Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: 2MWDTS25kDj+83/7uWLEWQ+PtHWdEZuI25beVgueWe8=
Subject key identifier: E6:6E:9D:DD:91:2C:19:77:92:B3:EB:DE:D9:8C:EE:36:F3:2D:60:24
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 01A0D502263884ACF326FBBE0A55D7289027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 0215
Signing time: Thu 24 Sep 2026 20:01:22 +0000
Manifest this update: Thu 24 Sep 2026 20:01:22 +0000
Manifest next update: Fri 25 Sep 2026 20:01:22 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: pUL1mahnusFmq+N1hUPzuOmRbdYjNB5f4PMse8rXsAY=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:26:38:84:ac:f3:26:fb:be:0a:55:d7:28:90:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Sep 24 20:01:22 2026 GMT
Not After : Sep 25 20:01:22 2026 GMT
Subject: CN=e66e9ddd912c197792b3ebded98cee36f32d6024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:cf:c3:64:da:f4:10:c9:81:e8:c3:77:2c:
21:55:95:85:bd:3e:b9:40:6f:6f:a3:1d:a2:f3:86:
66:cc:4b:85:16:84:ba:dd:1a:39:15:91:a5:7e:09:
bc:41:07:4c:32:0e:a4:31:c4:37:d9:3d:98:14:bd:
82:bc:54:8c:bf:9d:20:9c:43:68:f6:e6:97:6f:24:
f6:d8:af:ee:f7:31:b1:2c:9e:c8:ab:f6:c3:a2:21:
c2:e1:10:52:3f:a4:58:94:a9:41:cd:2c:74:23:78:
c4:fe:8e:1c:22:b9:dc:0f:85:25:f1:af:7e:3e:55:
fc:66:37:32:a4:db:d2:38:ea:c4:91:0c:0b:cb:f8:
ad:11:bb:ce:b6:55:63:d3:58:70:34:d6:ca:22:52:
7e:59:11:f7:f2:d5:80:e0:dd:62:91:40:95:16:18:
96:c2:77:73:0f:b0:0e:70:18:74:c4:44:3e:2b:3e:
b2:3b:36:90:5b:2d:d2:d7:99:34:dd:20:6a:c0:73:
3c:47:20:b2:70:c1:d9:74:2c:88:4b:fe:f6:24:8e:
47:10:98:4c:6b:d2:a1:3e:44:0f:fc:bf:11:e6:7c:
1d:99:06:6e:52:51:af:22:e0:82:5f:e1:13:9b:12:
46:c3:b0:01:aa:93:52:c7:9e:e0:21:43:00:18:a1:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6E:9D:DD:91:2C:19:77:92:B3:EB:DE:D9:8C:EE:36:F3:2D:60:24
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:95:05:da:05:a8:0c:30:52:c8:28:eb:b4:d0:99:27:fe:8a:
45:6d:00:19:37:11:48:0a:4a:cb:41:84:61:5c:b9:cb:6e:0e:
ff:20:4f:84:6d:44:36:b1:ca:27:a1:36:b5:b8:1d:c5:2c:de:
7a:43:98:41:df:84:f3:07:cc:62:93:c2:45:59:02:e0:b4:e9:
72:fc:2e:03:57:98:86:75:a4:13:41:b0:e6:88:3f:20:86:ca:
60:1d:02:4c:fc:c5:f9:12:a6:e2:87:dc:a5:bd:4c:76:db:a9:
05:ad:5c:53:0d:cf:a4:09:1f:6f:10:cf:34:73:e0:52:64:14:
c9:75:81:d6:f3:e9:34:bf:3c:b1:3b:9c:f8:66:d5:5c:7c:0f:
d7:6c:fc:07:f0:97:df:9b:87:98:54:b0:fa:77:0c:26:60:0f:
e6:c4:ad:11:0d:cc:d4:95:2a:c3:04:16:5b:82:30:e1:c3:90:
b6:f4:a3:ca:61:01:ed:88:2f:89:60:64:90:cc:e7:2a:51:7b:
13:1b:ac:43:44:fc:7f:53:49:c2:2d:77:c2:60:6c:fc:ed:b4:
2d:64:22:7b:d1:93:a4:23:d8:6b:d2:9a:f3:33:df:0a:7a:24:
f2:57:c4:c5:b0:c1:df:94:8d:b5:97:10:10:94:5f:f6:da:47:
ac:1b:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:24 2026 by rpki-client