Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: dG+0akWHpzdplfeIC9VQSFX0K3a9t6ocNNJeEspG5ds=
Subject key identifier: 41:E8:BC:96:8F:F1:A6:B2:E8:19:0A:89:AD:EA:C6:14:8A:57:FE:2B
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 01A0D8DEEB8A43AC9323B56DCAB81DBB54E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 0217
Signing time: Fri 25 Sep 2026 14:01:22 +0000
Manifest this update: Fri 25 Sep 2026 14:01:22 +0000
Manifest next update: Sat 26 Sep 2026 14:01:22 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: b2jc/De0iK27Gg3kGkmhRWfPEHnWftQYU0BRrXxkLzo=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:eb:8a:43:ac:93:23:b5:6d:ca:b8:1d:bb:54:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Sep 25 14:01:22 2026 GMT
Not After : Sep 26 14:01:22 2026 GMT
Subject: CN=41e8bc968ff1a6b2e8190a89adeac6148a57fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:89:16:01:24:2b:ff:ad:50:86:58:48:ba:
79:0d:eb:5a:80:0b:8e:c6:e2:4b:8c:1c:96:35:68:
51:ac:12:37:c7:a7:d0:ec:9a:98:44:da:0f:61:11:
76:e7:49:29:52:f8:15:10:ae:3e:25:dd:3f:d8:60:
b4:ef:0f:e3:54:86:78:32:fd:18:fc:1a:bc:0f:65:
d5:74:66:dc:5a:c6:0e:b1:24:ba:57:1b:41:7d:67:
b9:95:eb:8b:54:2d:ae:e7:c3:d9:56:a2:3d:a9:66:
8a:d7:46:3b:06:44:be:39:a8:16:b3:ad:1a:dc:84:
26:2c:a6:f8:8e:89:ce:ed:97:17:78:6b:34:03:d5:
9e:a5:5c:c7:a1:88:c7:91:7e:69:52:55:2e:f8:82:
0d:2f:03:c3:b9:e4:63:43:7b:69:e0:9f:25:cc:8b:
49:91:80:bb:87:6d:cb:68:3b:3b:63:63:1b:d4:e2:
8b:9b:c9:d4:df:b4:01:0d:8f:4e:b1:0a:0e:0b:79:
44:6b:bf:ca:20:d5:6c:3e:fc:65:c2:d7:5a:01:8f:
b5:3d:25:07:b6:7c:e1:a1:99:8a:84:4a:49:22:f4:
4c:69:85:95:3a:21:be:eb:b0:a2:64:2f:f4:9a:83:
fd:cb:3c:f3:64:f0:c3:c3:39:fd:eb:72:43:7e:1b:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:BC:96:8F:F1:A6:B2:E8:19:0A:89:AD:EA:C6:14:8A:57:FE:2B
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:10:f7:d8:94:88:13:4d:82:72:a4:0d:d8:4e:34:69:60:10:
a0:00:fe:5b:c5:e9:c8:b4:bd:eb:aa:89:d2:ae:93:31:23:1d:
50:02:6e:7d:c4:f2:a7:d1:5a:d8:f0:7b:ab:6e:6c:3d:ed:d7:
35:07:f2:72:95:ed:a3:59:8a:b3:41:b6:d6:34:88:b6:c1:30:
87:f9:85:50:09:82:73:c4:72:84:41:64:c5:5c:7e:a0:5e:59:
bd:77:d3:de:c2:bd:f0:a8:8c:a8:ac:8a:c9:5b:6b:99:d7:a6:
07:c2:0c:de:1e:d6:fe:82:ec:aa:97:d9:e5:10:0f:3f:58:da:
9c:15:bb:e9:f5:a8:1a:0e:57:cc:5d:d3:a7:35:6f:95:29:95:
d3:3c:f0:af:ad:46:f0:b0:b2:fa:78:02:13:11:a1:b5:38:5d:
dd:50:c4:9d:8d:9d:a9:f9:fd:6b:e2:fd:db:b0:d8:b5:6b:80:
31:c1:cc:8c:cc:bb:d8:10:ff:c0:36:aa:71:e3:7b:b1:68:7b:
da:c9:78:62:9c:f7:0e:bb:0d:b1:7d:82:f2:b0:ce:1d:b9:23:
a1:40:36:5f:81:a2:91:8f:13:6e:f9:3d:7a:fa:e5:a0:58:1c:
dd:f0:8b:98:cb:9d:98:08:4d:ab:a1:59:9d:d0:38:e8:85:4f:
2e:5e:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:00:24 2026 by rpki-client