Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: FN8Vw/jJv+pZsG9Xkh1yBfuKF1QZatUpdrFebrLcDVM=
Subject key identifier: CD:DE:66:EB:1D:4E:16:C5:0A:38:23:1C:90:F3:1F:46:39:B0:17:C2
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019EC2FFF9CD44A28AD6FE2E519388EC684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 22:00:15 +0000
Manifest this update: Sat 13 Jun 2026 22:00:15 +0000
Manifest next update: Sun 14 Jun 2026 22:00:15 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: OAa2Y/AFmqNavo4BSK/op+mMh1WewSapxqU9iDT80d0=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ff:f9:cd:44:a2:8a:d6:fe:2e:51:93:88:ec:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jun 13 22:00:15 2026 GMT
Not After : Jun 14 22:00:15 2026 GMT
Subject: CN=cdde66eb1d4e16c50a38231c90f31f4639b017c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:81:a7:36:4a:64:0b:df:f9:ca:d3:d5:03:
dc:7b:dd:05:68:23:d2:51:4a:f3:d1:e4:e1:2d:b4:
5d:78:5f:63:ee:c6:21:38:7b:dc:77:15:d2:b1:7b:
0e:2d:e3:c8:6b:59:90:3d:f3:87:94:5f:c3:c6:69:
8f:ec:97:95:96:02:e3:80:75:bb:78:ee:1c:15:c1:
1d:a5:c1:f0:0d:ef:3c:ca:ac:a2:6c:49:6d:5c:3a:
88:58:9b:70:4a:5e:a3:96:04:42:b4:fe:b7:49:ba:
ff:99:71:4c:87:40:ce:6b:88:0c:02:11:61:f3:48:
35:03:f9:9c:79:9e:50:0e:3a:ec:7b:f7:56:8e:1c:
d1:cd:d5:26:18:0c:84:2f:00:47:48:a4:98:d6:17:
8d:5d:83:9d:6d:e5:f8:66:bc:bc:81:be:52:28:7d:
f9:f3:9c:1e:a7:83:23:e2:a6:da:80:f1:7b:b1:eb:
ce:dc:e5:06:3c:e8:56:f2:15:10:8f:13:0b:da:ff:
e3:cb:cb:33:3d:ec:82:83:6e:c0:1b:72:d4:52:5a:
76:18:b2:af:73:33:d8:8f:7c:22:ca:d2:51:d6:b3:
08:66:4b:b8:42:0a:d6:a5:8d:3a:b4:65:af:36:eb:
2f:1c:1c:95:8b:22:b6:4e:df:05:e4:25:96:0e:79:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:66:EB:1D:4E:16:C5:0A:38:23:1C:90:F3:1F:46:39:B0:17:C2
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:33:04:cf:8d:bc:af:85:f4:ce:a5:b9:29:cb:37:4f:5d:
d2:c8:ec:1f:2a:db:96:08:6a:04:98:a3:f9:15:7e:96:13:d1:
1c:c7:f5:56:bf:c9:ea:25:e9:47:74:67:36:e3:1d:1d:87:90:
ca:08:68:ca:83:93:79:e7:89:06:36:03:06:ac:ff:0e:1c:04:
85:1e:86:1a:7e:b1:3f:f5:16:6f:97:4e:bb:63:89:73:39:5b:
6a:b0:0b:83:be:b5:bf:a0:8e:82:fd:e8:ce:d2:45:1b:82:06:
ec:fd:a5:b5:f6:b7:7e:49:f5:d2:e2:4a:a6:ad:6a:b1:5d:14:
6b:9c:8e:99:85:bb:3b:36:a7:2f:40:a7:8e:43:f3:23:f7:1a:
cb:74:8a:e3:4e:06:f8:4d:f2:4b:34:00:92:d9:9b:21:ef:de:
76:b4:df:73:a2:0a:82:3f:a1:ef:5b:ba:f0:ab:d2:0e:aa:9a:
c3:f0:5e:e0:cb:d7:fc:fd:70:89:37:91:b7:f4:bc:0d:d5:c4:
b2:81:fe:fa:71:3e:af:05:8a:d5:37:23:5d:ab:74:ed:c0:cc:
c6:76:1b:85:dc:21:f2:be:97:d6:1a:f7:2f:35:08:eb:16:92:
59:d9:6b:f5:dc:0d:2b:ac:b4:7b:fd:6b:0d:82:d2:af:9f:cd:
4d:d9:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:51 2026 by rpki-client