Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: DxJhJCDhfhBGweSCKIxNLVJCfuxzsp6giTKhSd2MFWM=
Subject key identifier: C9:28:43:09:02:09:25:ED:02:05:80:E1:53:E0:18:EA:FB:50:F3:C9
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 01A039A6F70D71535A57B5AC0CF53D17EE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1A1F
Signing time: Tue 25 Aug 2026 16:00:38 +0000
Manifest this update: Tue 25 Aug 2026 16:00:38 +0000
Manifest next update: Wed 26 Aug 2026 16:00:38 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: NQx0G+9dGyx6L7izufgggF967vNtbUINUnbHKY6mc5o=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:a6:f7:0d:71:53:5a:57:b5:ac:0c:f5:3d:17:ee:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Aug 25 16:00:38 2026 GMT
Not After : Aug 26 16:00:38 2026 GMT
Subject: CN=c9284309020925ed020580e153e018eafb50f3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:aa:64:31:5b:7b:f5:f1:c3:ba:8e:c9:79:
40:37:4d:b1:8c:0f:99:10:e7:de:e2:01:02:8b:ee:
57:25:8e:b2:b1:cd:75:0c:30:e6:42:eb:92:cd:70:
35:4c:65:13:20:a7:6f:3e:fe:e4:4f:f2:81:b5:1e:
0d:22:d2:66:74:06:27:68:3f:d7:b5:2a:49:32:5c:
67:f5:87:4e:4c:f2:18:cb:82:98:86:a4:be:7d:24:
b0:08:27:a5:22:3a:43:d8:08:73:b7:9a:6a:49:ac:
b1:7b:1b:b9:fe:6d:e1:18:1e:c1:86:61:e6:d3:52:
14:0c:ab:c5:c2:ad:a3:3c:b5:64:0b:75:0c:71:90:
67:71:73:e0:56:37:58:6e:b6:9f:02:45:35:33:3c:
8c:f8:5a:23:7a:e3:f6:c6:1a:03:69:b3:9e:4e:4f:
b8:c3:52:20:46:0c:c7:78:d3:05:62:2e:24:ec:15:
b6:31:66:d2:58:3a:8c:0d:b5:ae:c6:d0:37:79:d7:
d5:20:e1:77:58:89:d7:8f:10:70:70:fd:c6:67:da:
09:21:7b:12:c8:48:e2:b2:05:23:ad:69:62:90:ce:
eb:f7:f3:91:c8:2f:9d:18:ea:8f:04:a3:55:ff:6f:
5d:c2:25:bc:86:a0:24:0b:65:e8:14:39:3d:85:3c:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:43:09:02:09:25:ED:02:05:80:E1:53:E0:18:EA:FB:50:F3:C9
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1c:96:f6:c8:05:66:b3:b9:56:6b:69:e0:d9:d2:ba:25:bc:
85:3e:75:cf:f7:93:ca:32:4e:a0:41:ea:e6:36:b5:f0:a6:0e:
41:44:d5:ff:6d:dc:a3:10:48:70:eb:86:55:9d:d7:99:1f:d6:
08:74:f1:32:93:0c:c9:cb:6e:fa:b3:a3:f3:58:d7:53:3a:30:
5d:86:12:83:98:63:90:de:73:e0:03:37:4a:a8:43:2b:aa:2c:
a2:d2:c1:9b:f5:0d:26:42:de:3b:cd:9a:a6:e4:77:2d:33:2c:
9f:e6:5b:f3:3f:0f:22:63:37:b5:5b:41:a8:7e:fd:ec:6e:2a:
d3:61:68:14:5e:29:d3:a4:d9:86:7e:a7:6d:e0:19:02:eb:d7:
4e:45:0d:74:54:31:02:51:15:f9:e4:5e:46:ad:5d:ab:0c:64:
35:b5:71:21:c2:ff:fc:74:01:3b:49:d2:e5:7a:7b:53:50:7e:
5f:62:f8:7f:93:a4:b1:f3:a1:62:d2:2b:84:ec:79:cb:a2:46:
95:5d:26:a4:bc:b8:42:36:bb:18:4a:33:36:aa:a9:96:e4:d1:
09:2d:76:2b:46:1f:54:2d:9c:c1:40:e9:59:32:06:87:8c:42:
4b:50:6a:ba:43:1f:99:74:60:63:6d:b3:b8:c8:de:27:21:fa:
0a:67:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:42:40 2026 by rpki-client