Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: bnrrd4pDTCg2lFKl840mNe/SMEqRvOVJZylpBJhQhH4=
Subject key identifier: 3E:5E:A5:AC:6A:31:5B:7A:B4:FF:94:41:31:7D:41:13:E7:0A:C2:BE
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 01A0DB041E150A2B8375BD32C1DCACD21C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1A7B
Signing time: Sat 26 Sep 2026 00:01:15 +0000
Manifest this update: Sat 26 Sep 2026 00:01:15 +0000
Manifest next update: Sun 27 Sep 2026 00:01:15 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: LWdP1Knidw4V/t1712qDdruCvKojxGHftlgGyQGdjj8=)
2: kfw5lT51mmJB9r-mzPnYBcO07ic.roa (hash: lu7TOjtxr8LPfyeKuliFVqXP9APAZsRzOs+MqTY5wZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:1e:15:0a:2b:83:75:bd:32:c1:dc:ac:d2:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Sep 26 00:01:15 2026 GMT
Not After : Sep 27 00:01:15 2026 GMT
Subject: CN=3e5ea5ac6a315b7ab4ff9441317d4113e70ac2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:c3:17:18:3f:d9:88:1a:b8:5f:69:ae:8a:
fe:97:4b:2e:be:89:a8:ba:12:97:7b:66:5c:62:7d:
3e:10:b8:18:cc:64:6c:d2:00:59:26:47:ae:3b:0c:
84:8a:07:0f:bb:db:3c:9a:2f:71:ed:e8:31:dc:40:
6e:be:01:cb:6d:4b:9e:e7:c4:20:37:84:79:b5:3c:
08:e1:05:1d:27:9f:b0:e4:90:ab:0a:b2:7c:a7:de:
cb:31:e6:12:7e:25:96:eb:d1:36:86:a9:99:8b:25:
46:07:00:43:e4:ab:8c:f3:6e:f0:41:9f:29:3b:a3:
3b:77:e8:63:c5:bb:14:25:aa:ca:39:ed:16:4b:61:
48:f6:51:02:43:9f:25:3f:ee:59:e4:0f:20:ff:53:
ae:3c:ab:5d:27:69:e5:e7:45:6f:3e:d6:14:e5:ff:
06:66:c3:b2:58:a0:d0:96:6d:81:9a:ae:1d:10:51:
20:b1:ae:c1:dd:cc:02:87:b8:e0:8e:0e:d1:44:b3:
a6:ec:5f:bb:a2:64:08:83:be:97:23:f4:da:65:fc:
98:14:04:c9:29:dd:74:71:7d:37:26:dd:8a:be:2a:
53:c4:c1:2a:0e:e3:3c:d6:0f:a5:c9:8d:b4:dd:d0:
8a:46:8a:ed:a2:a5:6c:e4:f4:5c:4e:78:18:5b:3b:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:A5:AC:6A:31:5B:7A:B4:FF:94:41:31:7D:41:13:E7:0A:C2:BE
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:26:97:a3:0c:ae:69:df:99:94:bb:f2:57:ab:fa:d7:67:
6e:d7:7e:18:c5:6e:5c:49:3b:e1:e7:c6:bb:f1:0a:25:b4:b8:
b1:e1:3c:44:bb:f6:86:d5:5d:22:35:32:f1:af:55:16:ef:70:
cc:ea:f2:a0:f1:09:3e:27:f9:99:28:da:1e:ab:60:49:ba:4d:
54:b3:5a:6b:a0:8d:d0:7e:29:a4:0b:f8:45:1e:95:17:16:66:
fd:b0:0f:4e:4e:c8:59:03:53:2e:6c:a6:34:7b:c1:04:e4:9b:
32:51:d8:bc:7c:d1:0e:6d:2f:bb:65:c9:39:de:8c:a4:d1:da:
94:50:fd:cf:85:8c:93:3b:5b:a1:40:87:92:f8:73:a4:ab:c6:
38:56:e5:7b:a2:9d:be:0d:d2:28:17:d6:fc:6a:6e:52:f7:6e:
8e:ae:2e:bb:02:63:5e:b5:49:44:8b:96:a4:0f:88:ce:2d:0e:
56:f6:2a:32:4c:d8:12:63:28:54:a6:33:5d:06:98:42:6d:01:
28:59:78:91:4d:6b:84:81:6e:10:b8:01:98:0d:fd:30:d7:d9:
9c:2b:55:d8:4e:34:a8:21:e8:49:64:77:79:d0:a1:7f:62:f6:
5a:9d:48:64:a6:5a:40:ca:40:85:03:cd:e5:96:2b:88:56:7b:
33:ff:00:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbBB4VCiuDdb0ywdys0hwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjYwOTI2MDAwMTE1WhcNMjYwOTI3MDAwMTE1WjAzMTEwLwYDVQQD
EygzZTVlYTVhYzZhMzE1YjdhYjRmZjk0NDEzMTdkNDExM2U3MGFjMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfTDFxg/2YgauF9pror+l0suvomo
uhKXe2ZcYn0+ELgYzGRs0gBZJkeuOwyEigcPu9s8mi9x7egx3EBuvgHLbUue58Qg
N4R5tTwI4QUdJ5+w5JCrCrJ8p97LMeYSfiWW69E2hqmZiyVGBwBD5KuM827wQZ8p
O6M7d+hjxbsUJarKOe0WS2FI9lECQ58lP+5Z5A8g/1OuPKtdJ2nl50VvPtYU5f8G
ZsOyWKDQlm2Bmq4dEFEgsa7B3cwCh7jgjg7RRLOm7F+7omQIg76XI/TaZfyYFATJ
Kd10cX03Jt2KvipTxMEqDuM81g+lyY203dCKRortoqVs5PRcTngYWzuCVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5epaxqMVt6tP+UQTF9QRPnCsK+MB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGAml6MM
rmnfmZS78ler+tdnbtd+GMVuXEk74efGu/EKJbS4seE8RLv2htVdIjUy8a9VFu9w
zOryoPEJPif5mSjaHqtgSbpNVLNaa6CN0H4ppAv4RR6VFxZm/bAPTk7IWQNTLmym
NHvBBOSbMlHYvHzRDm0vu2XJOd6MpNHalFD9z4WMkztboUCHkvhzpKvGOFble6Kd
vg3SKBfW/GpuUvdujq4uuwJjXrVJRIuWpA+Izi0OVvYqMkzYEmMoVKYzXQaYQm0B
KFl4kU1rhIFuELgBmA39MNfZnCtV2E40qCHoSWR3edChf2L2Wp1IZKZaQMpAhQPN
5ZYriFZ7M/8AoA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:15 2026 by rpki-client