Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: 56s2G6LE7ax9da7hqABDjwxytsyGoaWNEyAXKx2EI0w=
Subject key identifier: 33:0C:D3:3B:EC:0A:F6:F6:FE:3B:74:C4:B4:B2:9E:F5:5A:29:F0:F6
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019F11C0C92346BD50D268637C0EEC9EE407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 05:01:14 +0000
Manifest this update: Mon 29 Jun 2026 05:01:14 +0000
Manifest next update: Tue 30 Jun 2026 05:01:14 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: e1UUoRHa0esZE+zIPMODPnk68bVIvTANbIfBRBQnzZk=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:c9:23:46:bd:50:d2:68:63:7c:0e:ec:9e:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Jun 29 05:01:14 2026 GMT
Not After : Jun 30 05:01:14 2026 GMT
Subject: CN=330cd33bec0af6f6fe3b74c4b4b29ef55a29f0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:0f:bf:41:97:84:3f:ec:c9:31:24:4b:73:
0a:cf:4b:4f:9e:2e:33:e6:2f:16:88:cb:8b:31:6e:
bf:e0:40:d4:65:c8:8f:c2:44:92:90:ac:ce:17:99:
24:ee:b6:9b:ab:e8:58:38:a9:99:4b:5e:32:6d:6b:
59:b9:8b:6a:cf:f0:d3:b7:43:c0:2e:42:21:57:fc:
06:ae:3f:f2:31:65:2f:51:aa:a0:a5:39:b5:58:e0:
d4:d3:60:1e:ba:96:a0:90:b4:5d:76:1c:49:e6:a7:
db:24:20:cd:d8:a8:7b:ee:36:12:f6:77:48:ba:36:
9f:72:c5:e0:e3:d9:91:e5:99:a3:f5:00:e8:19:33:
df:66:1d:88:11:1d:25:0b:9f:0b:7d:76:f6:93:14:
12:71:4f:bb:20:55:0b:b3:5d:d9:eb:a8:64:73:21:
84:09:60:56:5d:32:ab:93:14:a7:f7:bb:34:cf:c7:
95:0a:96:78:25:e7:9c:95:33:b7:a5:c1:b3:d5:ad:
b0:c5:45:40:53:09:24:d4:61:29:be:49:5b:86:ef:
e9:4e:d0:0b:a7:6b:b0:6f:63:ef:87:87:ad:ab:d8:
97:87:ae:fa:0a:0f:b5:1f:c0:1e:8e:b9:4b:e6:79:
f5:ea:fa:67:8f:fe:ae:de:68:c6:e6:e9:c3:4f:82:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:D3:3B:EC:0A:F6:F6:FE:3B:74:C4:B4:B2:9E:F5:5A:29:F0:F6
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:b7:aa:c7:f7:99:41:f1:85:bc:0c:9b:41:77:5c:98:5b:
f0:db:f0:a0:67:0f:27:bb:11:c2:d7:e8:fd:3d:4e:05:ee:2c:
db:b8:5a:28:24:16:ab:41:55:79:09:1a:82:7e:2a:a2:f8:37:
f2:ca:66:41:fc:b2:a5:f4:72:ba:d8:83:d9:a4:53:22:95:b5:
63:ab:d5:03:5b:b5:da:e4:be:e8:d5:7c:84:31:84:08:69:ed:
08:68:40:54:fb:ef:00:0b:18:a2:26:43:fd:c1:6c:25:d4:a5:
52:43:2b:09:6d:ad:ab:81:11:43:b5:7c:1b:9e:f8:36:69:4a:
8f:ac:ca:74:cc:0f:08:b6:db:5f:5a:0d:77:5c:99:d5:2c:60:
47:08:3b:ab:45:5c:86:1e:3a:af:8a:6f:77:38:3f:b3:61:75:
da:db:18:74:bf:c1:e5:f1:74:be:e3:79:66:8c:b2:a8:cd:a8:
53:98:99:2d:49:96:59:53:16:4a:1c:60:8b:9a:eb:45:31:57:
5b:d8:b6:e3:0e:35:ee:e3:e1:71:79:22:1f:f4:d5:e3:f2:ce:
09:46:13:81:8f:8f:a7:c1:0a:a8:37:b8:12:3f:f5:93:eb:3d:
bd:0e:4a:99:89:19:a5:f4:f1:17:68:6c:58:d1:f0:94:65:b7:
f1:66:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:35 2026 by rpki-client