
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: QwPWRTtfOzuw8ZmU6lobpw1/3RL7FJ1JYHaGuncutWw=
Subject key identifier: B7:EB:2A:7D:EE:B0:2E:05:B5:58:11:6F:E2:07:84:A0:DF:E2:92:36
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019EBE47BDC12D6B28AFE9F3743278562135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 0100
Signing time: Sat 13 Jun 2026 00:00:33 +0000
Manifest this update: Sat 13 Jun 2026 00:00:33 +0000
Manifest next update: Sun 14 Jun 2026 00:00:33 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: t83z1ym09aTX8uJKxeozc7vX51q/q84pwJ6OGwiw1Xo=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:bd:c1:2d:6b:28:af:e9:f3:74:32:78:56:21:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Jun 13 00:00:33 2026 GMT
Not After : Jun 14 00:00:33 2026 GMT
Subject: CN=b7eb2a7deeb02e05b558116fe20784a0dfe29236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:5a:fe:6d:b0:57:b7:3b:8a:42:6b:f8:05:
34:e0:e4:3b:6a:1f:05:2d:cd:b3:72:d3:97:87:0d:
16:13:a3:1c:01:6b:a8:47:d9:1d:d1:ea:7f:de:3e:
a5:33:7c:1e:a9:ed:05:ac:3d:b9:4b:16:43:78:1d:
f9:3a:31:2f:4b:d6:ff:b8:8e:e2:18:aa:e9:9d:bf:
9a:84:ec:e7:98:a0:73:c1:7b:3c:2b:74:f5:f1:97:
53:35:ef:96:c7:61:41:50:b8:33:76:43:51:03:90:
0f:3c:04:19:c4:9f:8c:27:0e:dc:38:ec:c1:e2:e2:
bd:35:22:f4:6f:28:8a:66:c0:2e:c1:3a:8f:ed:9a:
df:49:a7:8d:e3:0f:da:15:f3:a1:f0:c7:e2:8d:49:
c1:ec:ff:57:ff:5b:66:37:81:9e:3e:26:a0:39:4d:
a9:c7:a0:43:e6:06:93:26:64:de:46:5d:cd:34:f3:
c4:ab:74:4b:44:a3:96:d9:7e:35:9e:b9:00:9d:4c:
06:bc:1b:65:71:3b:b7:3e:c3:a1:25:1a:58:58:48:
15:b1:af:80:5b:6c:42:37:2c:f0:81:85:6f:14:91:
36:6d:3d:68:b8:fe:22:37:48:55:4b:4c:53:4f:0f:
b1:5b:74:82:7a:88:fe:af:61:59:4e:6a:19:13:f4:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:2A:7D:EE:B0:2E:05:B5:58:11:6F:E2:07:84:A0:DF:E2:92:36
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:da:18:8b:32:6e:ac:d9:d6:12:84:8c:9d:e2:97:cc:bb:48:
5a:9d:d9:c1:50:1e:ce:e6:99:23:a3:0d:14:30:0b:f2:85:d3:
ec:32:45:e3:58:eb:47:bf:e1:04:08:5d:87:5f:56:48:47:f3:
c2:a5:78:52:36:de:8a:49:bb:37:6e:cd:81:ac:83:2e:98:48:
42:88:69:e3:fc:45:da:c2:e1:81:1a:af:c7:47:0d:1a:d9:d5:
c8:1e:73:28:43:5a:71:ec:32:7d:2f:f1:b3:e3:b8:81:8b:78:
ed:8d:fd:66:f4:97:23:ec:78:49:3a:63:58:1f:fa:c7:d7:5c:
da:29:29:cc:7c:b8:95:36:b0:af:6d:04:86:9c:03:d4:3d:b8:
dd:b9:83:8a:63:49:43:d6:70:2c:0a:75:5b:99:b0:8c:12:b3:
0c:a8:9a:d8:15:52:c8:ad:63:7a:79:91:34:9f:52:79:cb:7e:
ac:4d:bf:d5:8f:c1:eb:43:a1:9e:dd:c3:74:ba:b5:b1:fb:63:
78:26:be:d5:5c:8b:0a:f2:64:ae:9a:51:79:9f:07:d7:3e:f2:
b1:15:b6:84:a3:9d:a5:bd:db:b4:d6:64:3d:7b:76:18:93:e5:
71:c8:12:85:b1:d8:f7:56:c4:81:f7:57:23:2e:c1:c5:9d:5b:
c9:5e:41:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:42 2026 by rpki-client