Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: /Qq4UaMnP2/mIL1OofGrD2jzSEIkQYDiuW9c5ywyk6w=
Subject key identifier: 97:39:91:4A:83:F9:31:27:58:20:9B:43:1C:8A:EB:D3:A6:E6:A6:80
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019CAE355D6236B043008D68F07B6DEA296A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:00:58 +0000
Manifest this update: Mon 02 Mar 2026 11:00:58 +0000
Manifest next update: Tue 03 Mar 2026 11:00:58 +0000
Files and hashes: 1: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: VQjUAZ6H4Wa1k/2x159VSag94okoL9p7aZ0f0t7S3vk=)
2: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:5d:62:36:b0:43:00:8d:68:f0:7b:6d:ea:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Mar 2 11:00:58 2026 GMT
Not After : Mar 3 11:00:58 2026 GMT
Subject: CN=9739914a83f9312758209b431c8aebd3a6e6a680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:91:da:61:06:27:30:86:86:c6:14:eb:35:
25:c8:9b:a9:f4:89:9c:7e:9b:a3:f2:11:66:fa:8f:
cc:ec:eb:a9:db:d6:e5:d0:2b:ab:7b:66:05:4f:90:
24:c7:7d:60:70:19:9a:c2:e6:27:62:0e:d7:f4:e9:
ab:58:4f:80:66:60:69:59:03:25:a1:1a:0b:9e:a9:
38:d9:f4:cd:9a:ba:c7:d3:d7:a5:85:19:37:6c:85:
b0:49:67:35:e1:7f:6e:7a:c1:d2:2e:99:97:9f:17:
0b:e4:b1:9b:bf:df:5f:59:b5:92:a1:21:40:95:4e:
3c:2b:05:3b:27:d3:f2:c4:e0:89:1b:d5:28:b1:a1:
89:f7:55:61:ba:ed:a6:1c:b9:76:00:4f:15:66:47:
53:8a:2f:8a:6c:54:9c:63:43:cc:db:22:56:d8:c9:
ea:38:2e:47:53:ea:cf:ce:a5:d5:fb:1b:47:97:6a:
4c:c2:34:42:45:2f:e2:d7:a9:c2:bc:61:12:c7:db:
ff:2e:2c:80:ff:85:c4:b4:07:0c:32:e6:c6:58:cb:
be:ca:de:66:2f:0f:96:4d:26:f4:c0:13:12:f9:a4:
bc:ce:3d:d6:3b:54:0e:7e:20:75:20:45:6b:f1:6e:
48:3e:fd:20:ba:98:f1:3d:3d:0d:ea:99:5b:8e:48:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:91:4A:83:F9:31:27:58:20:9B:43:1C:8A:EB:D3:A6:E6:A6:80
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:23:b1:da:6b:0a:fe:82:1a:d3:06:87:37:df:0b:4f:7f:71:
bf:03:52:73:3d:d1:61:64:f0:49:da:c7:4b:8f:46:75:65:89:
c7:4f:34:7e:dd:7e:db:25:73:1d:0a:a1:fc:90:f0:5b:3a:6f:
6d:81:5f:43:a9:d7:24:b8:22:68:28:b3:83:cd:2d:49:e7:f8:
a9:c1:7f:51:fa:ff:97:6f:a0:77:73:66:03:4b:c9:89:4a:40:
db:68:f7:bb:04:93:0b:62:76:de:ef:28:62:47:a5:ce:a9:c2:
96:6e:d9:73:a1:27:b6:77:0d:ad:dd:f1:34:f2:82:ad:e9:61:
f8:2d:0f:d3:db:89:f3:c9:22:ec:57:3d:ee:29:c7:58:5a:69:
44:4b:56:16:ff:d2:45:f5:a2:ee:9b:23:6c:6c:fd:40:b5:d6:
81:6c:03:a8:ef:53:61:19:3f:84:02:67:4e:cb:ae:a1:6b:3d:
93:a5:fa:57:bc:36:08:9e:83:36:74:72:d5:99:18:be:4e:12:
8c:d0:94:4a:e8:6d:56:e0:84:7b:c2:23:b5:90:d2:dd:af:f4:
ff:73:2e:32:d7:09:7b:05:82:b0:6b:94:3c:75:6f:86:05:2a:
34:9d:86:49:af:02:15:a4:46:56:5f:a0:21:24:7b:74:3c:fc:
ff:68:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:25 2026 by rpki-client