Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: cqBtgHUHJRHqnpfngyFmDtt84htHsxNmb0bglBz9Z4I=
Subject key identifier: 59:B9:7F:E5:34:45:ED:52:5C:B1:60:C6:05:4F:5E:4C:C5:81:25:B3
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01A1DD94CD48D4BF5C0F8BE91AF93ACB110E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 05:01:18 +0000
Manifest this update: Sun 15 Nov 2026 05:01:18 +0000
Manifest next update: Mon 16 Nov 2026 05:01:18 +0000
Files and hashes: 1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: GhxyaMbFoy26VKrKDSmWbCWxBLD88bwR2TuumSS+c2Y=)
5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:cd:48:d4:bf:5c:0f:8b:e9:1a:f9:3a:cb:11:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Nov 15 05:01:18 2026 GMT
Not After : Nov 16 05:01:18 2026 GMT
Subject: CN=59b97fe53445ed525cb160c6054f5e4cc58125b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:40:bd:90:d7:30:fb:5a:07:36:22:ac:31:
06:60:20:e6:ef:e2:6b:62:11:b9:1e:8f:ee:74:6d:
40:26:e9:48:d0:c6:f0:5e:44:04:9c:10:14:5a:2d:
95:0b:34:ab:a0:26:42:07:7e:47:1f:b7:5d:8e:3a:
9c:e1:73:bb:b3:18:5f:dc:9d:f2:a6:d7:ba:c7:a4:
88:72:cf:57:65:6d:3b:52:40:67:3c:7b:76:f4:b6:
ec:2a:52:be:63:ca:b1:a0:ab:89:fd:b9:65:95:8f:
62:10:32:f6:ac:6d:44:30:a2:92:7b:a9:88:4b:f4:
9b:f8:eb:c7:02:02:91:e4:01:fa:32:2d:fe:fe:12:
57:15:51:db:5b:81:9a:5d:b1:6d:e5:dc:4a:af:ab:
67:c2:d3:2b:e7:36:0a:88:9e:9f:06:19:cf:d7:b0:
55:78:18:f9:64:2c:4f:4d:e6:72:0c:ac:af:d9:94:
ba:5e:aa:c7:c3:29:4b:4a:3f:b6:e4:df:34:b2:f9:
e9:c7:65:2a:c8:87:0d:02:9e:7f:15:82:07:12:03:
ce:8b:e5:e2:af:06:3d:fd:ea:21:52:5b:40:50:5f:
0c:02:2e:86:5d:c3:04:b8:cd:98:b8:30:55:5b:fb:
40:e1:42:f6:e5:a1:a6:a7:bc:ca:02:c7:cf:73:aa:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:7F:E5:34:45:ED:52:5C:B1:60:C6:05:4F:5E:4C:C5:81:25:B3
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bc:84:bd:6f:0c:d5:8d:d5:3e:a7:ee:19:d7:39:9d:d8:5a:
06:b7:f9:5c:a8:40:ed:61:5e:5c:67:52:90:bb:e6:7e:cb:f0:
78:bc:9e:70:69:4c:cb:b5:b3:a8:15:d9:bd:a6:e9:80:fe:5b:
b1:a6:e1:e0:b0:a1:c7:d4:58:ec:68:aa:5a:b5:ef:e0:f4:16:
b9:03:0a:c1:9c:11:cf:78:8d:85:59:24:93:ac:a5:d4:c7:41:
18:9d:51:d4:88:0b:14:d8:94:0b:8c:26:2b:19:42:af:50:02:
07:1f:2f:06:1b:c0:57:4b:96:13:d4:40:fc:5e:46:48:f8:67:
32:5f:54:73:28:7b:bc:84:30:78:e9:79:3c:7b:88:a9:81:01:
4d:b6:4f:e0:4b:8d:c1:48:77:f5:63:36:3c:a0:48:f6:4e:86:
85:2d:dd:47:7c:ca:fb:cc:35:27:e7:fd:4c:e1:6c:5f:99:45:
ee:17:e8:c9:6a:b9:b6:c6:5c:0a:be:c3:7b:11:22:4c:17:58:
73:e1:ca:2c:69:6b:f0:a7:76:df:51:0c:25:66:09:11:0f:48:
13:ad:69:10:9b:08:a5:43:13:e1:c9:7e:d4:4a:d5:26:78:3b:
43:a0:84:28:70:e3:7d:9f:3b:97:5f:fa:67:02:87:8c:9c:c3:
c3:2b:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:44:07 2026 by rpki-client