Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: qsD6uVmqrCqRLT0oAZd25feOTm+SrmX2zNBl6BMxrJ0=
Subject key identifier: BC:85:12:86:EA:7B:63:7C:04:32:7F:71:C5:E6:64:5E:3B:9A:DF:05
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019EE6D6335305F1B7F30477CD93270CE529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 0115
Signing time: Sat 20 Jun 2026 21:00:57 +0000
Manifest this update: Sat 20 Jun 2026 21:00:57 +0000
Manifest next update: Sun 21 Jun 2026 21:00:57 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: 7WoNEgOnFg3sJcpMjB44NWaGWXVLvD1TXx+KQbxFJ3U=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:d6:33:53:05:f1:b7:f3:04:77:cd:93:27:0c:e5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Jun 20 21:00:57 2026 GMT
Not After : Jun 21 21:00:57 2026 GMT
Subject: CN=bc851286ea7b637c04327f71c5e6645e3b9adf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:d0:86:45:0d:69:0e:48:e2:44:e0:ee:f8:
3d:2a:fa:ee:b9:91:20:9e:36:01:3e:a4:10:ac:e4:
71:c1:e1:51:58:21:1e:c3:13:8a:07:61:15:d2:cf:
2c:3c:b9:47:dc:17:28:86:d7:02:05:bc:6c:88:c3:
5b:5c:6f:b8:64:fb:6c:1f:eb:dd:26:35:f8:c0:09:
aa:23:fb:52:5e:e1:08:f6:3e:8c:f0:88:59:aa:aa:
83:2a:d9:d2:1f:f6:cc:cc:0b:53:62:4c:8d:2b:b2:
4a:38:50:be:1c:79:c1:d6:57:d6:02:c8:9f:50:0f:
eb:44:c2:36:08:f0:27:18:24:f7:d3:ea:9e:88:30:
e3:e4:c0:07:fd:d8:c7:68:1a:88:c2:c6:4c:24:ad:
76:44:d2:d5:24:22:76:ae:e3:5b:ba:a3:b7:72:dc:
2c:63:bb:86:47:3e:29:5b:fd:4c:50:d0:55:48:d3:
32:03:62:2b:e1:76:9f:df:45:15:7b:8f:e7:53:97:
e8:b6:86:ac:78:98:06:2d:c6:55:55:96:72:4d:0a:
90:86:e2:29:a2:72:66:12:67:e1:95:6e:53:46:44:
e0:dd:96:c4:b9:a6:0e:55:e0:19:78:28:d8:05:f0:
a5:c5:98:54:d2:f3:32:0c:5d:3f:6a:97:fc:1a:56:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:12:86:EA:7B:63:7C:04:32:7F:71:C5:E6:64:5E:3B:9A:DF:05
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6e:10:9e:76:81:8d:76:af:04:c2:f3:3b:72:1f:26:8f:93:
ca:f0:8e:0c:31:cf:de:ed:4b:6a:05:39:97:5d:65:2a:fe:13:
be:b1:20:51:0d:b8:0e:94:a8:1a:92:94:4a:ee:86:9f:82:40:
8e:11:b5:e1:fc:ad:94:26:aa:4c:ee:f2:b5:d5:a6:7c:1f:0f:
57:90:57:89:0e:cb:b8:c5:ec:f4:77:b9:c0:bd:19:64:0e:dc:
ea:c0:02:36:6d:68:52:b5:62:bb:4a:54:e9:3f:0f:35:3d:c7:
9a:ec:ab:64:92:43:c3:1e:d9:33:58:89:22:be:f1:af:3b:1b:
53:41:2b:63:38:d7:08:31:b7:b5:6e:be:15:7a:7e:b8:8b:ba:
85:d2:5c:e6:22:49:ce:05:e3:1e:0f:7f:4e:91:be:9a:7b:4f:
d7:72:86:f6:e2:b0:24:4b:8e:c0:fd:be:8b:10:a0:24:d8:34:
6f:02:e4:e7:7b:e0:46:a8:ef:31:70:c7:40:0f:c8:9c:8b:5d:
95:c8:84:a8:f5:57:f7:53:0f:6a:df:0f:9f:6d:20:9e:85:8c:
2f:b0:8c:aa:b0:ef:92:a4:de:af:05:fa:b6:db:cf:b0:b4:96:
41:32:af:c3:32:53:a1:a2:ce:ce:f8:22:4d:0f:06:99:eb:e0:
0e:5d:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:00:37 2026 by rpki-client