Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: jIi4zc+A467YIf30M3rMfRUynmSXqoHDwi9AfvwUXLc=
Subject key identifier: 74:AD:D5:38:A4:34:E1:92:EE:23:BF:50:9E:A7:E9:7C:14:D6:8B:BB
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01A0D8DF1F31A61A4F17744D6D31131E198D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 14:01:36 +0000
Manifest this update: Fri 25 Sep 2026 14:01:36 +0000
Manifest next update: Sat 26 Sep 2026 14:01:36 +0000
Files and hashes: 1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: tmIanNxGI0dL9oQ5NlgnQJP55vC6pu7LhWVNzjSdtW8=)
5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:1f:31:a6:1a:4f:17:74:4d:6d:31:13:1e:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Sep 25 14:01:36 2026 GMT
Not After : Sep 26 14:01:36 2026 GMT
Subject: CN=74add538a434e192ee23bf509ea7e97c14d68bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:da:86:d8:0f:5b:f6:92:b2:3d:2a:7d:5f:
65:29:d9:95:ae:05:7e:0f:f0:3c:7e:c5:9c:c9:81:
38:12:55:f2:7c:71:ba:c0:73:d4:8f:92:db:ea:28:
07:98:86:6d:3f:aa:6d:da:d7:7c:46:83:12:5c:c8:
bf:48:df:c0:53:c4:28:10:ea:6c:23:2e:b0:6d:9e:
c1:06:6a:fe:69:a9:ff:2f:42:4a:de:ad:cf:1d:86:
54:42:86:de:2c:8f:b7:5a:e9:de:0f:a7:6d:61:22:
27:df:a2:9a:cd:b9:36:d2:e0:82:48:65:1f:01:a4:
a2:4f:ea:0a:14:0b:c6:b8:9a:14:be:e0:1c:7d:e6:
a4:2d:88:be:5f:a5:d1:6b:30:36:d3:5a:24:d6:21:
56:bd:b7:5e:9b:b3:c5:d4:04:72:4d:d5:75:4e:47:
09:a7:fd:06:47:2c:5c:b5:b4:54:2b:2e:47:cb:2a:
b0:17:fb:d7:1d:a9:23:fd:8c:94:32:06:de:eb:01:
97:a6:21:85:bb:98:a8:33:af:4d:e2:ec:8a:e7:3c:
bf:4e:53:e6:cb:4c:ff:21:53:5c:bd:a6:0d:23:b3:
e5:f0:72:d2:9f:a8:b0:e7:88:c5:b5:98:c4:5e:2e:
9e:a1:e7:03:9c:2b:26:51:32:95:06:55:0f:6e:67:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:D5:38:A4:34:E1:92:EE:23:BF:50:9E:A7:E9:7C:14:D6:8B:BB
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fe:74:58:62:f8:51:6b:e5:4c:43:51:dd:c8:1c:4e:e5:07:
f5:e9:8d:86:2e:a3:ad:2d:04:4a:9f:86:53:e8:32:1e:43:a7:
57:b9:62:4e:a6:f5:2d:fe:0e:be:66:69:16:f7:5b:9b:8b:a2:
19:24:0a:21:0b:b4:bb:a0:59:c7:f4:c0:e0:16:26:a8:e8:27:
5e:47:42:42:9f:06:fd:a6:85:ce:76:41:c1:82:ad:3e:da:49:
1e:11:40:8a:75:6e:42:c4:62:2e:54:5f:2b:a1:f3:27:a3:d3:
52:49:91:76:12:2c:23:b5:79:14:55:7b:18:a1:fb:3d:ea:75:
3c:83:e7:92:0a:a0:d2:64:18:f0:7f:78:96:7e:df:55:24:f3:
bb:6d:91:b3:99:e4:db:e3:96:8e:a7:d5:52:9a:79:07:ef:87:
c5:d0:7c:4d:a3:51:a8:3f:99:20:69:df:26:d8:92:7c:bc:5c:
b2:f3:f7:56:e4:11:81:81:07:8a:4a:16:19:53:e4:cb:a7:e9:
ba:78:f4:26:52:1d:f7:91:01:37:de:d3:d8:7e:fa:4c:9e:87:
9a:20:9b:44:bf:cb:8e:81:b3:3e:6d:ff:e5:47:c7:31:a4:69:
f9:04:49:43:b9:95:d5:4f:90:e0:61:d9:b0:95:74:4b:b9:15:
9c:1b:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:34 2026 by rpki-client