Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: EpDovICW9UwSn1l3mOGR1mxteVEJJCXGyj30Q0/dkoU=
Subject key identifier: 98:02:5C:7B:24:AE:B0:70:C4:39:FA:2D:E7:95:AF:58:5D:43:91:39
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01A00170002554175253B9ED71A513F1EECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 18:01:52 +0000
Manifest this update: Fri 14 Aug 2026 18:01:52 +0000
Manifest next update: Sat 15 Aug 2026 18:01:52 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: Opr7OIxqqlpOxQ1e9sEOJiH/0FGh8vdEtLUOTlsx7Rc=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:00:25:54:17:52:53:b9:ed:71:a5:13:f1:ee:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Aug 14 18:01:52 2026 GMT
Not After : Aug 15 18:01:52 2026 GMT
Subject: CN=98025c7b24aeb070c439fa2de795af585d439139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:65:38:12:39:a7:6c:89:1e:26:e4:5e:7b:
61:08:87:6f:4c:96:b5:98:9d:3f:e9:d6:67:38:3b:
80:2b:36:6c:6d:9e:4c:24:c8:0f:52:fc:db:d0:e9:
2f:43:81:11:bd:d8:67:aa:af:74:aa:e0:bc:61:e3:
b5:64:d1:1d:07:2f:6e:3b:50:10:1e:ef:e2:3d:32:
c0:da:77:46:fd:1a:a2:c5:c3:1b:d1:d2:d8:74:aa:
bf:34:14:44:95:b9:cb:60:62:64:cd:a2:24:3f:aa:
7c:3c:b8:3b:05:3d:77:2a:e9:0e:4e:d7:cf:d1:63:
72:9a:06:d3:94:4f:c0:3a:14:04:55:10:a8:02:aa:
2f:eb:b1:a5:22:c0:d7:3d:e3:4b:8c:56:00:43:64:
dd:4f:e7:cb:22:63:a0:ee:c6:80:06:ec:fe:62:e4:
52:79:97:de:40:bc:bb:65:94:6a:80:11:cc:8c:7b:
8a:bd:d4:4f:25:ba:cc:6b:0f:9a:80:f3:56:f5:e9:
fb:33:c2:6d:39:12:2f:6f:35:8c:e8:fc:a8:c7:ad:
93:5d:b8:02:9d:c2:d8:df:49:33:b7:78:14:a3:13:
c6:50:ed:b9:6e:6f:e6:75:41:de:89:e5:9b:76:f8:
ad:35:ed:75:a8:00:68:c9:a7:4e:d9:cd:15:60:ec:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:5C:7B:24:AE:B0:70:C4:39:FA:2D:E7:95:AF:58:5D:43:91:39
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:02:5b:53:a8:54:95:05:5c:34:b3:d2:cf:ed:7e:d6:9c:
05:b5:f7:05:2a:3c:65:c9:1c:f1:51:a4:7f:e1:e0:62:c9:52:
7b:39:cc:22:95:f6:28:f8:1a:40:25:b8:89:9d:21:b8:f7:20:
64:3a:79:36:7e:57:0c:05:70:87:49:66:46:b2:df:da:af:c7:
e3:b1:94:96:ca:ee:f0:c3:2b:33:64:bb:20:5c:bc:09:2f:49:
82:0d:78:87:67:82:4a:00:1b:e9:d9:b8:0d:33:48:73:59:82:
4a:e8:cf:bb:c9:5e:2e:76:dd:1c:cc:8a:f0:6d:a4:a6:9b:5b:
d8:06:87:f3:0d:56:80:ce:70:2d:a7:21:70:7e:35:44:c6:25:
2d:9b:d3:7c:a9:17:ab:a4:f0:92:0e:fc:78:1b:eb:ea:47:a3:
97:03:22:80:11:69:f3:32:6a:5e:ed:8c:dc:e7:e4:30:29:c5:
a7:1a:40:88:71:7f:bc:e1:c7:94:f6:74:ad:ad:9f:96:89:82:
74:db:1e:65:a4:f9:1d:68:89:cc:b5:76:ff:7a:18:c8:f2:f5:
2e:76:46:dc:ad:2d:43:f0:f1:65:b6:30:17:76:54:f3:9a:7e:
8a:71:68:79:95:54:ed:e9:7f:e8:81:86:8d:67:96:0b:d6:6c:
aa:d3:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:35 2026 by rpki-client