Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: omC35mYH/coxI6y8esY4zxz+5RtBwTu/0g/2TFRmcN8=
Subject key identifier: 40:11:1F:FD:68:18:4E:08:A8:F7:7E:C4:61:EC:B8:A8:D7:12:82:6C
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019F17C357A36B5F9A103DE9737E3236BF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 09:01:45 +0000
Manifest this update: Tue 30 Jun 2026 09:01:45 +0000
Manifest next update: Wed 01 Jul 2026 09:01:45 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: MmC1RDjQIye2mZ2wMk/LqNohNFjAV0TyP0GjLx4V+nA=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:57:a3:6b:5f:9a:10:3d:e9:73:7e:32:36:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 30 09:01:45 2026 GMT
Not After : Jul 1 09:01:45 2026 GMT
Subject: CN=40111ffd68184e08a8f77ec461ecb8a8d712826c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:d1:4a:38:3f:9c:96:3c:2e:25:d2:80:e9:
a5:c0:15:38:4e:cf:58:e6:82:e1:89:99:ee:47:34:
dc:68:17:cd:d4:63:16:47:b4:f5:87:6d:61:1d:96:
dc:22:6a:14:d3:a2:c8:29:78:8a:c6:f4:88:5a:09:
71:ba:0c:28:12:35:05:1f:db:bc:04:e1:ca:c3:18:
52:a5:31:33:b7:c9:b8:52:79:80:ac:3f:bb:b5:56:
54:19:fe:04:c8:17:86:cc:32:cf:dc:66:00:2f:f9:
ed:17:6a:4f:c1:1a:38:71:ba:d6:79:b6:74:c2:14:
d4:c2:95:2b:2e:5c:5e:14:14:10:17:ad:71:96:50:
08:a7:58:22:2e:d4:b8:cd:50:e5:f0:02:ac:f3:ab:
dd:a2:78:3c:65:f8:2e:c0:22:48:9b:ae:ef:cb:71:
d1:a1:59:3f:4a:76:0f:9a:d8:ef:2f:9d:c4:e3:06:
13:d6:37:a2:d6:5d:64:ab:d2:5e:49:7c:be:54:7a:
d1:22:23:9b:cf:a0:da:46:84:e1:11:22:92:a8:a5:
88:2d:55:8f:14:67:04:c9:a7:ad:4f:43:76:ba:ba:
45:d1:7c:60:bb:5e:94:fc:a3:a3:ba:f7:f8:5e:fb:
6f:64:49:bb:3f:4f:5b:0f:58:54:ba:5d:4a:a6:1e:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:1F:FD:68:18:4E:08:A8:F7:7E:C4:61:EC:B8:A8:D7:12:82:6C
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:f1:a0:36:57:6f:bc:4b:cb:32:38:67:53:a4:80:ff:9f:
56:ab:ac:14:53:83:77:8e:bb:23:0b:d2:fd:9f:57:ed:f7:7e:
2d:23:fd:d1:13:f3:ab:16:70:a2:1b:22:72:80:a3:0a:7e:53:
be:8a:0d:17:d9:73:3c:08:4d:33:cf:0b:8b:11:05:48:74:22:
7a:3e:04:68:0f:4d:0b:4d:3e:58:e4:c8:57:f5:db:b3:e8:e8:
6a:e3:d5:c9:cc:56:46:87:3c:d0:92:d0:54:c6:8f:19:2c:94:
14:c9:29:a3:bc:2a:fd:27:6f:69:bc:55:71:fa:80:e0:38:45:
92:b2:ff:fc:5e:67:63:3a:5f:97:fe:48:61:bb:28:1c:81:f1:
b3:fc:7b:97:c7:8e:3a:1a:fc:87:22:89:08:99:ea:23:1a:52:
23:78:d1:c7:13:29:26:ca:de:74:ad:0c:1d:ea:11:48:64:ea:
c7:15:0a:a9:05:eb:31:09:8a:24:3a:e1:c4:7e:d0:04:a6:d1:
59:67:48:ce:94:34:c7:8a:f4:ae:e0:66:67:b5:f7:e3:e2:60:
25:55:97:44:e2:ab:2b:e5:4f:b0:70:24:a7:51:6e:7f:62:04:
63:03:e6:bc:0e:0a:9c:38:94:89:b8:1c:f9:9d:0b:3a:3d:c4:
a5:d2:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:43 2026 by rpki-client