Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: yOrBD0MJ9Y4AnAAKcOemlF/RAkMrzpoVp2EE3HjSJDk=
Subject key identifier: CC:97:1E:99:B4:77:0D:9C:38:2F:5E:1A:7D:E8:6B:13:ED:12:EF:31
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 019D992B4B6A5F64E7D154F4A802CBE67419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 175C
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: hyWagfZ+/6ktvmG7IFwZI+8QMY7Dzb7gn5q+6zJQHDM=)
2: lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa (hash: y1+djgClVik/37jj410N7sJ7abi7QHTOhTCOqoWur98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4b:6a:5f:64:e7:d1:54:f4:a8:02:cb:e6:74:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=cc971e99b4770d9c382f5e1a7de86b13ed12ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:eb:a5:75:aa:9f:d5:56:00:0d:74:8c:b9:
b8:85:f3:b0:36:b3:da:30:45:dd:c4:86:c2:33:60:
be:4e:1c:7b:b5:e1:ae:65:ea:2a:f2:41:8f:79:e5:
41:5a:71:7f:02:59:73:d2:a7:d6:82:0b:27:e8:5d:
47:1e:7d:2c:6e:18:8e:14:f2:7d:9f:61:6c:c6:1b:
0c:43:a4:c4:29:d1:d3:a2:c3:5f:2f:d9:f2:50:ed:
2e:dc:25:21:8a:00:d0:4c:2f:17:db:01:35:eb:bc:
92:a0:c1:c3:f7:04:6f:ef:a4:98:d1:f0:9d:54:85:
cb:3e:c5:ee:30:e0:4c:a6:05:bb:b4:05:4d:11:52:
c1:da:2e:d0:55:dc:b3:ac:13:e3:9b:a2:91:3d:86:
ad:99:03:f0:b7:15:20:a5:30:98:f1:b6:6a:a1:01:
5c:c7:c2:5a:d5:7a:7b:be:97:02:9a:8c:94:ca:f5:
ed:f6:5b:ac:b0:e4:7b:1c:e8:8e:73:cd:42:73:03:
f9:a4:a1:85:bb:f3:92:51:a2:67:47:0e:2c:ec:b0:
66:f9:55:25:48:00:45:e3:63:1c:7c:b5:ae:e9:92:
5e:ca:0b:f3:82:66:53:bc:9b:4f:29:d1:1f:13:6d:
9a:c6:19:f2:3a:c9:88:fa:8a:9f:ff:e2:9e:43:37:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:1E:99:B4:77:0D:9C:38:2F:5E:1A:7D:E8:6B:13:ED:12:EF:31
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:f3:3e:3f:02:9f:d0:f6:aa:92:82:97:1d:82:48:5b:dc:
d2:62:e1:b2:30:f9:69:28:21:3e:ff:9c:e8:f0:57:e4:78:74:
08:28:1a:18:1f:bd:8c:26:c3:c6:b0:d1:5a:87:d2:eb:c2:59:
88:da:27:b0:6f:88:cf:28:35:86:99:7e:f1:cd:41:d4:4a:39:
27:db:5c:d2:0d:67:57:d3:de:36:28:92:59:f9:d5:a0:80:36:
37:f9:3e:c2:e3:5a:4c:24:51:b1:93:a4:fa:bf:72:a1:a7:04:
28:d3:19:93:4b:3e:e6:c6:30:68:5b:d2:53:09:24:52:6e:e2:
7b:26:6a:60:20:1d:5b:c1:4c:d1:03:b8:0b:32:ae:db:27:2a:
dc:86:26:41:a9:e0:5f:6a:f6:fb:34:02:42:5b:83:a8:ab:2a:
f7:7e:53:92:4a:f2:2c:17:cc:70:00:77:c9:0c:02:5a:65:75:
7d:8b:1b:f2:69:f2:10:4a:a7:da:cc:52:e2:0a:58:00:a6:3f:
60:3e:e6:1e:02:a7:f0:a0:f0:60:07:85:2c:45:e1:f1:94:85:
f4:38:16:16:b0:2e:b8:ea:d5:ac:e7:74:e7:a9:8f:03:62:a8:
1b:b5:bf:97:64:c8:6b:82:5c:52:c2:e2:ee:c9:ce:95:d5:4f:
ac:9d:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:32 2026 by rpki-client