Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: vu6cpJk5BQVMd4G155Z1DmE8sfxx7okmSGnMnhVd/qU=
Subject key identifier: EB:A4:06:7C:6B:08:EA:93:E4:0E:79:14:32:8A:83:03:96:5A:A6:67
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019CF49736BCA25EBA19D47FC6F6E06D6DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 13
Signing time: Mon 16 Mar 2026 03:01:16 +0000
Manifest this update: Mon 16 Mar 2026 03:01:16 +0000
Manifest next update: Tue 17 Mar 2026 03:01:16 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: PY+d/R1vMo3tYwz8nXxsAWvkIiJds17SW04SbOD6AY4=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:97:36:bc:a2:5e:ba:19:d4:7f:c6:f6:e0:6d:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Mar 16 03:01:16 2026 GMT
Not After : Mar 17 03:01:16 2026 GMT
Subject: CN=eba4067c6b08ea93e40e7914328a8303965aa667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:bb:cb:ba:57:2e:a6:8a:4a:bd:1a:75:e1:
eb:cb:f1:7f:74:62:a3:06:00:69:11:4e:c3:01:3c:
e5:6a:b3:01:65:b9:97:44:14:6b:8b:0d:a1:cd:0c:
00:93:29:70:b4:74:1a:8a:9d:19:59:57:46:8a:fd:
eb:e9:10:2d:46:7b:2f:84:a5:0e:8a:af:d5:e4:9c:
53:86:fe:e9:1f:e6:12:64:ae:6f:c6:21:e3:cb:57:
82:25:91:f5:0e:a4:d0:95:8a:7d:b1:e5:e7:99:4a:
40:b1:e3:b6:93:13:bd:d9:fe:f3:3d:ba:c0:16:c2:
37:d8:1c:a6:22:db:aa:b2:39:49:b2:3c:f4:79:23:
61:27:6d:ac:c9:4b:19:df:a2:57:b0:be:0f:15:46:
a2:e2:e3:96:86:fd:7f:5a:87:95:06:2a:0c:4a:c6:
6c:15:c9:40:7c:0a:12:a4:27:f7:77:c2:8a:f8:3d:
9c:c7:87:2d:76:d4:eb:4c:71:eb:56:e7:1e:b8:91:
05:21:c5:39:95:58:5e:92:52:c8:9d:6c:1f:32:f8:
89:e3:bb:be:bc:c8:3b:96:76:32:aa:f9:dc:4d:09:
59:81:46:de:e8:df:2e:21:10:61:e3:19:d8:59:ba:
99:b9:47:c3:8b:b9:28:38:2c:51:96:a9:a6:96:57:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:06:7C:6B:08:EA:93:E4:0E:79:14:32:8A:83:03:96:5A:A6:67
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:60:f9:46:70:fb:26:ac:4c:70:5f:bb:17:79:2a:50:ba:35:
e4:48:f2:44:64:10:ff:32:58:53:da:d5:20:7f:ae:8a:ac:b9:
a4:3e:8e:ee:88:89:9d:c2:c2:f6:8b:6e:36:92:56:5d:0e:0d:
a6:e0:34:4c:e5:49:63:50:60:a2:5a:e2:f5:f5:27:27:fd:cd:
a4:7b:ea:5e:f1:95:ac:07:7a:8c:85:29:29:ab:45:d2:ef:b4:
e4:20:1c:87:c5:d6:8d:17:e9:32:1a:c6:0c:76:b7:70:aa:7a:
8d:0a:ed:0e:9f:4d:4e:8c:10:31:1f:7a:d5:d9:cb:26:bf:02:
68:45:d2:6b:14:ec:8e:5f:7d:58:00:29:67:42:ec:f6:8f:95:
ac:3b:b0:28:7a:85:6f:fa:93:ae:af:cf:28:e2:e8:b6:18:62:
b8:ac:14:49:86:ae:99:bb:04:0d:19:e3:0a:d0:1b:3d:47:f1:
42:ca:87:bb:bc:ed:e2:e1:12:f7:b7:b6:76:e4:35:d5:a7:de:
bf:66:ef:03:79:41:af:8a:6a:8a:1a:25:7c:41:c1:a6:6f:75:
c7:e6:36:5c:27:7c:3e:3e:4c:7f:57:d9:ac:ec:d3:f0:93:43:
f6:ae:9f:bf:8a:02:2b:8c:6b:52:e9:66:71:82:f9:41:5e:88:
15:87:bf:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz0lza8ol66GdR/xvbgbW2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWVkNmQ0NDdkYWQ0NTljMmRmZDk4YzE0ZDAwMzJkMGQ1
MWE3MjUwHhcNMjYwMzE2MDMwMTE2WhcNMjYwMzE3MDMwMTE2WjAzMTEwLwYDVQQD
EyhlYmE0MDY3YzZiMDhlYTkzZTQwZTc5MTQzMjhhODMwMzk2NWFhNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPm7y7pXLqaKSr0adeHry/F/dGKj
BgBpEU7DATzlarMBZbmXRBRriw2hzQwAkylwtHQaip0ZWVdGiv3r6RAtRnsvhKUO
iq/V5JxThv7pH+YSZK5vxiHjy1eCJZH1DqTQlYp9seXnmUpAseO2kxO92f7zPbrA
FsI32BymItuqsjlJsjz0eSNhJ22syUsZ36JXsL4PFUai4uOWhv1/WoeVBioMSsZs
FclAfAoSpCf3d8KK+D2cx4ctdtTrTHHrVuceuJEFIcU5lVheklLInWwfMviJ47u+
vMg7lnYyqvncTQlZgUbe6N8uIRBh4xnYWbqZuUfDi7koOCxRlqmmlldOhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOukBnxrCOqT5A55FDKKgwOWWqZnMB8GA1UdIwQY
MBaAFEDu1tRH2tRZwt/ZjBTQAy0NUaclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NGJkYjgtZjk5Ny00MDhmLTliZDMt
ZTA3N2QzOWVkNzI3LzEvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NGJkYjgtZjk5Ny00MDhmLTliZDMtZTA3N2QzOWVkNzI3
LzEvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumD5RnD7
JqxMcF+7F3kqULo15EjyRGQQ/zJYU9rVIH+uiqy5pD6O7oiJncLC9otuNpJWXQ4N
puA0TOVJY1Bgolri9fUnJ/3NpHvqXvGVrAd6jIUpKatF0u+05CAch8XWjRfpMhrG
DHa3cKp6jQrtDp9NTowQMR961dnLJr8CaEXSaxTsjl99WAApZ0Ls9o+VrDuwKHqF
b/qTrq/PKOLothhiuKwUSYaumbsEDRnjCtAbPUfxQsqHu7zt4uES97e2duQ11afe
v2bvA3lBr4pqiholfEHBpm91x+Y2XCd8Pj5Mf1fZrOzT8JND9q6fv4oCK4xrUulm
cYL5QV6IFYe/lg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:16:36 2026 by rpki-client