Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: mYKd4QJOS5q5UivjRSuL21DgS4QqardENk7yC0/4vz4=
Subject key identifier: 1B:66:7D:9F:5F:21:0E:34:B4:9C:99:EA:69:88:E3:CA:8D:FC:02:6C
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 019CA9B3739050E3E5F6D7321C722E80E782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 16E0
Signing time: Sun 01 Mar 2026 14:00:35 +0000
Manifest this update: Sun 01 Mar 2026 14:00:35 +0000
Manifest next update: Mon 02 Mar 2026 14:00:35 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: YOIddYOAe8vqjMm9cengsrXjKBCmPvgLYoVPlHNfTWk=)
2: lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa (hash: y1+djgClVik/37jj410N7sJ7abi7QHTOhTCOqoWur98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:73:90:50:e3:e5:f6:d7:32:1c:72:2e:80:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Mar 1 14:00:35 2026 GMT
Not After : Mar 2 14:00:35 2026 GMT
Subject: CN=1b667d9f5f210e34b49c99ea6988e3ca8dfc026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:5e:e7:10:83:65:9c:fa:66:e2:3c:d5:90:
4e:2a:ca:cb:f3:66:2f:a8:12:6a:f3:6c:3c:f4:33:
b9:6e:87:13:26:45:b9:32:8b:b8:97:b3:5b:2d:a6:
bb:0c:da:13:01:83:93:a5:fc:49:6d:ae:56:68:62:
d5:f6:15:10:1e:b3:58:33:21:69:b6:41:28:f3:db:
15:16:8f:be:7d:71:e9:84:3a:3b:98:1d:98:4d:de:
4e:6f:ab:ff:a9:ac:38:9e:c8:3c:cb:fa:90:f6:09:
24:ff:4a:b2:02:1d:39:e3:24:5d:d6:a3:fa:83:fd:
ce:39:3e:ca:9c:71:3e:a8:f3:61:0e:8d:43:74:a0:
b0:75:c7:ce:8c:cb:bb:f9:f4:d7:1e:6f:14:85:62:
68:1c:3a:bf:d7:3c:d3:b1:cc:13:ba:c9:7a:e6:3c:
63:24:72:5c:8b:22:be:bb:42:23:4f:d7:0c:e7:60:
a3:d0:de:c6:99:91:a3:07:14:ad:b7:56:56:4e:8c:
ea:c7:74:4c:97:80:43:46:ce:bc:a4:56:00:b0:e9:
b5:98:34:80:83:3e:d5:b9:90:4c:2c:a0:f0:d2:32:
13:95:ce:af:c9:07:01:86:3b:b3:44:bf:41:ca:81:
8b:20:39:65:f9:37:73:57:38:38:88:5d:32:8c:82:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:7D:9F:5F:21:0E:34:B4:9C:99:EA:69:88:E3:CA:8D:FC:02:6C
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8d:86:45:25:06:f8:f0:b1:7e:cb:4f:96:4f:a9:fb:83:de:
e5:1a:d8:48:20:df:b2:7d:9a:68:c6:33:e2:c9:b1:3e:13:30:
43:e3:c2:fe:1f:d6:26:a8:65:f2:52:66:18:66:07:a6:4b:30:
18:f9:9b:27:3b:30:86:d0:4c:c0:63:53:c9:2f:86:dc:fe:06:
e6:f3:46:8d:29:ba:cd:c3:e8:9c:2d:5c:5e:d2:6a:75:79:f5:
12:29:d3:e4:27:55:91:b5:bc:00:1a:90:1d:67:e2:65:df:f2:
c3:27:9f:24:be:79:1e:69:df:81:0d:19:b3:6b:f6:ee:b9:d9:
9a:98:16:e1:cc:4e:85:fe:49:61:65:fc:54:b3:ff:b8:00:e6:
31:d0:ee:62:cb:e3:65:b7:24:c4:8d:de:6d:9b:5e:5b:dd:7b:
a1:8f:83:41:c6:ee:45:94:c1:a0:83:b6:d1:19:67:c1:c2:af:
a7:54:06:13:ad:23:e7:c2:03:b2:a4:d2:8b:a6:34:be:df:28:
a3:84:ef:26:22:87:1c:df:ec:32:d1:32:84:21:b1:a9:27:68:
68:9b:88:b5:c3:fb:2f:18:62:c5:d4:59:f5:5d:b7:c9:a7:cc:
b4:8f:49:a7:28:2c:2b:33:6b:c0:ce:87:96:2e:d7:04:ed:74:
99:31:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:11 2026 by rpki-client