Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: lFB6bSvnAQwskZWUyqzAyv259QInEBbfCYeXrhoLzmQ=
Subject key identifier: 1E:56:BA:39:8D:30:55:F7:25:15:15:5B:B5:FC:B8:2C:21:47:08:AA
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019F122EC4C6CF37F3B4649EF358CF294FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 07:01:22 +0000
Manifest this update: Mon 29 Jun 2026 07:01:22 +0000
Manifest next update: Tue 30 Jun 2026 07:01:22 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: vx9kWzvfDNz59/IHVzIKTaJXkmLpbnUzg4+xwVFJl60=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:c4:c6:cf:37:f3:b4:64:9e:f3:58:cf:29:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jun 29 07:01:22 2026 GMT
Not After : Jun 30 07:01:22 2026 GMT
Subject: CN=1e56ba398d3055f72515155bb5fcb82c214708aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:d9:d5:5b:47:1e:da:0b:e8:30:47:b1:5b:
fd:63:e9:80:aa:6b:a6:a0:0c:bb:cf:37:e0:b8:c5:
4f:8d:79:e8:2a:6f:b6:0c:bc:05:1b:dc:2a:01:39:
56:eb:70:28:b7:ff:60:b9:1e:75:f3:7f:57:31:29:
f9:da:69:78:93:3e:3f:f6:47:14:8d:af:ac:a6:6a:
7f:79:36:05:f5:77:00:0d:50:fa:ff:42:cf:5d:a4:
16:4f:8a:af:43:48:e7:ab:d3:f6:f8:c1:24:af:81:
66:0a:3a:a5:8a:b6:68:45:99:b8:51:52:47:a6:66:
e0:db:ba:e6:b9:fe:ac:d7:ed:e6:82:34:20:67:60:
ba:2c:94:e1:9e:85:4f:cb:a7:d7:23:54:19:84:39:
52:7e:36:24:99:46:e6:69:74:86:64:ba:d5:2b:5f:
e4:96:df:87:0d:cd:dd:82:9b:0a:08:8f:36:88:9a:
6d:ec:09:09:12:5a:ec:eb:c6:4a:a3:f1:f9:b7:f3:
57:1f:1e:b7:71:89:2f:71:2d:1d:dc:b1:73:74:df:
6e:3b:35:44:df:18:b0:55:1b:c0:14:07:9a:52:a1:
a3:13:2e:df:81:11:9d:b3:fb:1a:2c:17:f4:a3:76:
29:6e:b6:5b:09:2e:9a:fc:6c:dc:cf:7f:85:d7:51:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:BA:39:8D:30:55:F7:25:15:15:5B:B5:FC:B8:2C:21:47:08:AA
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:ff:ef:0a:21:33:ef:05:e7:af:47:0a:4a:53:73:71:d2:
bb:5c:bf:f1:81:4d:9e:c3:de:bc:56:6d:0a:2a:e5:52:2d:42:
95:d4:f2:be:72:38:02:2f:1e:98:42:67:29:1e:5d:cb:75:10:
be:77:7d:37:8b:e7:40:18:23:71:a4:2e:e2:29:7f:da:a5:39:
5c:7d:1c:c2:8f:b4:5c:1f:fa:ff:f2:dc:47:19:3d:12:5d:7e:
cb:5b:45:2f:8c:98:75:d6:95:cd:be:28:ad:b6:7d:1c:46:2e:
7a:d5:10:ef:fe:c9:54:ca:98:c7:be:cc:40:ac:29:5d:8c:47:
f9:ce:76:7c:0d:56:6d:44:ed:08:e2:9e:cd:6d:e8:e7:15:4a:
30:b6:a5:98:b4:6e:e5:37:b2:a1:49:28:2e:0e:a7:09:03:55:
63:4a:bb:a1:8a:b1:9d:05:9b:ae:61:d3:81:f5:aa:ec:df:de:
83:dd:0f:ee:de:c3:32:11:d4:32:de:f3:92:67:e2:91:02:db:
5a:8a:f6:35:df:cf:0c:37:4e:7b:ad:72:87:be:64:5d:bf:59:
42:fa:ad:c0:53:ae:2b:9e:ad:f5:34:98:bc:7f:3c:61:5e:66:
15:d7:8d:a9:83:78:b7:57:e8:c8:e4:9b:58:ae:78:4f:28:40:
4a:23:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:43 2026 by rpki-client