Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: RzMdhB4YPMZz5qVF4igIixt3eYlpKZiw552giFm2QUQ=
Subject key identifier: 57:4D:8C:CC:7A:72:B4:E1:F6:92:95:3F:A4:11:C8:63:DC:D6:91:00
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 01A0D7279EE5F7A176974E8E109C9B5DACE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1A79
Signing time: Fri 25 Sep 2026 06:01:33 +0000
Manifest this update: Fri 25 Sep 2026 06:01:33 +0000
Manifest next update: Sat 26 Sep 2026 06:01:33 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: bd3FOha8JALnyDYGIlSOITSJBhF54FXgX2yMDiBsMvc=)
2: kfw5lT51mmJB9r-mzPnYBcO07ic.roa (hash: lu7TOjtxr8LPfyeKuliFVqXP9APAZsRzOs+MqTY5wZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:9e:e5:f7:a1:76:97:4e:8e:10:9c:9b:5d:ac:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Sep 25 06:01:33 2026 GMT
Not After : Sep 26 06:01:33 2026 GMT
Subject: CN=574d8ccc7a72b4e1f692953fa411c863dcd69100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:98:10:fc:f2:45:ed:ba:18:a9:8d:de:b9:
be:46:6c:4c:51:58:32:94:7d:40:ce:e2:59:99:3a:
f3:f4:5e:ab:bf:b2:46:f1:1a:84:41:2d:4b:c0:ef:
7e:50:8e:20:41:e3:25:d2:82:d5:e7:39:d0:05:e9:
29:9e:e0:f7:4e:c2:e9:68:68:84:7f:00:01:1f:c0:
67:6b:1e:b1:8a:e5:7f:24:6b:84:cd:ae:c2:b8:bc:
d3:c3:ef:d4:71:ce:5a:8e:20:ea:ae:d6:de:29:de:
3d:78:5a:f9:e4:0e:cd:5c:0a:86:43:a9:a4:ec:db:
53:0f:eb:fa:a9:e9:69:69:bf:15:3c:28:9c:68:dd:
af:7a:01:85:1d:88:67:f9:21:17:24:dc:d8:28:42:
2f:23:ef:84:91:89:3f:71:a6:26:e8:1e:8f:f7:9f:
9c:2f:aa:5f:50:7e:b8:fb:00:34:bd:de:05:05:8b:
f6:84:fb:5b:d0:7f:2d:90:55:6f:20:58:6e:9c:83:
67:4a:76:48:78:54:60:b7:09:94:ab:40:b6:98:c2:
da:2e:80:7b:5e:56:f8:40:39:1b:ac:4b:2f:af:11:
f5:cc:89:24:b4:e5:93:8a:50:89:36:2d:14:d6:c8:
10:23:1c:0a:08:0f:43:8f:02:35:8b:03:29:e8:1b:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:8C:CC:7A:72:B4:E1:F6:92:95:3F:A4:11:C8:63:DC:D6:91:00
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:a8:f8:3f:d2:e2:66:40:64:53:74:16:d9:8e:67:c0:5b:
f1:c8:40:5e:01:70:b7:ae:9d:a5:8d:1b:5c:47:6d:6e:ca:d2:
a9:7d:89:69:ca:0f:04:08:bb:dc:b4:29:1b:a9:c7:0f:73:b2:
76:08:b6:84:cf:4a:2f:33:87:68:50:ef:fe:dd:cf:47:47:03:
cf:2d:7d:46:90:07:f6:d5:de:b7:b3:ed:c2:27:25:fd:b7:6d:
2f:6e:cb:0d:39:74:f5:9a:7e:97:22:78:d0:dc:26:9f:48:21:
3e:4c:6c:a3:3c:c4:a7:3e:73:8c:48:64:a2:e9:8f:c5:34:66:
22:a8:6b:1e:f8:df:53:be:cb:11:a0:a9:61:52:4a:a4:68:ee:
fe:22:48:f3:89:cf:2e:16:2b:1f:1b:0f:b2:7c:cb:c4:62:a1:
53:7e:96:f7:5b:ec:c6:f1:cd:08:b6:01:c8:74:24:97:1c:5d:
36:33:e7:e1:77:f3:34:22:68:b0:39:f2:ac:8f:97:c7:ca:c6:
47:b9:f4:2f:fe:db:a6:10:68:d8:c8:b7:c9:66:fd:9d:fd:d5:
5f:d3:36:ee:07:fc:72:8f:13:15:17:04:71:f6:ad:31:80:2e:
a4:a6:8c:bd:2a:9c:ba:da:88:24:90:3b:de:f7:f5:9f:55:df:
d8:f1:f7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ57l96F2l06OEJybXaziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjYwOTI1MDYwMTMzWhcNMjYwOTI2MDYwMTMzWjAzMTEwLwYDVQQD
Eyg1NzRkOGNjYzdhNzJiNGUxZjY5Mjk1M2ZhNDExYzg2M2RjZDY5MTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrqYEPzyRe26GKmN3rm+RmxMUVgy
lH1AzuJZmTrz9F6rv7JG8RqEQS1LwO9+UI4gQeMl0oLV5znQBekpnuD3TsLpaGiE
fwABH8Bnax6xiuV/JGuEza7CuLzTw+/Ucc5ajiDqrtbeKd49eFr55A7NXAqGQ6mk
7NtTD+v6qelpab8VPCicaN2vegGFHYhn+SEXJNzYKEIvI++EkYk/caYm6B6P95+c
L6pfUH64+wA0vd4FBYv2hPtb0H8tkFVvIFhunINnSnZIeFRgtwmUq0C2mMLaLoB7
Xlb4QDkbrEsvrxH1zIkktOWTilCJNi0U1sgQIxwKCA9DjwI1iwMp6Bv/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdNjMx6crTh9pKVP6QRyGPc1pEAMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJASo+D/S
4mZAZFN0FtmOZ8Bb8chAXgFwt66dpY0bXEdtbsrSqX2JacoPBAi73LQpG6nHD3Oy
dgi2hM9KLzOHaFDv/t3PR0cDzy19RpAH9tXet7Ptwicl/bdtL27LDTl09Zp+lyJ4
0Nwmn0ghPkxsozzEpz5zjEhkoumPxTRmIqhrHvjfU77LEaCpYVJKpGju/iJI84nP
LhYrHxsPsnzLxGKhU36W91vsxvHNCLYByHQklxxdNjPn4XfzNCJosDnyrI+Xx8rG
R7n0L/7bphBo2Mi3yWb9nf3VX9M27gf8co8TFRcEcfatMYAupKaMvSqcutqIJJA7
3vf1n1Xf2PH3yw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:42:07 2026 by rpki-client