Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: hPa3BobNUhXHIWiob4oYSBjuQQng5tcMBBhlzEFyWiI=
Subject key identifier: 67:4F:F9:C7:6E:3D:5F:B9:EB:7C:67:E4:CD:FB:B2:A4:F8:B2:D7:83
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019D2996E5BBDB04CEC95E0513F3E9B1DEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:00:48 +0000
Manifest this update: Thu 26 Mar 2026 10:00:48 +0000
Manifest next update: Fri 27 Mar 2026 10:00:48 +0000
Files and hashes: 1: 1-bdGIvW_X_kzS8h3Q-adTU2sQis.asa (hash: JettIuA1gX0+QMVMH7iW5kF7SdcoVUg+AKyyLPE0BkU=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: fDTfYWScA3Yb1agDdcLpJUS9LtJStD5dN41+t2/S5Dk=)
3: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e5:bb:db:04:ce:c9:5e:05:13:f3:e9:b1:de:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Mar 26 10:00:48 2026 GMT
Not After : Mar 27 10:00:48 2026 GMT
Subject: CN=674ff9c76e3d5fb9eb7c67e4cdfbb2a4f8b2d783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:e8:40:33:0c:29:fe:ff:17:51:93:41:e3:
c3:0d:57:3d:cc:e5:e4:18:d1:a9:f5:76:d6:37:6f:
8c:55:48:5a:b4:4a:e2:7e:52:27:92:14:85:dc:19:
ca:43:fc:a1:a1:ff:38:34:9f:0b:08:88:f0:e3:2f:
3d:8f:36:cc:c9:3f:0d:0a:c6:24:53:64:e8:82:74:
d5:d4:77:fe:ea:52:d5:e1:fb:e5:02:44:ff:f5:5e:
21:5d:1a:38:17:bf:5c:8a:b6:00:f2:c7:44:41:ed:
ef:ba:2d:00:03:8d:53:c7:54:28:01:01:88:d6:56:
89:4f:42:a0:78:83:c0:61:67:d0:13:58:c1:d0:f6:
c9:48:0b:f8:89:b1:a2:f3:41:48:54:6a:bf:0b:9e:
23:bb:8e:62:22:7c:06:1b:df:75:38:1b:69:22:27:
e7:28:aa:d3:54:4c:3e:57:e3:62:c6:79:9e:75:03:
0a:25:75:31:1d:91:45:8c:ae:a0:4b:7b:c4:c1:a7:
2a:72:37:c1:09:71:7a:82:85:56:43:34:bb:fa:09:
d2:a8:f7:2c:a0:48:30:8b:dd:7d:df:23:17:61:dd:
0e:18:b1:b8:fa:43:20:3e:9b:81:ea:93:38:3c:e7:
80:82:fd:fe:87:6c:d2:cd:ab:c7:38:10:e9:76:26:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4F:F9:C7:6E:3D:5F:B9:EB:7C:67:E4:CD:FB:B2:A4:F8:B2:D7:83
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:7a:f3:1a:8b:31:ba:f9:9e:f1:c5:93:5b:ab:e4:e3:0f:
45:f4:2e:dd:16:6f:60:52:a4:10:01:51:af:e9:43:6f:68:7e:
f3:d6:df:9e:90:11:29:fa:96:b3:f8:8a:bc:9d:6c:9e:16:c3:
8e:f0:3f:56:86:4e:6c:13:36:28:ca:1b:ed:b0:6e:59:57:fc:
e2:0b:1e:ca:b1:d4:72:a1:3b:ff:cd:13:78:56:df:ce:08:bc:
8d:de:df:c9:46:d9:94:95:f9:93:78:ef:34:63:e8:76:c4:98:
3e:0a:1a:9b:d5:04:2c:13:bd:3f:0d:ae:92:2d:0f:b1:2c:13:
41:d5:77:76:06:02:03:43:ba:a4:5b:11:5e:f1:7b:58:18:5e:
50:8e:5e:f6:7e:46:6c:c9:52:9f:9a:80:d5:4c:a8:f7:fa:34:
00:98:21:ba:b6:04:74:ea:f5:e7:21:24:27:57:94:14:18:b8:
6c:4b:47:15:5e:8e:4b:0a:02:70:09:1f:1e:48:0a:d5:cd:88:
a0:12:95:f3:bf:96:19:a8:c1:24:a9:1b:d3:71:61:1d:51:ba:
7d:f9:5f:3a:c7:b3:d6:a9:94:55:c0:3c:8c:8a:5a:8d:a5:16:
4b:f4:31:7d:41:aa:b6:62:56:c4:f3:ff:f2:91:72:9a:00:9c:
74:ea:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:03 2026 by rpki-client