Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: q9lB75CYamOIdRluNRkmyEGsCvNQec4HFWfj+5hU590=
Subject key identifier: 36:06:16:25:AC:A2:6B:0C:15:86:0A:EF:6B:21:FF:44:43:11:98:B7
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019F92B65A3745E4660ECB62D992C63CD16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 06:00:51 +0000
Manifest this update: Fri 24 Jul 2026 06:00:51 +0000
Manifest next update: Sat 25 Jul 2026 06:00:51 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: qE7cpDCPVQxziqKpfV+dvmGJSwg6yzI++2zDeFyiT2w=)
2: kfw5lT51mmJB9r-mzPnYBcO07ic.roa (hash: lu7TOjtxr8LPfyeKuliFVqXP9APAZsRzOs+MqTY5wZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5a:37:45:e4:66:0e:cb:62:d9:92:c6:3c:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jul 24 06:00:51 2026 GMT
Not After : Jul 25 06:00:51 2026 GMT
Subject: CN=36061625aca26b0c15860aef6b21ff44431198b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:8c:bc:3d:9b:ae:82:0e:3b:ff:5f:f9:8a:
a7:58:59:e7:f9:fc:9d:e8:05:85:1f:1b:3c:95:47:
53:0b:44:74:d6:d8:b0:e8:99:cf:37:f8:fb:b4:57:
54:85:f2:6a:da:60:fb:0c:f0:81:30:6b:27:6a:6b:
90:b4:ec:47:84:3e:3f:22:ad:51:f9:81:6a:ef:11:
a8:79:fa:d8:69:0e:cc:ed:8a:4b:69:ce:3a:72:f8:
93:8c:09:78:94:db:14:e9:f2:34:01:b4:38:a5:54:
49:81:da:c9:56:6f:44:1f:33:8e:3c:98:d4:94:36:
c9:63:9f:08:48:15:58:86:96:27:81:a9:a5:2d:33:
5c:a5:75:3f:53:8e:81:ea:89:a5:25:59:05:bd:32:
65:63:bb:14:af:be:f3:83:ca:d0:3c:71:6e:bf:9d:
6c:0c:cf:bb:28:20:f3:ea:e0:09:0a:b8:d6:7d:94:
4f:1b:2e:15:4f:c7:91:cc:35:57:07:73:1f:1d:b1:
d2:89:47:2b:a5:54:2a:06:41:e9:c2:64:e0:6c:08:
4d:72:12:71:ce:05:c0:7c:b6:1a:92:d9:36:81:5d:
86:67:cc:36:44:ec:90:aa:7e:ab:de:cf:ea:44:b2:
5d:67:2c:73:ea:71:91:e3:f1:5b:f3:22:7b:c9:1b:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:06:16:25:AC:A2:6B:0C:15:86:0A:EF:6B:21:FF:44:43:11:98:B7
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:27:a9:72:9d:d8:e9:75:03:10:03:d2:ae:48:84:05:d3:b9:
14:cc:9d:d2:c7:30:e1:9e:30:2a:0d:36:6b:93:d6:86:78:be:
f2:45:0b:f1:02:01:c0:c6:56:74:b2:45:1f:3c:f8:64:5d:d8:
8a:4e:a6:b2:2c:96:cc:c9:6a:25:fc:d3:ad:06:d9:10:eb:b5:
09:70:4e:56:a3:de:7b:cb:03:e7:7a:4d:df:5a:82:e5:c6:04:
80:ed:42:76:04:25:96:6c:72:5c:a1:63:31:77:aa:a2:96:42:
11:b3:f2:3c:a6:58:c7:b8:56:33:08:7d:09:28:9a:42:56:e7:
9c:c4:f6:55:75:83:4d:8b:b3:97:4c:39:e1:67:25:1a:54:24:
cc:00:9a:ae:64:be:59:38:f3:9f:bb:0e:34:8f:14:8a:16:80:
22:2f:0f:18:d5:f6:14:ed:e1:24:e3:f3:93:53:4c:d9:f1:32:
67:16:21:70:c3:52:b3:3c:27:8d:65:25:7c:1a:da:64:ee:0c:
83:89:4d:c9:c9:fe:2f:7a:7d:84:99:ec:f4:d5:1e:a6:d1:79:
f7:6d:fd:82:89:19:ce:63:88:37:58:b5:98:bb:c5:e0:b2:c2:
4b:cb:a1:97:81:f6:b6:ee:ca:b9:d1:c6:0a:e8:3b:47:45:e6:
05:39:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:24:59 2026 by rpki-client