Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
File: QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json)
Hash identifier: y6bKEYIH0H2hzfcX+hAG5nY4MovTkJhxCKQ+UqvJQBs=
Subject key identifier: 37:F8:B0:6C:BE:E9:C3:11:09:27:5C:9F:22:74:C1:76:41:A6:3B:61
Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
Certificate issuer: /CN=40ee9765864bd11d4a349426e372e11a94348de2
Certificate serial: 019D2703C82CBFACBCBF5C622375C51375D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
Manifest number: 0995
Signing time: Wed 25 Mar 2026 22:00:52 +0000
Manifest this update: Wed 25 Mar 2026 22:00:52 +0000
Manifest next update: Thu 26 Mar 2026 22:00:52 +0000
Files and hashes: 1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: ioI7GEhOMgBbCp71Yu++dvllIxQlCNtKaoFzrPhr1Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c8:2c:bf:ac:bc:bf:5c:62:23:75:c5:13:75:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2
Validity
Not Before: Mar 25 22:00:52 2026 GMT
Not After : Mar 26 22:00:52 2026 GMT
Subject: CN=37f8b06cbee9c31109275c9f2274c17641a63b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:90:62:d5:b2:31:42:e7:ee:4f:29:11:ea:
ca:58:6f:cb:17:dc:76:3a:64:f3:cd:fc:63:30:47:
51:61:ed:b9:ef:35:b9:d1:70:a1:ae:83:a2:fc:0d:
a1:5f:f9:4f:aa:2e:d5:ae:ae:6d:03:7e:c6:26:c4:
56:d9:61:c7:29:27:0d:a8:67:89:f3:4b:d7:f3:dd:
c8:cd:7e:9e:82:db:e0:e3:a3:98:9b:fa:ba:2f:69:
a1:32:8f:9d:73:75:c7:74:11:43:0b:0f:1c:0e:e8:
33:18:46:de:8c:1a:f3:bc:82:cb:a6:4f:9d:1f:7e:
ab:16:47:ff:e5:4f:d9:7b:92:04:17:1a:41:e5:5d:
32:3b:96:15:55:d4:7d:5d:a2:21:23:1a:74:35:4c:
15:f5:ca:c6:1c:a2:2c:9c:3b:ca:a6:ba:c0:96:56:
61:d9:14:9d:55:dd:96:7c:d1:42:c4:fa:84:a3:d4:
73:2d:bf:60:f4:86:66:be:4f:73:ec:54:a5:da:7b:
71:9d:71:db:37:73:ac:9b:25:bd:cb:03:06:04:e2:
fe:17:c5:aa:77:e6:9a:94:91:fc:71:d8:a3:22:86:
9c:96:2f:13:6a:f0:a9:bf:c3:d8:9c:1e:95:d7:a4:
77:50:2b:c5:2f:d5:9e:a9:a1:1d:c1:95:dd:62:0f:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:B0:6C:BE:E9:C3:11:09:27:5C:9F:22:74:C1:76:41:A6:3B:61
X509v3 Authority Key Identifier:
keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:15:39:6f:e9:f8:62:3b:7a:fd:33:f4:22:6e:cd:06:49:34:
92:b2:8a:23:7d:89:34:e8:ae:64:f1:1e:d5:4e:07:80:ea:e4:
72:c4:86:94:80:3e:8a:63:c1:b5:25:74:23:32:16:1a:6f:e7:
1f:0c:27:ff:0f:52:8f:19:c4:a9:62:07:61:4b:c2:62:93:a4:
4e:19:cf:c8:65:f9:22:a0:57:55:2b:76:c8:03:3b:76:9d:1a:
7d:a9:91:1b:d5:ea:e0:2a:d2:76:34:d3:cb:ee:bb:12:ce:cb:
8c:14:61:c5:44:0e:49:27:5e:a0:3d:a6:af:39:d8:b6:4e:32:
d0:5f:d8:6f:c5:cf:76:d1:1a:89:6f:5a:6c:4c:82:e0:2b:37:
86:93:1d:fe:e9:96:da:fa:21:59:59:49:1a:1d:79:7f:d2:6a:
03:2f:6d:8e:d6:f7:48:10:6e:58:ee:a8:8e:c1:27:d2:1b:86:
02:0f:d3:1d:b0:67:34:8c:fa:f0:6b:91:7c:e7:cd:54:ed:16:
a9:0f:c6:40:0d:36:16:aa:ad:36:02:f4:23:93:ea:c7:b2:d1:
3a:d4:1c:56:3c:8d:08:8a:28:29:b3:3d:d8:ab:2d:4f:9f:35:
2d:75:df:a0:66:69:40:0e:59:cd:a1:a3:60:54:0b:f9:a6:4a:
d6:47:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:42 2026 by rpki-client