
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier: 4v9kkpeygo63+tCT5hyCAJI6VoIz2g+jnFxg5OagkAA=
Subject key identifier: 1B:F7:4D:7E:BC:86:F9:92:8C:E9:86:2B:98:71:5E:EB:AD:4A:A0:23
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019FA907C910D60E219D9D0B6E131D0C66B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number: 107E
Signing time: Tue 28 Jul 2026 14:01:27 +0000
Manifest this update: Tue 28 Jul 2026 14:01:27 +0000
Manifest next update: Wed 29 Jul 2026 14:01:27 +0000
Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: D4HoYtORVh+SFXlWB/hNgTFApEIjurJ7tVBJh34JYew=)
6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:c9:10:d6:0e:21:9d:9d:0b:6e:13:1d:0c:66:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jul 28 14:01:27 2026 GMT
Not After : Jul 29 14:01:27 2026 GMT
Subject: CN=1bf74d7ebc86f9928ce9862b98715eebad4aa023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:aa:cb:fb:bf:28:31:44:f8:b4:82:7f:25:
73:6a:18:15:65:93:ff:4c:e1:56:b2:3f:ed:66:11:
a2:28:01:c7:11:99:1e:96:72:77:07:e1:08:ae:6a:
ae:0e:97:07:91:89:df:99:a5:ab:43:9b:7f:74:d4:
19:bd:1a:01:fd:e9:f8:d4:b2:88:01:a2:65:f4:b2:
26:9a:4f:5b:d4:50:40:0e:33:37:01:68:87:1a:88:
c4:45:d3:44:42:b5:8d:1c:47:fb:e2:0c:44:d4:33:
ae:85:ec:f3:b0:b0:1d:e4:e3:57:5b:50:46:4e:e0:
92:e3:1a:c5:da:1a:90:e1:41:6f:f6:7a:a6:e5:98:
72:3d:54:e7:32:38:c6:64:9a:4f:4a:ae:2e:2b:05:
a5:4f:30:70:e8:78:6c:4c:69:73:00:1b:73:42:e4:
36:cb:e4:00:77:72:5b:fa:e4:66:ca:8b:f7:fb:3f:
9d:da:28:80:08:91:18:a2:29:a7:72:16:ce:11:a6:
a8:da:92:29:5b:48:39:49:0c:ad:eb:e5:74:11:6a:
b0:4e:ec:64:12:86:4c:cb:e1:bb:94:9d:1c:08:d1:
70:bc:d2:66:58:93:14:a7:3a:b5:59:5b:2e:36:90:
e6:3f:e0:33:1f:fb:c1:2d:08:82:1d:3e:af:f6:be:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:4D:7E:BC:86:F9:92:8C:E9:86:2B:98:71:5E:EB:AD:4A:A0:23
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:73:40:83:6e:bb:87:62:96:c5:0f:95:3e:d6:e5:ee:7e:
14:cf:ba:dc:b6:5e:6f:38:8b:60:6e:51:c4:40:af:c1:70:86:
5c:8e:de:43:79:5f:85:30:5a:3c:0b:3c:f0:d0:4c:ba:e8:00:
34:ab:0b:41:02:a5:85:2b:fe:38:d6:2f:fb:08:13:63:7c:5d:
c7:15:38:69:ff:66:0a:66:46:58:10:78:5d:23:1e:f2:aa:0e:
92:30:68:3f:e4:8e:6b:1e:04:07:4a:c6:8f:95:3c:98:7e:e0:
ff:ba:23:e0:db:09:17:10:65:45:ab:61:a1:d3:ce:87:a8:a3:
9e:25:79:4e:6c:85:80:b7:1b:b5:da:0a:84:3d:7c:2b:78:3d:
4c:e6:9e:6c:cb:d6:bb:5e:ae:df:8e:1b:5e:6f:df:1d:11:f3:
05:c8:7b:20:de:11:34:f5:80:31:df:f2:76:47:bb:05:ee:4e:
35:6d:6b:45:8b:48:73:25:99:97:1a:12:36:e3:45:0f:09:49:
03:9c:11:fd:1f:52:ec:a2:9c:91:3e:dd:79:50:8a:c6:da:f2:
10:1f:2a:e1:89:70:2c:57:ca:ee:55:88:74:b9:6a:8a:f5:cd:
35:fe:25:62:b4:d1:3f:dd:40:99:1f:64:b5:ea:7e:73:a0:ec:
c5:85:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:34 2026 by rpki-client