Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: 5IU7hTGEgj8bfxHaqr2Swd5oacRiSAeRYxekNVtlUL8=
Subject key identifier: 3D:CA:14:C5:D4:F0:F1:0A:05:5A:CA:8C:38:6C:1B:C7:15:EB:78:3B
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019D98BD4A9ED3C185AD4D160EB944C623D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 68
Signing time: Fri 17 Apr 2026 00:00:35 +0000
Manifest this update: Fri 17 Apr 2026 00:00:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: QZhNx0+nwiQHuI9pX6S1355/+lH1n7xz7eU4DTS0iZg=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4a:9e:d3:c1:85:ad:4d:16:0e:b9:44:c6:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Apr 17 00:00:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=3dca14c5d4f0f10a055aca8c386c1bc715eb783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:f6:a0:05:4b:73:1f:a8:b7:f3:35:16:17:
c8:c5:ab:57:4e:81:1d:37:7c:e9:b9:a4:dc:66:3c:
a3:85:1e:36:c2:50:4f:f7:db:ce:c6:f8:92:39:4f:
d4:4a:9b:1a:fd:b2:0f:19:b4:64:1a:2f:bf:f4:21:
6c:04:be:75:dc:f2:62:f9:87:f4:41:1d:ac:3d:19:
da:99:ad:fa:07:9d:31:2d:19:1b:af:cd:1c:0b:fa:
a9:f3:61:60:80:3c:08:58:9a:20:c1:50:fd:f1:e5:
66:e6:7b:f0:af:3a:19:c8:47:2a:19:6e:e4:c7:aa:
77:ba:f3:cb:87:be:88:04:f5:48:b3:7c:f1:f6:c8:
07:9f:2b:1f:10:0b:94:72:08:f1:fe:b4:e0:e8:f4:
47:ec:3c:18:72:01:a2:d6:1e:dc:8c:4a:73:96:60:
65:06:ba:9f:56:fe:2e:90:cf:05:ae:72:2b:f4:ad:
74:8a:59:2e:a8:62:2b:71:51:23:e3:7b:4e:46:b9:
69:01:fe:a1:da:59:7c:f8:c7:7f:bc:91:27:bd:aa:
a0:33:13:68:5f:08:3d:eb:dc:49:2e:d6:59:1f:c3:
f3:e4:05:f2:93:9c:b5:ad:ee:2d:8a:ff:78:18:cd:
0f:ea:15:e5:51:7b:23:5b:3e:c4:e9:b3:49:d5:c6:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:14:C5:D4:F0:F1:0A:05:5A:CA:8C:38:6C:1B:C7:15:EB:78:3B
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:74:69:2d:1f:f6:e0:dd:0b:38:6a:7e:7e:d3:95:7d:e3:
c0:71:6c:dd:85:8a:42:11:61:26:94:17:8b:62:e3:db:00:61:
75:b1:0c:d3:45:a6:07:2d:1d:46:ed:ce:48:e0:80:f1:f4:02:
10:09:b8:11:01:73:dd:4e:e8:b1:91:f5:22:a3:f8:8e:2d:80:
25:d4:66:59:a9:c7:79:2c:7a:5e:63:37:5a:83:cd:19:1e:e2:
62:9c:33:6a:d1:66:dd:49:be:09:ef:49:58:6c:68:b7:c4:8e:
cb:96:fe:21:73:a0:d8:66:bb:30:13:a5:a6:ae:9e:9a:8f:98:
41:ad:6d:ab:9e:ba:6c:b9:47:5c:a5:5a:8e:a2:cc:73:52:33:
94:14:1d:86:c7:95:cf:71:e8:d8:b4:bc:d7:8b:da:23:a6:8c:
36:f3:79:fd:78:5c:8e:08:ab:05:1c:1d:bc:18:6f:0f:b1:b8:
1e:4e:10:6c:10:81:21:bb:9d:e4:24:93:38:40:3e:05:57:06:
56:32:29:00:1f:10:6d:f8:f5:e4:07:8f:ae:ea:3a:81:2c:2e:
5f:f1:79:b1:9f:2c:98:97:c6:4b:51:87:7a:1d:1f:09:01:36:
52:11:34:f4:67:34:c6:a7:9b:5a:e8:53:8a:c5:a3:a1:80:97:
5c:91:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:17 2026 by rpki-client