Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: Ha49NkxkDdN0u8dh1TXxd7g4i1v4BVneCUoh9dAGmIE=
Subject key identifier: 3B:B1:28:7D:94:E6:22:6D:D7:00:2A:72:7C:3D:33:7F:DA:12:C5:83
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 01A102492883391C7318E5652AF337AB6E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 11A7
Signing time: Sat 03 Oct 2026 15:01:51 +0000
Manifest this update: Sat 03 Oct 2026 15:01:51 +0000
Manifest next update: Sun 04 Oct 2026 15:01:51 +0000
Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: YaQbEuyi3s+fMc7GpI+LGuW6h+5iZOon60UqqZEATc8=)
2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:28:83:39:1c:73:18:e5:65:2a:f3:37:ab:6e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Oct 3 15:01:51 2026 GMT
Not After : Oct 4 15:01:51 2026 GMT
Subject: CN=3bb1287d94e6226dd7002a727c3d337fda12c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:9e:23:3c:e9:80:76:2d:57:58:49:04:bc:
35:0d:81:63:3b:c5:24:5b:64:00:8c:78:74:ba:61:
10:05:8b:09:19:c4:0e:cb:2d:e6:6e:12:ab:f9:21:
7c:f0:6a:f0:17:74:18:cd:07:9f:6f:77:db:02:9d:
7c:e8:5b:cc:53:57:5f:97:e5:34:18:22:a4:48:37:
3f:b5:e0:e0:d1:19:25:f1:c1:6d:bf:73:fa:fb:34:
23:e8:81:be:18:2b:e3:c7:b1:e8:91:05:f1:95:32:
c9:41:b4:11:19:5b:db:c9:43:3a:45:e1:9f:46:3d:
5b:a3:b8:7f:d9:d7:54:8b:80:59:02:05:77:04:52:
52:42:1b:b4:06:0f:66:c2:59:c0:f8:b7:34:cd:44:
1e:72:68:d9:a7:fa:c3:b6:14:17:9b:f7:22:91:54:
4b:6e:1c:65:96:db:c3:4f:fb:03:4d:de:52:a6:83:
6b:93:95:a3:66:f7:a3:8b:80:36:eb:6f:44:35:58:
7a:e9:78:f0:33:c1:73:4e:ef:cd:f3:13:e1:b4:58:
90:9a:17:7e:da:82:6a:3d:21:eb:c9:29:3e:7d:be:
c6:5b:17:6d:7f:53:e5:e6:02:2a:83:37:08:ba:9a:
e9:c1:de:54:d0:0f:69:b3:4a:7b:fa:3f:d7:e7:a5:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:28:7D:94:E6:22:6D:D7:00:2A:72:7C:3D:33:7F:DA:12:C5:83
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:19:80:ce:ab:9a:44:9b:96:52:20:b7:1b:18:56:ba:9b:
69:92:e3:b7:12:b7:7b:44:26:ff:2a:3e:83:ba:bc:72:a6:08:
60:44:2d:67:37:a4:fd:ac:6c:d0:5d:70:7d:72:dc:39:0c:ab:
7e:30:58:e5:cb:ed:05:9c:28:ea:ab:3f:c9:85:71:f1:a7:7d:
e4:bc:55:df:ea:8c:71:a1:35:52:68:4d:1e:0b:0e:d2:e5:5f:
bf:b1:1b:7a:33:1b:d6:63:3c:42:ad:a8:00:c9:18:be:a4:d1:
3c:8d:69:aa:89:9d:5c:8c:e9:83:ec:8b:b5:29:8c:aa:fb:91:
31:2b:a7:da:61:fb:e3:a9:a2:a7:60:35:d3:0f:34:8d:34:cf:
d8:66:f9:7c:27:04:ea:8a:88:a8:fb:77:98:45:1b:e6:4c:d0:
dc:b7:5c:fe:0a:00:1b:ad:f6:cb:17:15:33:c5:f0:fb:85:72:
12:c2:0c:8d:f7:4a:fc:f2:7f:98:c9:1c:d0:cf:e2:d6:83:bd:
1c:a4:fa:88:19:eb:39:49:19:da:a4:16:be:0f:7c:1e:e2:4d:
33:fe:27:95:e8:80:ab:23:0b:38:fd:20:a7:ec:4e:67:25:69:
03:85:5a:28:c5:01:9a:98:f1:26:4c:9f:e9:08:8a:69:cb:10:
b5:c4:ca:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSSiDORxzGOVlKvM3q24pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1
ODJiNmMwHhcNMjYxMDAzMTUwMTUxWhcNMjYxMDA0MTUwMTUxWjAzMTEwLwYDVQQD
EygzYmIxMjg3ZDk0ZTYyMjZkZDcwMDJhNzI3YzNkMzM3ZmRhMTJjNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzSeIzzpgHYtV1hJBLw1DYFjO8Uk
W2QAjHh0umEQBYsJGcQOyy3mbhKr+SF88GrwF3QYzQefb3fbAp186FvMU1dfl+U0
GCKkSDc/teDg0Rkl8cFtv3P6+zQj6IG+GCvjx7HokQXxlTLJQbQRGVvbyUM6ReGf
Rj1bo7h/2ddUi4BZAgV3BFJSQhu0Bg9mwlnA+Lc0zUQecmjZp/rDthQXm/cikVRL
bhxlltvDT/sDTd5SpoNrk5WjZveji4A2629ENVh66XjwM8FzTu/N8xPhtFiQmhd+
2oJqPSHrySk+fb7GWxdtf1Pl5gIqgzcIuprpwd5U0A9ps0p7+j/X56WlFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuxKH2U5iJt1wAqcnw9M3/aEsWDMB8GA1UdIwQY
MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt
Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2
LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4gZgM6r
mkSbllIgtxsYVrqbaZLjtxK3e0Qm/yo+g7q8cqYIYEQtZzek/axs0F1wfXLcOQyr
fjBY5cvtBZwo6qs/yYVx8ad95LxV3+qMcaE1UmhNHgsO0uVfv7EbejMb1mM8Qq2o
AMkYvqTRPI1pqomdXIzpg+yLtSmMqvuRMSun2mH746mip2A10w80jTTP2Gb5fCcE
6oqIqPt3mEUb5kzQ3Ldc/goAG632yxcVM8Xw+4VyEsIMjfdK/PJ/mMkc0M/i1oO9
HKT6iBnrOUkZ2qQWvg98HuJNM/4nleiAqyMLOP0gp+xOZyVpA4VaKMUBmpjxJkyf
6QiKacsQtcTKiQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:39 2026 by rpki-client