Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: /W0Kf2qK17fzm8kOiWKnnZtkwmvxMptAdfTk9/fsj28=
Subject key identifier: CC:19:7C:C1:8D:8D:27:95:64:08:0B:38:18:5E:15:E4:CA:73:01:CB
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 019D29293C7D112FABCDF37D7E24DC282981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 1722
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: LnOif7LE6nT7nm54T0/eXk5S9fn1SuqHD0PLS5kGmDI=)
2: lyRZ6aaG_PNUTYMpZjK6Ka6tewI.roa (hash: y1+djgClVik/37jj410N7sJ7abi7QHTOhTCOqoWur98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3c:7d:11:2f:ab:cd:f3:7d:7e:24:dc:28:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=cc197cc18d8d279564080b38185e15e4ca7301cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:87:b0:e9:8b:20:84:8b:db:89:88:fd:1e:
5a:09:3c:e8:8b:73:ea:33:90:7d:fb:c9:7d:78:1f:
78:e6:ec:a0:2b:dc:67:47:61:09:00:3a:2f:1a:cf:
6a:48:65:44:10:6d:56:e0:b9:d1:33:e6:38:7f:80:
b5:e1:b3:0a:58:9b:8b:ee:f2:38:2b:c0:5b:d5:f2:
65:ca:3e:02:db:e2:bb:61:a3:d1:b9:8f:ef:cf:02:
c9:b0:b1:38:4d:c4:1b:e2:0b:1c:3a:0e:a3:3a:99:
01:62:7f:bb:07:78:25:cd:08:41:75:c1:49:b1:f8:
37:f9:19:5a:53:f9:c7:fc:38:d1:e3:63:24:97:c5:
77:d3:60:26:f4:2b:c5:10:64:7e:d1:fb:0c:2a:8b:
d0:c0:8a:9a:20:54:01:af:ef:92:af:0c:48:98:69:
b4:ff:5d:26:b8:3b:2f:81:87:9c:4e:b5:4d:dc:59:
56:bc:1c:39:52:5e:b0:85:02:fb:79:a6:ff:ee:41:
3e:72:04:df:2e:bc:87:2e:1f:cb:bb:81:af:3d:29:
df:47:76:64:18:e3:d4:80:9a:f3:d2:7c:15:6f:b9:
aa:42:33:a4:89:eb:da:a8:74:23:d1:da:3c:d5:13:
03:c3:ea:42:fc:02:cb:7c:9c:0d:19:c7:cf:51:28:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:7C:C1:8D:8D:27:95:64:08:0B:38:18:5E:15:E4:CA:73:01:CB
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ee:a7:9c:5c:16:f5:0e:0b:22:d7:b9:b4:76:da:4a:84:13:
87:59:35:6a:0f:4d:74:59:69:86:78:ae:76:79:66:22:0a:3b:
2d:55:70:e6:af:94:65:58:4c:a3:9f:1b:8e:43:15:51:56:04:
7f:e7:e6:1e:48:0d:03:ed:e4:91:a1:3d:80:2f:89:51:9f:26:
14:d2:45:be:d3:d5:9b:3c:01:09:25:0b:d3:5d:60:89:a2:f1:
83:03:ae:8a:14:d1:92:68:db:79:f8:db:b0:30:ff:bf:6f:4a:
3e:f9:cc:ec:d7:2d:6c:6e:41:29:08:95:28:10:1e:c1:91:db:
84:9b:f5:5d:b5:a1:5d:a1:3a:2f:07:c7:6a:12:0e:5c:8b:63:
d5:6b:67:fe:bb:07:18:16:ab:d6:0f:73:55:4e:bf:a2:4a:ba:
2c:40:2c:e5:a3:5c:57:3f:b6:d4:6f:dc:22:d3:6b:e3:b2:25:
a0:62:78:27:5f:9a:a1:7c:4a:f0:6a:99:3e:e9:71:27:59:46:
c8:9a:8e:81:53:83:be:5d:16:ae:a7:7c:6c:ff:36:8b:8a:b8:
d5:06:e6:13:f3:29:84:7f:e8:3c:aa:7a:81:b7:6b:88:54:a9:
78:87:c8:aa:22:ca:1e:48:2d:d8:93:05:fb:b4:ca:ee:87:18:
72:90:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:06 2026 by rpki-client