Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json)
Hash identifier: ePbYoaXoppafv4Hj8e0sjvRjLVrjzOFuh8541Kv0DhU=
Subject key identifier: D0:40:EF:EE:21:4D:D3:32:1E:B6:1E:51:C4:A0:A0:66:88:7E:D8:ED
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 019CAA58709FA1B80F5229C99FA77847366D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:00:48 +0000
Manifest this update: Sun 01 Mar 2026 17:00:48 +0000
Manifest next update: Mon 02 Mar 2026 17:00:48 +0000
Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: 8obo4bedomB86cbkJtqhqCuBSTi6rGGtXDEBgHDJ1cM=)
2: aS8mVetVV64JjwlhI8fk4CgYJuY.roa (hash: 5ScmfISq4FtoPsxtoa+DY1bHZcOcz3J826X0cZ02V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:70:9f:a1:b8:0f:52:29:c9:9f:a7:78:47:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Mar 1 17:00:48 2026 GMT
Not After : Mar 2 17:00:48 2026 GMT
Subject: CN=d040efee214dd3321eb61e51c4a0a066887ed8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:52:c1:83:45:86:7f:ea:62:49:41:c4:47:
d9:e1:2e:b3:82:da:f3:78:1f:2d:57:55:62:54:f4:
91:17:81:05:dd:2b:87:6c:98:4e:af:d6:aa:27:c2:
2b:7b:e0:c0:8b:f0:1c:82:7e:d1:43:ff:69:d9:bf:
62:98:77:a1:83:c1:2d:79:36:a5:3e:a9:93:60:04:
3e:6e:3d:82:a1:79:c1:a7:2b:ef:dc:ca:d1:d5:7b:
7b:5f:ae:97:cb:90:a2:51:fe:c1:ad:66:b1:01:fc:
f8:e1:f0:39:ec:c4:61:da:42:52:c5:7b:bb:66:62:
b8:61:4a:16:3f:de:6d:b8:af:79:85:56:7f:76:01:
7d:0d:91:9c:40:fa:27:40:4d:24:65:bd:76:70:af:
be:41:f8:de:88:7a:6c:bc:1a:8f:00:4a:1e:50:12:
97:d1:b0:ed:0d:c1:4b:ab:9e:7e:1a:95:78:c3:7e:
ef:5b:f9:15:cc:e1:69:0c:0f:99:c7:8d:23:7d:bf:
6c:3a:a3:1d:78:c8:0d:51:1c:b4:44:c6:f5:9a:74:
81:0d:43:73:04:d0:0d:c7:88:d4:10:33:b7:6c:fe:
17:e8:4e:fd:d4:c8:87:e7:3d:64:de:76:85:c3:f7:
53:f2:99:d9:b7:5c:65:7a:94:84:56:10:fa:62:7f:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:EF:EE:21:4D:D3:32:1E:B6:1E:51:C4:A0:A0:66:88:7E:D8:ED
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:33:f5:f6:21:66:17:51:69:f2:6e:41:d1:72:ef:34:95:3c:
29:51:9c:46:42:8a:33:71:7e:f8:33:a9:e8:69:15:03:64:0a:
1c:a1:f5:43:20:57:51:d1:20:48:83:bb:b3:26:a7:52:6d:45:
c6:d0:a4:4c:4c:4b:4e:b3:ff:69:90:33:59:5f:7b:1d:cd:a1:
1d:b0:ac:9f:e7:3b:ec:24:e5:df:10:a0:8a:7e:83:40:86:12:
48:55:d1:08:fe:e9:c1:f4:a2:8a:71:8e:b3:63:d5:28:a1:3e:
22:5a:6b:ee:66:0d:87:87:44:07:55:cd:c6:7d:60:21:26:38:
dd:b2:1a:a1:7d:38:51:51:4d:cd:da:87:ee:93:a4:9e:d7:b5:
5a:27:66:58:a3:ff:47:36:8b:e6:f6:fe:e7:d2:85:59:fa:57:
1f:08:f8:a1:74:1e:90:12:4a:09:5c:d5:05:4c:e6:33:94:8a:
7c:bc:de:d8:4e:84:9f:61:83:29:b7:06:57:7e:e0:15:9f:09:
cb:5b:af:d8:ef:39:3b:84:4a:28:57:8c:8c:5f:e6:7a:bf:a1:
26:b7:d1:79:32:95:7f:49:86:d0:77:8a:6c:5c:41:9d:59:11:
c9:30:08:00:5e:61:fb:00:88:a7:cb:24:26:a9:ca:b9:7d:51:
94:6b:4c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHCfobgPUinJn6d4RzZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWE1ZTM5Zjg2MzU3MzZlNDhkZjUzODIyYTVjYWNjMTBi
NDNhMWYwHhcNMjYwMzAxMTcwMDQ4WhcNMjYwMzAyMTcwMDQ4WjAzMTEwLwYDVQQD
EyhkMDQwZWZlZTIxNGRkMzMyMWViNjFlNTFjNGEwYTA2Njg4N2VkOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2utSwYNFhn/qYklBxEfZ4S6zgtrz
eB8tV1ViVPSRF4EF3SuHbJhOr9aqJ8Ire+DAi/Acgn7RQ/9p2b9imHehg8EteTal
PqmTYAQ+bj2CoXnBpyvv3MrR1Xt7X66Xy5CiUf7BrWaxAfz44fA57MRh2kJSxXu7
ZmK4YUoWP95tuK95hVZ/dgF9DZGcQPonQE0kZb12cK++QfjeiHpsvBqPAEoeUBKX
0bDtDcFLq55+GpV4w37vW/kVzOFpDA+Zx40jfb9sOqMdeMgNURy0RMb1mnSBDUNz
BNANx4jUEDO3bP4X6E791MiH5z1k3naFw/dT8pnZt1xlepSEVhD6Yn+gCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBA7+4hTdMyHrYeUcSgoGaIftjtMB8GA1UdIwQY
MBaAFEDqXjn4Y1c25I31OCKlyswQtDofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMt
MThlOTEyOTYwMjJkLzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMtMThlOTEyOTYwMjJk
LzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTP19iFm
F1Fp8m5B0XLvNJU8KVGcRkKKM3F++DOp6GkVA2QKHKH1QyBXUdEgSIO7syanUm1F
xtCkTExLTrP/aZAzWV97Hc2hHbCsn+c77CTl3xCgin6DQIYSSFXRCP7pwfSiinGO
s2PVKKE+Ilpr7mYNh4dEB1XNxn1gISY43bIaoX04UVFNzdqH7pOknte1WidmWKP/
RzaL5vb+59KFWfpXHwj4oXQekBJKCVzVBUzmM5SKfLze2E6En2GDKbcGV37gFZ8J
y1uv2O85O4RKKFeMjF/mer+hJrfReTKVf0mG0HeKbFxBnVkRyTAIAF5h+wCIp8sk
JqnKuX1RlGtMNA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:34 2026 by rpki-client