Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: tP0bnc9x8ipwQ349RC0COF3Ojd6Rivsiv9YljoGP6LE=
Subject key identifier: C4:A8:4D:04:6E:BF:57:03:82:92:FF:3A:1A:63:B3:B8:17:C4:D7:B0
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019EECA206E456871B8272E17A26F1C00112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 197B
Signing time: Mon 22 Jun 2026 00:01:41 +0000
Manifest this update: Mon 22 Jun 2026 00:01:41 +0000
Manifest next update: Tue 23 Jun 2026 00:01:41 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: bZ5dLak5QCHOMXS94lQemgI1CsSBqlPn/qNbGxdJrAY=)
2: kfw5lT51mmJB9r-mzPnYBcO07ic.roa (hash: lu7TOjtxr8LPfyeKuliFVqXP9APAZsRzOs+MqTY5wZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:a2:06:e4:56:87:1b:82:72:e1:7a:26:f1:c0:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jun 22 00:01:41 2026 GMT
Not After : Jun 23 00:01:41 2026 GMT
Subject: CN=c4a84d046ebf57038292ff3a1a63b3b817c4d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:a9:f9:79:bd:fa:fa:e1:29:81:b4:1e:f6:
6b:fd:df:28:fc:fc:2b:9f:df:a1:83:24:bf:17:2d:
1d:87:e3:9f:97:3c:4d:51:fb:73:3e:bf:89:b1:88:
ca:c0:05:7e:b0:6a:4e:08:d4:cd:ee:b2:2b:06:ab:
ab:8c:03:a9:f7:eb:34:53:e8:f9:49:91:81:f1:35:
56:0b:c3:6d:d0:2c:1b:72:3d:1c:a9:f0:37:d7:8f:
46:18:2c:4f:1d:a2:78:a7:f4:73:b2:72:f0:a3:4c:
01:ff:f8:3c:c8:b5:26:33:11:64:de:30:0e:bd:6c:
49:f2:52:0b:3f:ce:1b:c6:4a:25:13:ec:ad:67:3d:
8e:b5:4b:83:82:35:ee:a8:78:01:62:2d:2a:38:04:
84:cd:bd:7b:83:d8:cc:98:b7:c5:44:60:9b:cf:e2:
d2:c2:65:46:d4:90:31:ab:ea:0c:ea:2b:3d:0f:6a:
d6:26:99:02:95:a6:48:b9:ae:5e:de:1a:76:fd:29:
bd:46:0f:38:47:fa:89:d4:ab:ea:67:95:16:70:1e:
c1:18:19:d7:22:6c:ff:1a:86:c3:ac:b8:13:78:96:
50:f5:2e:d1:73:de:aa:61:1d:f4:cb:2b:5c:91:14:
71:51:00:7f:ee:d6:b7:22:cd:cc:0e:f2:56:80:99:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:4D:04:6E:BF:57:03:82:92:FF:3A:1A:63:B3:B8:17:C4:D7:B0
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bb:0f:5f:3e:ea:0c:e0:04:2b:e0:4b:8f:c1:fd:e1:92:da:
a7:96:fc:a5:17:33:18:0d:e0:5d:c1:ed:1f:e6:68:21:a0:da:
d7:9e:02:b1:89:3d:88:6a:0d:6c:e3:61:a2:a3:f3:a7:aa:c1:
53:8d:cf:22:a3:e6:eb:8d:e6:96:35:4c:eb:59:86:7c:f0:e1:
5d:a1:11:ee:80:92:ae:26:f8:eb:73:1d:f0:f2:c7:9f:5f:9b:
18:67:0c:6d:c2:db:f3:51:98:5f:15:77:8f:23:93:22:3f:4c:
47:8a:2b:3c:da:63:e8:c5:97:00:a3:88:ca:76:47:74:d5:fc:
7c:79:4b:bd:55:ab:46:20:e6:de:b1:d0:ed:b6:ec:b3:db:47:
bf:13:b4:ca:b0:25:36:46:c0:b4:20:5d:63:de:87:8c:f9:1c:
a0:d4:17:34:fc:d8:95:57:90:3b:75:82:11:db:e4:ae:e8:97:
ef:5e:1d:63:6c:53:0b:e3:45:e8:3f:b1:9e:2a:6e:9a:33:b6:
98:27:de:00:61:1d:72:9e:0e:38:43:0e:2c:ba:24:87:f9:02:
81:0a:2c:6c:76:0f:22:e3:fb:fc:f1:84:12:87:02:cf:03:63:
e3:cc:d9:46:a0:55:cf:69:fc:67:5d:6c:33:e7:de:39:95:10:
3e:06:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 09:35:24 2026 by rpki-client