Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: 6BoY7oPnUFMEs09OZBM/D900iwwF1M8eiImY6JDdS10=
Subject key identifier: 2B:42:D7:08:8F:10:F2:59:47:05:B2:F0:96:36:56:98:EB:35:6C:DC
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 019D3608EEF556DBC4341FB0E1CA48EDEDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1895
Signing time: Sat 28 Mar 2026 20:00:48 +0000
Manifest this update: Sat 28 Mar 2026 20:00:48 +0000
Manifest next update: Sun 29 Mar 2026 20:00:48 +0000
Files and hashes: 1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: wwhoqHlaC2qr0LFJVE2n0M/hWioj05BDpvKT8++v13g=)
5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:08:ee:f5:56:db:c4:34:1f:b0:e1:ca:48:ed:ed:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Mar 28 20:00:48 2026 GMT
Not After : Mar 29 20:00:48 2026 GMT
Subject: CN=2b42d7088f10f2594705b2f096365698eb356cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:89:5b:c7:32:40:d2:f7:7f:fb:9f:e6:59:
e7:31:79:9e:3e:d9:1b:d9:5e:75:88:b9:0b:2d:b0:
b1:62:44:6e:c2:0b:0c:af:f9:bb:64:24:7b:44:59:
97:98:da:b4:52:7a:0c:1b:bb:ea:1f:5c:78:00:9d:
32:be:0b:01:71:27:8b:a7:8c:e9:bd:ac:f8:fc:b1:
7c:18:e7:87:cc:a1:18:66:77:42:c1:bd:1e:0e:6b:
87:a2:e4:82:6a:d5:65:c6:55:78:e8:4d:47:dd:d1:
f5:07:02:44:b5:83:d8:7e:83:58:d3:1f:20:81:e7:
7e:96:c1:6e:f2:f4:98:d9:06:5d:a1:c0:9d:9a:73:
33:5b:e5:6c:90:11:6d:a1:28:08:91:7e:e4:d3:86:
1b:ee:d9:57:8f:75:43:41:4f:43:04:a9:4c:5f:27:
87:69:82:f3:89:58:a2:40:4f:73:88:97:55:9f:c2:
54:67:5f:d5:a4:a9:4d:de:e9:fd:8d:f1:0e:8b:20:
ea:19:ec:f3:b7:e6:b8:a9:07:5f:46:79:7e:94:b7:
6f:ce:f6:5b:3f:bc:2c:e7:94:42:13:fd:e5:f9:a9:
f6:37:bd:33:91:ab:30:8f:96:ca:a1:6a:db:5e:5a:
97:ca:c0:81:e3:dd:a5:21:9b:5d:18:7a:0b:e1:9c:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:42:D7:08:8F:10:F2:59:47:05:B2:F0:96:36:56:98:EB:35:6C:DC
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:41:5d:28:80:7b:57:48:6c:35:bb:ff:27:0d:f2:ff:e4:88:
59:ac:ca:4c:7d:62:62:05:c8:71:e7:47:c4:ef:b2:95:10:8b:
7b:7b:99:f8:f9:51:de:be:0e:12:93:4b:7c:f8:ab:b6:56:03:
5e:08:ec:2c:c8:0f:dc:47:ca:36:fe:eb:4e:5a:39:18:2f:f2:
6b:d1:25:99:bd:87:72:a4:98:96:88:47:75:a6:7e:12:05:30:
56:62:b1:4a:92:81:ff:dc:1b:3e:6b:ca:97:55:cf:5d:5f:4b:
14:ee:8e:f9:75:ef:11:a1:52:22:ea:14:58:bd:0a:3d:f1:e6:
97:05:b2:32:30:55:6e:34:7f:93:64:6b:eb:3c:de:b1:d2:0f:
21:cc:8a:87:f5:58:35:2f:24:49:76:6d:ab:ed:cb:cc:88:dd:
2a:60:01:1c:de:d7:d0:5a:24:f7:6e:7a:b8:f3:88:5f:23:30:
1b:65:c8:e5:37:53:24:2f:a8:ea:a4:fb:00:b2:d8:f9:73:6f:
d1:f7:6e:45:b0:6e:ac:09:91:18:d6:10:3c:c8:a9:7e:34:6a:
eb:fe:bb:84:2b:73:36:7d:6b:7f:97:90:a6:ca:4b:70:8c:e4:
3a:17:ea:2f:0e:11:38:d6:a2:13:31:30:9f:08:0b:f3:37:4a:
11:70:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:32:52 2026 by rpki-client