Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: w5bASBHkoscFfFueIFo9zVX8NBAlLHNsS2TYnH9IV/U=
Subject key identifier: 7E:E3:A0:94:9A:25:B0:E7:E7:DC:DD:18:D6:62:F0:51:C3:3D:F0:C5
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 01A0ED41EBABD97AE1474B2B6BD7CFD855BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 13:01:55 +0000
Manifest this update: Tue 29 Sep 2026 13:01:55 +0000
Manifest next update: Wed 30 Sep 2026 13:01:55 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: vceOUOwHtPL12cQgVGtphQdNs216lP49FGgQe9hlJwE=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:eb:ab:d9:7a:e1:47:4b:2b:6b:d7:cf:d8:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Sep 29 13:01:55 2026 GMT
Not After : Sep 30 13:01:55 2026 GMT
Subject: CN=7ee3a0949a25b0e7e7dcdd18d662f051c33df0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:0c:b6:51:da:b8:00:2a:c0:e4:7c:ff:33:
de:8b:5a:ba:a9:d7:20:c1:72:8c:fd:83:17:85:67:
f4:0a:1a:c8:65:11:55:b5:41:44:bd:17:b0:5c:56:
2a:00:2f:33:bf:b5:f4:3b:46:42:0c:1c:73:3c:49:
8e:70:89:4a:1a:7e:ec:9f:98:c2:64:70:fc:c0:e7:
7b:d4:6a:2f:e3:50:4d:00:35:3f:4e:bc:1a:ea:67:
31:40:f1:c5:6c:8a:46:ed:a5:49:b6:22:40:9b:01:
0e:59:4b:8c:c4:60:11:32:bc:ba:0f:8c:68:4a:4b:
00:7a:98:51:d1:09:6e:62:fb:57:bc:33:1f:5a:37:
18:1d:4c:81:8b:0c:f3:82:a1:de:9d:81:5f:75:df:
54:14:47:97:5c:12:bc:06:ed:66:65:d3:47:d0:fb:
03:d9:42:cf:73:2d:e2:de:f7:2f:57:80:da:0d:68:
73:4a:8d:73:db:40:4c:a7:58:8e:fc:8d:34:7e:61:
9f:5d:6c:a5:6c:c1:8e:0a:1d:58:d4:64:3c:10:78:
2c:03:dc:8e:42:c8:80:05:f0:65:ac:98:50:8d:8a:
51:90:f8:d0:3f:8d:ce:cb:ea:ea:95:0e:7c:2a:8c:
2e:28:84:e6:c8:c3:77:8b:f1:87:8b:7a:5e:de:35:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:A0:94:9A:25:B0:E7:E7:DC:DD:18:D6:62:F0:51:C3:3D:F0:C5
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fa:f2:5a:aa:21:73:b6:67:1b:eb:1f:53:84:3e:03:d8:34:
c8:c8:95:97:95:b3:ca:ed:55:01:01:9c:40:d7:8a:b0:b3:6f:
61:4b:f2:07:01:67:ae:34:3e:53:eb:b8:30:dd:3a:65:f5:1f:
8f:88:fb:9b:63:7a:04:7c:3c:f1:a0:36:a4:ed:d2:b6:5c:23:
e0:79:18:63:e6:ee:18:c5:0f:40:91:73:67:f1:4d:45:aa:3a:
8b:50:29:7d:53:4a:fa:1a:0f:48:3f:22:e3:2e:ae:9b:48:a5:
1e:fe:bb:eb:97:de:1c:67:53:de:e1:ba:c9:c3:1f:20:d9:c4:
3f:ec:68:ab:c8:96:95:8c:ea:29:d9:bd:40:d3:e5:db:17:ee:
e0:6b:a1:28:5c:12:ec:08:18:5a:b1:a7:4b:61:5f:eb:0b:78:
01:75:39:3a:ea:fa:ad:48:eb:b2:e7:cc:f7:f3:ca:d4:35:17:
92:9b:0a:27:35:66:17:30:8f:64:2b:ac:5e:a4:b8:ef:82:9c:
2f:28:a4:73:c0:64:48:dc:b5:24:8b:9e:88:48:94:23:de:97:
3f:6b:1e:3f:ad:8f:f2:fb:76:bb:89:3b:c6:41:fe:94:66:16:
6f:55:cc:8f:b3:e0:f3:d1:81:29:64:4c:b5:32:f6:e8:21:c9:
f7:95:a8:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtQeur2XrhR0sra9fP2FW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZTM1ODFhZGRkNmI5OWRkODc0NGI5ZTI4ODZmYmIwMmFl
OTE4ZTMwHhcNMjYwOTI5MTMwMTU1WhcNMjYwOTMwMTMwMTU1WjAzMTEwLwYDVQQD
Eyg3ZWUzYTA5NDlhMjViMGU3ZTdkY2RkMThkNjYyZjA1MWMzM2RmMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wkMtlHauAAqwOR8/zPei1q6qdcg
wXKM/YMXhWf0ChrIZRFVtUFEvRewXFYqAC8zv7X0O0ZCDBxzPEmOcIlKGn7sn5jC
ZHD8wOd71Gov41BNADU/Trwa6mcxQPHFbIpG7aVJtiJAmwEOWUuMxGARMry6D4xo
SksAephR0QluYvtXvDMfWjcYHUyBiwzzgqHenYFfdd9UFEeXXBK8Bu1mZdNH0PsD
2ULPcy3i3vcvV4DaDWhzSo1z20BMp1iO/I00fmGfXWylbMGOCh1Y1GQ8EHgsA9yO
QsiABfBlrJhQjYpRkPjQP43Oy+rqlQ58KowuKITmyMN3i/GHi3pe3jWIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7joJSaJbDn59zdGNZi8FHDPfDFMB8GA1UdIwQY
MBaAFEDjWBrd1rmd2HRLniiG+7Aq6RjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYt
ZmM1OWRlZGIxZDJiLzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYtZmM1OWRlZGIxZDJi
LzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfryWqoh
c7ZnG+sfU4Q+A9g0yMiVl5Wzyu1VAQGcQNeKsLNvYUvyBwFnrjQ+U+u4MN06ZfUf
j4j7m2N6BHw88aA2pO3Stlwj4HkYY+buGMUPQJFzZ/FNRao6i1ApfVNK+hoPSD8i
4y6um0ilHv6765feHGdT3uG6ycMfINnEP+xoq8iWlYzqKdm9QNPl2xfu4GuhKFwS
7AgYWrGnS2Ff6wt4AXU5Our6rUjrsufM9/PK1DUXkpsKJzVmFzCPZCusXqS474Kc
Lyikc8BkSNy1JIueiEiUI96XP2seP62P8vt2u4k7xkH+lGYWb1XMj7Pg89GBKWRM
tTL26CHJ95Woaw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 16:39:58 2026 by rpki-client