Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: ry9kXTVytUezkGYmvH21hZH6Tcph6/ncPBHl04lg6WY=
Subject key identifier: 5D:3F:5B:0D:2E:D8:C3:9B:90:76:C8:27:28:72:56:34:97:1A:3B:BC
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019D3909BDD5F2C78549616FC751A36D31AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: Dk0rbZsr+sMwRzlo9xBnVAeRxb6LeViZBQFWdYQhI4o=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:d5:f2:c7:85:49:61:6f:c7:51:a3:6d:31:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=5d3f5b0d2ed8c39b9076c82728725634971a3bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:a9:d7:0e:13:68:59:39:fc:3e:db:e4:ef:
2a:1b:e9:22:a6:aa:ee:4f:ee:79:31:6d:32:1d:c0:
69:c5:e3:c4:29:c3:ac:35:57:51:21:f6:c5:90:85:
b1:c6:27:46:31:18:ab:99:a0:1d:30:67:d1:2a:c2:
1e:31:a1:36:a3:f2:64:06:5d:1a:65:50:72:88:61:
33:46:91:7c:06:90:05:ea:3f:d1:d8:62:95:1a:f5:
ab:cd:89:ae:69:11:0c:5c:c3:5d:19:2e:ff:4e:18:
de:6d:59:57:39:24:59:fe:3e:8a:b0:d0:ad:fb:59:
4f:cc:df:b2:3a:bc:04:ec:b0:95:cd:5a:2d:a6:4c:
83:be:f7:64:a9:74:5b:bf:9a:61:5f:f9:75:1e:4d:
c8:19:49:d2:ba:cc:d7:bc:c6:a7:a5:fe:8c:57:7d:
74:8f:97:78:80:cb:50:a4:a9:8c:35:cd:39:b2:85:
1c:06:20:6b:eb:2f:8f:2b:8e:45:f3:ad:78:41:56:
60:c6:48:b8:4b:61:a4:51:8d:d4:24:e8:66:fe:e0:
18:36:9f:a7:85:7f:d8:15:a1:0f:4c:35:b8:64:2b:
81:6f:e2:5a:9b:9d:45:e7:89:8d:bd:45:43:b2:1a:
b3:63:5f:f7:80:67:94:22:12:72:3e:b2:d4:27:8d:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3F:5B:0D:2E:D8:C3:9B:90:76:C8:27:28:72:56:34:97:1A:3B:BC
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e0:af:76:26:68:aa:c4:be:df:25:93:ea:97:8e:c8:9d:39:
ae:75:84:68:3d:11:f6:91:e3:75:b5:d2:d2:aa:fd:84:03:a3:
26:02:10:cf:96:5a:4d:1c:86:08:08:0d:9a:ec:0e:c8:6e:33:
9e:db:75:85:9f:78:fd:ae:56:9a:d3:7e:36:22:dd:5e:ab:17:
1b:7a:a5:9b:ca:b0:67:cf:bb:0e:cb:c2:4b:8d:21:04:fe:62:
29:f7:55:29:b4:86:4e:e0:ab:85:3b:ec:ab:82:2b:68:47:4b:
e6:d8:fb:55:64:29:43:05:0a:ac:7f:16:eb:60:2e:b5:af:14:
bc:af:a4:df:01:56:78:36:18:f0:b3:ff:da:4e:de:73:d7:b4:
8a:45:33:3a:68:a5:ca:d3:00:37:50:e4:6d:46:b3:0d:d7:be:
57:05:96:63:85:75:2f:ef:80:eb:63:cf:d0:8d:e7:d1:69:4e:
0c:17:7f:3a:e0:2b:0c:ad:12:40:dc:d7:cb:5a:21:a6:7d:c1:
74:7c:70:ed:08:25:51:0c:d9:32:52:9b:2a:0d:79:27:e7:f6:
b4:67:87:9f:96:eb:15:cd:d6:df:1f:94:d0:00:cb:bb:78:a3:
1e:5c:96:04:b2:5c:ae:33:94:b2:7c:d1:8d:62:5d:fe:ac:47:
69:ea:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:51 2026 by rpki-client