Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: brLppD8qyTJSu540dHmo57K6QFfNYTvcIEicTz/1xDU=
Subject key identifier: B2:29:7B:AA:E9:EC:BD:8C:77:25:42:9C:91:68:5D:96:E1:AF:0B:FF
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019DDC552C3A993A2B7ECC20D7B6D0CBD481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 8B
Signing time: Thu 30 Apr 2026 03:01:02 +0000
Manifest this update: Thu 30 Apr 2026 03:01:02 +0000
Manifest next update: Fri 01 May 2026 03:01:02 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: 0D837vrhSuREchIKgBG8lNrV+irX069AsqUIwJ+7Tmg=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:2c:3a:99:3a:2b:7e:cc:20:d7:b6:d0:cb:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Apr 30 03:01:02 2026 GMT
Not After : May 1 03:01:02 2026 GMT
Subject: CN=b2297baae9ecbd8c7725429c91685d96e1af0bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:24:84:cb:68:87:50:ff:6c:90:b8:14:4d:
3c:78:1b:00:d2:bb:d7:22:1b:37:d7:50:67:d9:ba:
0d:06:63:c6:35:78:a2:df:0e:d6:67:91:23:bf:c8:
e6:a5:93:4d:36:53:92:87:4d:44:2c:b1:3c:6e:a4:
df:4b:ad:de:8f:d6:9d:7e:df:d4:65:0c:36:57:04:
53:85:ff:a8:3f:90:64:4f:99:12:ef:64:25:38:4f:
5f:e1:d9:0e:0d:b0:e7:56:8f:ce:e3:8d:55:e6:02:
43:fc:75:fc:98:ec:52:20:01:42:e0:b4:12:67:5e:
f8:04:8c:a7:de:df:60:49:51:49:92:9a:5b:56:2e:
60:b8:0d:90:96:18:bc:27:5d:63:48:25:6b:24:3a:
57:10:cf:32:42:28:f0:04:bf:19:b0:73:00:2e:74:
9e:70:2e:50:a7:84:6c:f8:71:95:c6:41:40:f9:40:
dd:99:ef:6c:28:27:52:a6:1b:f9:24:bb:b0:d2:37:
0f:15:2f:b9:38:8d:10:92:64:b6:c8:ab:61:0c:b3:
70:ad:e3:af:1d:92:a8:9b:5a:ee:6d:61:30:a8:b4:
42:b3:d0:d5:84:ea:b9:da:65:5a:f7:c3:7c:85:48:
41:4d:42:93:e1:50:bc:ce:e5:d5:9c:22:0a:c0:ff:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:7B:AA:E9:EC:BD:8C:77:25:42:9C:91:68:5D:96:E1:AF:0B:FF
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9d:1a:6f:99:8b:43:10:3a:11:a8:69:58:af:d7:fd:5d:5d:
cf:d0:c2:c7:51:03:48:bc:bd:6f:8b:ad:5b:7b:42:e9:56:f6:
7f:fd:bd:36:c4:cd:ee:b5:7c:b0:5b:aa:80:c8:22:05:81:ac:
5a:f2:06:a0:41:31:4b:9f:94:16:75:3b:8b:e0:28:51:00:49:
51:b7:91:92:4d:22:d9:d7:b0:27:88:05:66:d1:69:9e:f6:b9:
61:a3:95:32:0f:c0:88:37:37:55:be:fe:d2:3a:11:f5:01:83:
cd:ab:06:7b:22:d6:59:b8:1b:fe:f7:5d:b2:6d:a4:8c:f5:fc:
d6:7f:bc:7f:34:1a:a2:12:bd:b1:95:5b:c4:f5:33:69:ca:7d:
f2:bf:d1:7c:eb:58:76:4d:41:ab:d6:4e:ab:f0:e1:fa:86:88:
4a:6c:c3:0b:06:4c:0c:82:a3:dc:d1:86:08:ee:47:54:c0:b6:
70:9b:26:0b:4e:70:22:7c:22:97:86:c0:5a:61:0b:28:d3:49:
76:a9:65:0b:1a:ef:75:4c:d7:2d:26:bc:e4:33:b5:07:c6:e7:
04:c3:bf:5a:7e:d4:a1:83:80:2a:16:2e:6d:91:ea:21:9d:ae:
99:83:5c:16:e1:31:1b:9a:ff:9d:91:76:ba:59:62:6b:31:a4:
2b:8e:b5:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3cVSw6mTorfswg17bQy9SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWVkNmQ0NDdkYWQ0NTljMmRmZDk4YzE0ZDAwMzJkMGQ1
MWE3MjUwHhcNMjYwNDMwMDMwMTAyWhcNMjYwNTAxMDMwMTAyWjAzMTEwLwYDVQQD
EyhiMjI5N2JhYWU5ZWNiZDhjNzcyNTQyOWM5MTY4NWQ5NmUxYWYwYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SwkhMtoh1D/bJC4FE08eBsA0rvX
Ihs311Bn2boNBmPGNXii3w7WZ5Ejv8jmpZNNNlOSh01ELLE8bqTfS63ej9adft/U
ZQw2VwRThf+oP5BkT5kS72QlOE9f4dkODbDnVo/O441V5gJD/HX8mOxSIAFC4LQS
Z174BIyn3t9gSVFJkppbVi5guA2Qlhi8J11jSCVrJDpXEM8yQijwBL8ZsHMALnSe
cC5Qp4Rs+HGVxkFA+UDdme9sKCdSphv5JLuw0jcPFS+5OI0QkmS2yKthDLNwreOv
HZKom1rubWEwqLRCs9DVhOq52mVa98N8hUhBTUKT4VC8zuXVnCIKwP9n4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIpe6rp7L2MdyVCnJFoXZbhrwv/MB8GA1UdIwQY
MBaAFEDu1tRH2tRZwt/ZjBTQAy0NUaclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NGJkYjgtZjk5Ny00MDhmLTliZDMt
ZTA3N2QzOWVkNzI3LzEvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NGJkYjgtZjk5Ny00MDhmLTliZDMtZTA3N2QzOWVkNzI3
LzEvUU83VzFFZmExRm5DMzltTUZOQURMUTFScHlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkp0ab5mL
QxA6EahpWK/X/V1dz9DCx1EDSLy9b4utW3tC6Vb2f/29NsTN7rV8sFuqgMgiBYGs
WvIGoEExS5+UFnU7i+AoUQBJUbeRkk0i2dewJ4gFZtFpnva5YaOVMg/AiDc3Vb7+
0joR9QGDzasGeyLWWbgb/vddsm2kjPX81n+8fzQaohK9sZVbxPUzacp98r/RfOtY
dk1Bq9ZOq/Dh+oaISmzDCwZMDIKj3NGGCO5HVMC2cJsmC05wInwil4bAWmELKNNJ
dqllCxrvdUzXLSa85DO1B8bnBMO/Wn7UoYOAKhYubZHqIZ2umYNcFuExG5r/nZF2
ulliazGkK4615Q==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:04:33 2026 by rpki-client