GMT
Not After : May 14 00:01:05 2026 GMT
Subject: CN=58d786465002b2d6151b477a5fb6fde6d6d02b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:f1:35:01:e1:66:7e:a9:ab:5e:30:38:37:
52:36:54:c3:0c:55:e8:dc:d7:50:d7:f7:d3:de:58:
4a:6d:bc:3b:90:aa:4b:69:b4:10:75:9c:3e:4f:60:
1f:b3:01:35:32:70:4d:0f:c7:95:b8:d1:67:e1:a4:
d2:74:ad:cd:2b:34:77:53:7a:7f:14:03:59:7b:1c:
a9:b5:77:26:f4:29:3b:54:0a:79:69:32:7b:8e:e5:
3e:6f:b4:f2:3e:5a:65:1e:ce:16:c5:cc:1a:94:e2:
24:8b:e7:12:88:eb:57:05:7e:60:70:e6:1b:6b:e6:
80:d1:08:ce:5a:99:8f:2b:14:e6:62:82:a3:1a:15:
cb:d8:97:f6:22:84:9a:27:2e:96:26:a0:ef:ba:3f:
0f:d8:30:cb:df:e2:72:4e:81:62:00:c5:b5:1b:be:
34:a0:c4:d2:7a:e8:de:eb:55:93:85:e2:7d:7a:cc:
b3:1a:23:c9:eb:b3:56:10:24:85:45:54:80:19:f7:
48:4d:a0:11:15:8a:f8:11:41:5e:3b:ca:77:59:f8:
ca:32:a9:e2:fc:66:16:80:46:32:ca:c6:30:eb:8f:
51:9e:65:57:91:86:c4:d9:db:53:8c:3b:26:59:b0:
ab:bd:9c:ac:5a:96:70:5c:5e:e0:f9:64:47:3c:87:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:86:46:50:02:B2:D6:15:1B:47:7A:5F:B6:FD:E6:D6:D0:2B:85
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:35:04:14:5f:b3:e3:20:dd:cb:61:47:86:80:9c:d0:77:c9:
56:48:18:44:4b:34:95:ef:d0:c0:ac:f4:2d:0c:3f:28:f0:3e:
8c:91:55:dd:51:84:b5:93:10:66:48:a9:11:0b:8c:a4:71:05:
df:3c:87:83:b8:fe:3e:c0:ec:e5:df:48:5a:70:78:2b:2e:e5:
06:84:d2:c7:f5:ec:8b:0b:41:38:af:fe:d8:35:63:8f:9c:13:
c5:f9:d2:4b:50:ba:bd:7d:7f:b8:ee:93:80:db:b5:2d:6f:62:
0f:4e:6e:49:59:69:96:f3:02:e2:ee:fd:1c:ea:c3:41:4c:d1:
f9:81:46:8b:9c:3d:ad:5a:e6:ff:a0:3c:c0:64:c3:7f:e6:27:
c1:a7:a0:74:7c:65:72:f1:f3:a3:5f:0f:5a:41:e9:9e:7e:73:
aa:69:e1:12:cc:10:98:12:f2:5d:7a:8f:40:80:71:e8:29:a3:
b0:29:7b:3e:77:80:a0:92:e2:b1:92:15:46:d0:06:1b:d2:37:
02:f9:5e:08:5c:dc:c6:7e:be:5a:9f:69:4c:4c:bc:0e:7b:13:
e7:0c:b2:db:11:ae:e0:16:b0:f7:27:3f:4f:a7:be:03:17:9d:
db:89:99:5d:8d:93:d4:b7:de:28:85:44:cc:1b:43:ec:84:ef:
df:a3:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:46 2026 by rpki-client