Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
File: QO7W1Efa1FnC39mMFNADLQ1RpyU.mft (raw, json)
Hash identifier: 0eEJ2IZzELXYuUtbmLZjyke23J51BBEL4O4kspWdQ7c=
Subject key identifier: 85:2D:D9:08:E1:18:A4:CF:E4:5A:30:1D:4E:EA:B4:70:7A:6B:49:03
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019D24DE64CEF8B1A434548A50F8C860A844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
Manifest number: 2C
Signing time: Wed 25 Mar 2026 12:00:47 +0000
Manifest this update: Wed 25 Mar 2026 12:00:47 +0000
Manifest next update: Thu 26 Mar 2026 12:00:47 +0000
Files and hashes: 1: QO7W1Efa1FnC39mMFNADLQ1RpyU.crl (hash: lkcHm42t4ESjgtYzsPk2HxgwO1ZaO9+BK+6zT6M10/8=)
2: hahQKAiuPDo7KuYorhEHRlOECJo.asa (hash: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:64:ce:f8:b1:a4:34:54:8a:50:f8:c8:60:a8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Mar 25 12:00:47 2026 GMT
Not After : Mar 26 12:00:47 2026 GMT
Subject: CN=852dd908e118a4cfe45a301d4eeab4707a6b4903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:e4:ba:2b:54:2e:76:9b:cd:8a:f2:c9:28:
f3:a7:60:1c:e1:6e:10:c2:43:7d:a8:94:d2:ea:47:
b1:39:2a:3e:56:15:fe:77:68:14:fb:a1:de:9c:1c:
1b:09:b3:7a:cf:5f:94:de:d9:cd:d8:ed:7f:de:7c:
95:82:00:3f:1f:66:95:92:c2:1f:54:75:a8:54:d6:
f7:91:43:2e:53:d1:9d:62:6a:0d:cc:06:f9:1f:b3:
f6:f1:d0:f1:40:ea:9a:7d:4f:8c:d0:96:00:89:80:
f8:b0:c3:75:6f:2f:53:0e:20:1f:a2:6d:4d:e8:c5:
c7:83:f4:78:bb:22:c2:75:a2:62:cf:87:11:24:6a:
aa:94:74:f6:1d:31:bd:83:91:c5:d5:41:10:47:e7:
8a:11:91:ea:2e:e6:aa:e0:1c:1a:b0:e8:e6:47:06:
c3:64:70:8a:bc:ae:19:09:ad:f7:33:2a:b2:ee:d4:
c6:65:3f:1b:7a:af:0e:ee:13:59:3f:8f:91:7b:0c:
59:25:a7:96:88:19:e6:63:0f:11:95:32:7d:f4:17:
8f:6b:9b:58:fc:23:c4:f9:7b:9d:00:5d:80:b8:1b:
53:44:d9:b9:5e:73:cd:07:e9:df:d4:8c:2d:f1:8b:
de:42:f8:69:d1:28:6d:0a:98:92:d6:9f:fc:fd:1a:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:D9:08:E1:18:A4:CF:E4:5A:30:1D:4E:EA:B4:70:7A:6B:49:03
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9c:dd:bc:2d:9e:13:3e:3e:7c:d1:24:d7:77:5f:7e:e2:57:
6a:cc:1b:e3:5a:81:0e:4c:a9:85:e1:22:fe:b0:f4:c0:bc:14:
6f:24:67:6e:de:db:79:96:e6:ed:43:ee:d7:43:4d:3e:f7:46:
bc:38:1a:3a:6a:68:ae:ac:c3:28:c5:3a:22:3e:6d:73:6f:48:
81:c2:37:9f:c3:84:92:3b:2e:1b:81:bc:b7:67:12:b4:4e:0a:
4a:43:2d:c4:fa:a1:49:27:dd:46:e5:73:ef:2c:2a:ad:ff:6f:
5f:6b:8a:aa:94:4a:3e:83:bb:a0:0c:80:4f:1b:b5:99:e6:e2:
9c:f4:34:6a:05:4a:16:63:ac:2b:33:e4:b5:42:a2:ff:e0:25:
f4:84:68:64:d6:08:25:fe:1c:89:59:31:a9:be:44:e5:7f:a8:
c9:f2:b2:b4:be:0e:ef:c0:dd:aa:40:46:1c:e0:ed:90:dc:a7:
f3:bf:d2:d4:0d:ce:ed:a2:75:83:bd:05:c9:ba:46:99:23:5b:
e4:a8:d3:3f:60:07:d0:54:d5:ca:40:a1:31:f4:1c:a5:03:53:
e4:61:33:d5:af:da:b6:7c:2d:fe:17:b7:6b:5e:ef:d9:cf:4c:
cb:d8:5b:0b:dc:48:76:ab:41:5f:5e:d4:23:54:dd:3c:b8:6a:
95:8c:6b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:34 2026 by rpki-client