Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: WkRagbd+1t+IMimwoXcMEfpGjWzW3SAvAE9dSSa7BDM=
Subject key identifier: 0E:01:CF:0D:AA:28:1C:8A:27:34:78:C2:19:AA:84:11:65:E4:7E:D0
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019D9B87CCF96AEE708F3270AC404BFF402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:01 +0000
Manifest this update: Fri 17 Apr 2026 13:01:01 +0000
Manifest next update: Sat 18 Apr 2026 13:01:01 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: c8WnEWAKgdRqYGvs23IC5ZTq4Ly9Rg5Le5HRUDYrpMU=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:cc:f9:6a:ee:70:8f:32:70:ac:40:4b:ff:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Apr 17 13:01:01 2026 GMT
Not After : Apr 18 13:01:01 2026 GMT
Subject: CN=0e01cf0daa281c8a273478c219aa841165e47ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:94:e2:d1:00:46:7c:1b:5e:0e:fa:40:c5:
94:93:b3:10:e9:e2:91:47:32:0f:86:60:1e:49:4c:
8d:e3:eb:66:ba:fd:fc:f2:3e:29:90:75:4d:5b:fa:
9b:a0:31:8d:d6:e4:bd:9d:0c:a7:b9:c2:e5:fd:aa:
26:1a:71:07:14:0b:e0:e4:bd:85:93:4c:bc:97:a4:
91:89:b2:bb:4d:31:f4:fa:5a:59:67:a7:c5:56:3b:
df:52:b5:97:5b:a1:04:14:99:7e:21:fc:25:0a:6f:
81:ba:29:27:2b:17:09:fc:25:1f:47:f4:32:f2:87:
dd:81:f9:8f:b4:ac:f5:07:ef:ee:cf:c6:2d:6f:a3:
1a:fe:a0:0f:e2:35:f1:01:6b:43:f2:4b:3d:f1:98:
71:4e:0e:4d:8f:51:31:ef:29:3f:9f:e7:f6:4d:48:
02:1f:bf:2a:14:8e:f6:39:a9:f9:76:68:f2:0b:46:
ca:d7:34:c9:82:96:98:d9:d7:bf:79:1e:a8:9d:51:
89:25:22:a0:c2:72:4e:a9:f1:a9:b7:49:d6:a8:49:
26:3b:cb:05:d0:36:90:2c:8e:57:a9:87:60:1d:8d:
75:29:e8:7c:85:48:45:7e:d2:91:56:91:3a:c3:a8:
1a:87:87:a4:66:1a:da:e2:77:f0:a7:28:1a:2f:fa:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:CF:0D:AA:28:1C:8A:27:34:78:C2:19:AA:84:11:65:E4:7E:D0
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:04:3a:3c:68:54:43:45:7e:03:f5:7b:eb:77:fd:68:cc:
36:8b:ec:a0:f2:53:dd:3a:10:94:cf:5b:fd:5d:98:e2:b9:bf:
5f:45:a8:0d:89:48:8c:87:10:90:b6:24:93:cf:45:f3:ce:8f:
da:5e:4c:b9:05:c5:6f:ad:a4:bf:11:a6:d0:d8:05:40:6c:0d:
76:c1:f7:0f:08:1a:a3:f2:b7:0e:02:59:5c:91:fc:03:4d:8d:
e0:aa:60:37:38:68:5a:a0:8f:a4:e1:a9:e3:46:30:f4:ff:32:
5d:c9:4d:82:73:dd:eb:0d:23:0b:36:69:6e:f8:d3:11:09:77:
21:9b:ea:e0:9b:61:e3:8d:90:6e:de:dc:0e:b1:21:d2:ad:5c:
5f:f3:b6:75:19:c3:46:49:6c:25:49:bc:30:de:47:ae:c6:db:
4a:93:9b:96:1d:c6:f0:ec:c7:53:af:5d:d6:32:f5:5b:7f:08:
00:a1:a0:39:f7:19:17:99:a4:56:53:ed:42:c2:03:1e:b5:39:
a1:c7:8e:96:a0:04:5a:9d:21:2a:c7:e6:77:6c:89:f6:d6:08:
10:95:2c:bf:77:f2:49:82:35:60:01:00:03:4a:3f:3c:7e:5b:
7d:ec:12:dc:e0:16:8b:6a:aa:d7:7f:7f:35:73:6d:6a:33:bb:
5e:d1:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:36 2026 by rpki-client