Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: f5y81fa8Saqze1L6/hGXQXCazIxOalj9sKBlFUUmjJ4=
Subject key identifier: CE:F4:76:BB:A8:EA:F1:5A:D1:46:58:4C:1F:28:E3:9E:6C:BE:3F:F1
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019E1C7DFCF098DE372266087EB9ADBE9D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 14:01:19 +0000
Manifest this update: Tue 12 May 2026 14:01:19 +0000
Manifest next update: Wed 13 May 2026 14:01:19 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: /7D+FLikOZV5X6JWZF4/iegiFxYJvRKFZisR2lDVauY=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:fc:f0:98:de:37:22:66:08:7e:b9:ad:be:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: May 12 14:01:19 2026 GMT
Not After : May 13 14:01:19 2026 GMT
Subject: CN=cef476bba8eaf15ad146584c1f28e39e6cbe3ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:d4:3d:ac:fd:32:e5:98:cc:ec:39:7c:86:
0a:59:70:56:3a:c0:3f:b4:20:ab:c8:84:f0:15:17:
88:90:c4:ab:80:bf:1c:b0:c2:8d:4c:74:18:41:bc:
27:e0:5d:48:f6:b3:38:82:8f:37:9e:71:b6:25:df:
db:9f:4a:37:f2:47:74:4c:2e:0f:26:06:30:d9:5d:
fe:c6:bc:57:0a:bd:c6:d2:46:39:0b:d5:b1:12:2d:
37:98:da:00:eb:1c:af:ca:c6:34:9c:f2:7d:84:b6:
5d:cc:d0:7f:ac:78:32:82:2d:6e:4a:22:87:c0:c2:
44:15:09:1f:e4:70:c1:3c:53:ed:6f:03:a7:70:f6:
c4:f4:81:e0:85:af:9c:a1:ae:47:ee:de:d5:8e:82:
52:9c:90:07:85:cb:9b:64:73:e9:b2:b7:d6:10:16:
77:4b:96:c7:74:48:c6:5c:7d:0f:31:7b:38:0c:66:
b6:f9:6d:2e:85:f5:ba:75:8a:36:e9:a1:bc:d4:23:
a9:0d:70:01:b5:9e:b7:a7:45:76:62:99:7c:14:a6:
73:9b:98:de:d8:f2:90:da:c4:f6:c4:94:ff:ae:df:
e3:13:cf:f2:ae:67:2b:94:9f:fd:8c:11:3e:6b:90:
e4:7d:40:cc:53:0a:ac:ed:30:c3:b7:f1:13:2a:17:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:76:BB:A8:EA:F1:5A:D1:46:58:4C:1F:28:E3:9E:6C:BE:3F:F1
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:61:64:c7:c4:fb:d4:4c:93:0c:0b:03:d8:1c:95:25:43:4d:
65:e3:8c:cf:81:0e:0c:e6:17:ca:6e:99:2f:ca:68:e0:f8:49:
b0:4a:15:1e:f4:2c:4b:a8:2f:18:87:6c:83:df:5b:c5:be:48:
5f:a0:2d:f9:fe:05:35:44:73:27:3a:fe:62:8d:68:55:82:05:
21:d7:07:fd:6a:f5:f1:8d:ca:32:28:c2:25:51:82:51:01:22:
2f:20:86:af:19:15:60:bd:04:c5:4e:0d:85:3d:f1:7e:6b:96:
d8:ec:7e:67:a2:b2:ac:df:b1:fd:e0:a8:a6:45:14:ff:f1:b8:
bb:00:cc:63:07:77:0f:b7:bf:bb:c1:2c:25:94:59:e4:7e:83:
e4:f9:9c:65:35:fb:f9:d3:2f:a3:38:d6:18:f6:65:b6:f4:a7:
b1:51:1e:ea:43:20:96:ed:2d:4e:2d:4e:1a:71:c3:22:10:21:
0f:28:7c:ec:05:8f:ab:9d:65:34:21:dd:5f:37:fc:20:a4:8e:
d4:1e:f8:37:21:d3:c4:52:e0:c2:d8:5d:01:a3:8d:84:9d:69:
2a:dc:82:2f:2c:78:d4:e0:87:d6:70:f3:b8:66:03:f2:55:9b:
96:99:4d:73:7d:b8:72:90:ae:40:a7:56:81:b2:c2:5c:a1:cd:
0d:0a:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:13 2026 by rpki-client