Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: jbBE/Epj5137GDWAeIBxs6NVesnpqvwEYk4Spk9nZpE=
Subject key identifier: FA:DD:11:60:56:34:17:BA:56:99:C3:8D:DD:B1:E7:26:C6:D5:7F:B1
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019CF873832545F2932E910C84E407566859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1878
Signing time: Mon 16 Mar 2026 21:00:45 +0000
Manifest this update: Mon 16 Mar 2026 21:00:45 +0000
Manifest next update: Tue 17 Mar 2026 21:00:45 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: ilVgwdXP5mjm1i25zi2OuD0+tNkkQvR+MuUvqwvzGL8=)
2: kfw5lT51mmJB9r-mzPnYBcO07ic.roa (hash: lu7TOjtxr8LPfyeKuliFVqXP9APAZsRzOs+MqTY5wZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:73:83:25:45:f2:93:2e:91:0c:84:e4:07:56:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Mar 16 21:00:45 2026 GMT
Not After : Mar 17 21:00:45 2026 GMT
Subject: CN=fadd1160563417ba5699c38dddb1e726c6d57fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:fe:f7:14:e6:9c:e7:25:43:f9:fe:18:a0:
01:c6:c1:ad:55:ef:3e:a4:25:65:06:5e:9a:be:d5:
11:e8:73:05:d7:af:04:3e:9a:a7:f2:52:9c:3a:62:
2d:55:ef:c7:7e:96:08:69:3d:65:a3:5e:21:f2:ef:
07:1b:e4:b2:6b:20:9e:0b:ac:1d:f9:3e:5a:7f:b4:
26:73:f6:33:8c:b3:2c:d3:88:b1:b4:28:31:89:e9:
b1:4f:8d:2f:25:b6:15:e4:9a:5b:8c:3e:26:a2:e0:
a9:ce:2a:aa:94:cd:0f:89:ec:5e:77:f8:2e:5f:d2:
26:1e:ea:b0:e9:16:6a:38:07:70:80:9a:54:7b:1b:
a0:a2:71:80:88:9c:a9:80:3d:0d:62:62:b7:cf:18:
7c:5c:96:38:6e:41:a5:13:87:d0:3d:cf:e7:1b:e7:
f2:a6:c5:5e:4a:59:8c:d7:3f:b4:bb:7c:b6:33:3b:
5b:1b:8a:44:b3:6f:26:dc:6e:dd:b3:b0:2e:99:b4:
2b:b7:32:ce:d0:df:4d:bb:50:79:b2:8f:ca:5f:e6:
fa:b6:ef:e2:1a:56:f8:8d:cc:a4:b1:e6:bf:36:7f:
de:41:23:1e:ac:54:21:0b:57:ec:84:79:7c:d0:ff:
11:b7:1c:ac:d2:df:62:8b:76:1e:8a:e6:12:2e:d4:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:11:60:56:34:17:BA:56:99:C3:8D:DD:B1:E7:26:C6:D5:7F:B1
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:78:62:90:0d:b0:37:46:e8:c2:40:36:2f:f5:40:29:d9:
aa:a8:d6:5b:c6:74:9d:e0:f7:bb:9c:c1:fc:d8:0d:a7:91:79:
95:96:85:00:d6:72:98:45:a0:1d:b4:27:2e:5a:20:e1:49:14:
a1:1a:c3:fe:6b:59:4e:4c:d8:0f:f7:a6:e9:da:e9:88:a9:c4:
96:d7:fa:c1:97:cc:28:db:35:af:1e:9e:1b:c5:bf:45:85:2f:
66:77:76:1e:e3:a9:c5:df:6b:d7:b4:09:d9:5a:74:f3:79:e4:
3f:0c:3f:b4:8c:51:ae:7f:9f:b2:29:db:3c:ed:5b:3a:f7:fc:
84:84:05:5a:be:1d:81:a9:67:9c:55:15:73:ee:49:a3:44:82:
36:55:44:93:ae:b1:f0:3c:a7:b0:0a:f2:86:84:72:83:db:b9:
3a:62:93:13:a5:09:73:61:08:67:3c:2a:3d:e2:37:bd:f6:a8:
38:c3:fa:7c:51:7d:84:37:08:20:46:fe:54:41:6f:3e:b9:a6:
ca:29:d0:78:c2:1b:f9:1e:40:0f:94:a5:58:3a:4f:35:01:ed:
c9:21:46:19:99:64:cb:4d:95:e6:7e:f9:7b:15:2b:0a:18:70:
4e:98:71:2d:f1:e3:1f:be:37:05:00:2e:44:2d:6c:f6:37:72:
be:ce:69:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:10:45 2026 by rpki-client