Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: 4usjb+4qJg+fcf5SD4jkELc+ouM8NULOW+I+/ZdfqJ8=
Subject key identifier: B8:25:9C:23:45:86:FE:3C:CB:9F:00:FF:15:0D:1D:A7:2B:09:3B:86
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 019D341A3398DC8B26A7767959891501E6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1894
Signing time: Sat 28 Mar 2026 11:00:25 +0000
Manifest this update: Sat 28 Mar 2026 11:00:25 +0000
Manifest next update: Sun 29 Mar 2026 11:00:25 +0000
Files and hashes: 1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: n8yv1c+68aTPpxlPsoc3hDvINnri7sh6N3vHN0Rdg6Q=)
5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:33:98:dc:8b:26:a7:76:79:59:89:15:01:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Mar 28 11:00:25 2026 GMT
Not After : Mar 29 11:00:25 2026 GMT
Subject: CN=b8259c234586fe3ccb9f00ff150d1da72b093b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:9c:39:49:e5:09:e2:37:ec:8c:88:3e:82:
05:05:68:7d:af:01:e0:c1:a4:b5:25:04:e6:2f:46:
76:8b:70:26:06:bc:16:b1:f0:f7:29:6c:2e:88:18:
31:7c:7d:e6:7b:4b:62:ee:81:50:5e:35:8e:f9:2c:
6b:70:a9:51:e1:61:ec:2d:e2:1b:96:de:d9:19:1f:
0a:11:ce:b0:75:d7:97:3e:78:6d:11:4d:50:82:41:
04:fb:fe:f1:e7:34:4c:16:35:6a:91:c8:1e:19:ef:
eb:c4:26:81:5b:f0:fe:99:99:e1:3f:b0:d7:ae:41:
a0:fb:31:de:c1:28:e8:62:55:90:f2:81:43:fd:78:
00:6a:31:66:a2:76:21:bd:e1:31:2d:26:68:fe:4b:
2b:66:e3:00:bb:e9:00:34:19:20:32:c7:a5:95:87:
96:4d:df:8b:0d:29:b7:c4:26:0e:17:49:25:f6:16:
9a:76:a7:e4:a0:55:ac:86:2a:b0:7a:27:f0:05:25:
cc:25:fd:2b:62:12:fb:5e:8c:f2:c1:c8:c8:8b:7a:
3a:8f:62:12:ea:8f:f4:47:9a:6d:e5:2d:5e:56:cd:
aa:bd:fd:5d:73:87:20:7e:df:13:ac:42:ad:b4:87:
65:c4:9c:f4:2e:9b:5d:c8:71:1a:f4:f8:73:24:4e:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:9C:23:45:86:FE:3C:CB:9F:00:FF:15:0D:1D:A7:2B:09:3B:86
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:22:38:be:ff:ae:fe:3a:5d:c2:ec:7a:50:e3:84:56:c4:81:
04:51:8e:87:da:72:eb:c2:f4:39:df:ab:6e:d4:c1:63:d5:f4:
5a:30:cd:5f:c7:cd:63:9c:17:2f:85:40:36:c1:1e:56:12:85:
19:dd:85:62:67:24:81:8f:68:d3:ef:c5:4d:99:ba:2c:23:0d:
2c:08:80:40:a2:7f:c1:b5:3a:e6:fc:60:fa:08:37:04:65:77:
f4:91:10:25:a1:9c:7e:df:17:86:81:81:3b:e4:df:3c:6e:26:
35:44:17:2b:a3:8c:91:8e:25:d0:32:30:e0:44:9a:cf:c5:57:
77:49:22:dd:37:66:b5:30:c9:5f:3a:e1:9d:6d:6f:74:06:d6:
93:92:87:0d:d8:85:fd:7d:af:90:e9:72:e9:34:ae:2c:cc:b4:
30:59:a8:61:7a:eb:84:ba:6d:b5:b7:1d:d1:8d:01:35:12:d2:
bc:22:89:ce:a6:66:3f:13:a9:ca:6d:4f:66:0c:71:7b:7b:9e:
a6:d9:93:f6:7c:01:f7:64:2f:e8:40:de:c6:1e:24:97:66:50:
b2:57:fd:91:dc:b8:ea:08:03:38:71:45:05:1f:e0:ef:7b:9b:
d7:c7:48:69:70:fb:87:48:78:cc:9a:2e:31:ee:6e:e6:4e:57:
58:d8:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:49:04 2026 by rpki-client