Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: duyA0r3QID4sq8xqcdTMWNodoZhk5iTmrdfbLdnIlXc=
Subject key identifier: 1A:B6:C0:6F:0A:FA:26:4F:47:26:2F:7F:C5:F0:AB:0D:2E:6B:AD:CB
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019FF8DA0AEA42D7C4F5018709F3862709C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 01A3
Signing time: Thu 13 Aug 2026 02:01:06 +0000
Manifest this update: Thu 13 Aug 2026 02:01:06 +0000
Manifest next update: Fri 14 Aug 2026 02:01:06 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: haDPzqlQ66XpSSX+8zbbXhwYiU0b2GQEN7Ox0Ljt2ck=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:0a:ea:42:d7:c4:f5:01:87:09:f3:86:27:09:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Aug 13 02:01:06 2026 GMT
Not After : Aug 14 02:01:06 2026 GMT
Subject: CN=1ab6c06f0afa264f47262f7fc5f0ab0d2e6badcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:fa:fd:80:3e:fe:62:b8:93:4a:c1:99:dd:
84:25:8c:96:3d:7e:92:3a:b0:e9:01:9c:0a:8f:17:
62:67:0a:c2:e6:33:3f:ee:d5:ad:69:51:16:61:96:
92:d3:7c:38:27:b0:31:f2:e5:64:22:c5:21:02:c9:
0e:54:a0:7d:62:9f:e2:d6:c7:4a:c3:86:70:fa:f3:
1c:e8:46:74:ec:a8:21:c9:40:3c:19:2f:63:3d:06:
fb:21:8d:6c:9f:2b:ea:b1:4e:0b:04:60:72:a5:41:
87:11:8a:2b:66:aa:77:45:40:75:f7:0f:fd:91:1a:
98:86:11:36:62:56:f5:1c:00:2d:f3:b2:db:cd:0e:
c1:c3:96:68:eb:e5:fa:8c:41:8a:f4:64:cb:1e:91:
da:9a:b9:dc:50:18:08:c7:cd:67:e0:c2:34:e8:87:
d4:02:42:fb:3c:58:7f:85:c3:39:06:00:a1:30:c4:
f2:c5:eb:c1:81:14:f6:a6:d4:87:6f:8d:dd:73:64:
d2:5f:78:a0:86:df:c0:12:98:43:1f:f7:2f:07:6a:
51:e4:4d:f6:55:72:c8:b2:49:01:99:7e:0f:88:1c:
ad:6a:4a:e2:6d:2c:54:36:df:37:88:18:5d:98:37:
95:94:c8:17:03:98:c5:d3:4a:93:d3:3b:32:d2:b5:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:C0:6F:0A:FA:26:4F:47:26:2F:7F:C5:F0:AB:0D:2E:6B:AD:CB
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:1a:49:75:84:46:bd:26:90:ee:50:20:57:a7:55:1c:40:
7c:02:00:d2:1c:91:be:a0:20:87:af:9e:ee:1e:b5:ee:31:dc:
72:82:63:c4:53:03:5c:ed:1b:ff:ee:a9:36:24:f4:fb:ef:80:
0c:0d:55:ee:67:ff:95:8f:bd:c8:d2:7e:d8:31:48:a6:d1:32:
30:26:80:7b:98:61:9b:4a:0c:2f:0e:2b:0e:77:a8:f2:bb:05:
83:ca:c6:1f:15:c4:9a:2f:ac:6b:0c:c9:b5:c6:f9:a9:91:ce:
4b:50:dc:dd:2f:4b:29:35:46:1e:e2:90:cc:49:68:8d:0d:8c:
e4:5f:b1:9f:01:2a:90:41:72:b5:07:17:09:7e:c6:36:a2:0e:
61:7b:37:aa:6c:2a:15:b4:00:ba:e5:a2:24:5a:5a:90:af:81:
6b:55:c7:6d:96:b4:17:75:48:c8:71:29:f7:27:5c:7d:c8:e9:
80:92:36:1e:30:ab:ca:43:49:35:45:e1:41:5b:53:77:a1:71:
e1:df:57:b3:27:ed:81:4e:6f:6e:56:51:16:12:20:9a:62:b5:
59:7b:a2:2d:b4:9c:85:a6:b5:5c:e6:22:70:6a:c3:0a:66:95:
38:82:c9:f4:9a:8b:c2:f9:77:46:87:69:00:d7:ed:85:4f:15:
69:b9:67:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42grqQtfE9QGHCfOGJwnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWVkNmQ0NDdkYWQ0NTljMmRmZDk4YzE0ZDAwMzJkMGQ1
MWE3MjUwHhcNMjYwODEzMDIwMTA2WhcNMjYwODE0MDIwMTA2WjAzMTEwLwYDVQQD
EygxYWI2YzA2ZjBhZmEyNjRmNDcyNjJmN2ZjNWYwYWIwZDJlNmJhZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNH6/YA+/mK4k0rBmd2EJYyWPX6S
OrDpAZwKjxdiZwrC5jM/7tWtaVEWYZaS03w4J7Ax8uVkIsUhAskOVKB9Yp/i1sdK
w4Zw+vMc6EZ07KghyUA8GS9jPQb7IY1snyvqsU4LBGBypUGHEYorZqp3RUB19w/9
kRqYhhE2Ylb1HAAt87LbzQ7Bw5Zo6+X6jEGK9GTLHpHamrncUBgIx81n4MI06IfU
AkL7PFh/hcM5BgChMMTyxevBgRT2ptSHb43dc2TSX3ight/AEphDH/cvB2pR5E32
VXLIskkBmX4PiBytakribSxUNt83iBhdmDeVlMgXA5jF00qT0zsy0rWZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq2wG8K+iZPRyYvf8Xwqw0ua63LMB8GA1UdIwQY
MBaAFEDu1tRH2tRZwt/ZjBTQAy0NUaclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NGJkYjgtZjk5Ny00MDhmLTliZDMt
ZTA3N2QzOWVkNzI3LzEvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NGJkYjgtZjk5Ny00MDhmLTliZDMtZTA3N2QzOWVkNzI3
LzEvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFYaSXWE
Rr0mkO5QIFenVRxAfAIA0hyRvqAgh6+e7h617jHccoJjxFMDXO0b/+6pNiT0+++A
DA1V7mf/lY+9yNJ+2DFIptEyMCaAe5hhm0oMLw4rDneo8rsFg8rGHxXEmi+sawzJ
tcb5qZHOS1Dc3S9LKTVGHuKQzElojQ2M5F+xnwEqkEFytQcXCX7GNqIOYXs3qmwq
FbQAuuWiJFpakK+Ba1XHbZa0F3VIyHEp9ydcfcjpgJI2HjCrykNJNUXhQVtTd6Fx
4d9XsyftgU5vblZRFhIgmmK1WXuiLbSchaa1XOYicGrDCmaVOILJ9JqLwvl3Rodp
ANfthU8VablnzA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:16:19 2026 by rpki-client