Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: dnRuqCbFW30V8K6FVGR+/sI06AllQH7xUW1m8Ob/SLQ=
Subject key identifier: BA:D8:F6:9D:5C:AF:97:75:19:33:1D:43:0A:4F:B9:97:0B:CF:3B:86
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019E2881C11E9D3E6FEA12E743C19CE47245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 190D
Signing time: Thu 14 May 2026 22:00:52 +0000
Manifest this update: Thu 14 May 2026 22:00:52 +0000
Manifest next update: Fri 15 May 2026 22:00:52 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: wz46uMJSbaOC98C0L/nLAmI/REojtnQtvtn/qtuoRTA=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:c1:1e:9d:3e:6f:ea:12:e7:43:c1:9c:e4:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: May 14 22:00:52 2026 GMT
Not After : May 15 22:00:52 2026 GMT
Subject: CN=bad8f69d5caf977519331d430a4fb9970bcf3b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c6:ab:56:a2:81:17:cc:b0:f1:a6:9c:8a:5d:
e4:9f:5b:3c:34:7c:e2:05:87:eb:8f:59:45:7d:bd:
2a:0f:0e:c6:7b:a9:47:82:ac:b9:7a:1a:bc:0f:98:
70:0f:d3:bd:c9:78:89:67:7e:f9:69:a7:ca:d0:06:
21:d6:68:19:40:af:c0:31:6e:1c:46:db:df:6f:a9:
19:a1:bc:01:01:94:c6:32:49:14:85:e9:87:79:a9:
7e:88:2d:f9:cd:f8:ff:42:07:4a:20:15:fd:99:e8:
f0:7c:8f:41:61:ef:3b:ad:e0:aa:9a:cd:0f:fa:ec:
c7:28:69:95:cd:26:e1:dd:2b:95:e0:03:fa:03:4a:
86:d2:87:3f:1a:08:f6:63:74:87:fa:be:18:02:f8:
d9:b9:59:ba:15:4e:78:ee:47:99:7b:d8:5e:39:52:
c3:80:e5:b0:60:44:96:6c:76:bb:87:2d:b1:bf:39:
d3:96:80:3d:0a:17:f0:19:34:62:d9:53:6f:60:90:
f0:9c:8c:c2:85:5a:ff:bd:6a:6f:72:f3:1e:61:46:
86:bd:4f:f0:a9:aa:d6:74:f3:c0:96:b2:12:f0:13:
08:65:52:4f:c8:e5:07:a7:ad:81:72:23:2e:d2:69:
94:45:db:ff:8c:ae:f1:84:0c:65:29:99:44:b2:f8:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:F6:9D:5C:AF:97:75:19:33:1D:43:0A:4F:B9:97:0B:CF:3B:86
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2e:32:97:79:96:34:6d:2e:cc:d2:37:2d:9e:ed:19:74:47:
27:1d:53:cb:b9:e0:f0:eb:95:cd:e5:26:74:1e:32:34:9f:7c:
52:7a:2e:9f:da:f1:85:a5:e8:79:2a:85:e9:4d:41:d7:3d:37:
88:73:16:0b:fb:5f:c6:85:53:d5:04:65:86:97:be:95:25:9e:
c3:be:b6:10:45:2e:e2:38:fa:fb:58:61:c5:5f:e4:88:c8:99:
01:29:ef:3a:fc:71:ef:c8:4c:01:75:f1:e1:76:6a:98:cd:f2:
86:23:bf:7b:2a:84:bb:7e:91:3d:4e:60:31:45:21:78:a8:61:
43:d6:52:99:b7:fc:ec:5a:31:f7:1d:0c:04:fe:3d:95:0d:0b:
c6:77:02:2c:75:d4:b3:0d:ac:08:39:98:05:bf:94:31:ec:35:
fd:d3:8f:c7:75:68:58:3f:9a:21:40:dc:4a:0b:a1:2c:f0:78:
80:bf:81:53:e5:fb:eb:83:b1:a0:1c:32:c4:db:60:38:30:b5:
89:bf:2a:85:c4:9f:72:24:70:ac:cd:33:91:5f:c1:92:72:c3:
ed:58:93:b1:2d:e1:23:01:f8:11:8b:6a:cc:40:e8:99:7d:f9:
4f:68:30:24:be:d6:84:17:af:68:71:fb:67:5a:fd:8b:0d:60:
71:cc:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:33 2026 by rpki-client