Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: 6n8trA7DtBmPPpaAYHMigpdXtQk2FQdhAX3Yjll/LSg=
Subject key identifier: 16:4C:2A:29:33:52:2D:50:C9:B7:9F:53:E2:2C:4B:34:D3:26:6B:39
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019D38D3C02FDBCDE4BFD63947EF15A5FB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: l31iY3NFLmzfJsazSDNDnx3xPMc8swkXhV1IH7F8brQ=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c0:2f:db:cd:e4:bf:d6:39:47:ef:15:a5:fb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=164c2a2933522d50c9b79f53e22c4b34d3266b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:22:f6:c0:48:ca:13:57:21:36:b3:17:c6:
e5:11:0b:59:7b:1a:d5:d9:83:c1:b3:2e:1a:0a:f6:
53:2f:91:56:27:7c:ee:27:c0:cf:d1:07:f0:25:d8:
2a:1c:4d:ac:ab:7b:ce:92:ae:4e:57:d3:32:35:6b:
ac:4a:fd:46:de:b2:2f:95:98:21:e4:b4:5b:1c:7b:
db:14:95:6f:32:82:8f:02:77:df:54:c0:fe:6c:fe:
5f:cc:6e:cf:cf:bb:f2:ab:3f:65:5b:e5:5a:25:a3:
7b:9e:b2:b9:29:0e:8c:de:5f:9d:58:66:db:4c:02:
b3:ff:a0:11:15:d4:c0:88:37:fb:93:cf:77:3f:ae:
71:89:85:ec:89:94:f4:12:63:aa:a0:80:03:c3:87:
67:1f:46:d9:c4:6d:83:18:21:3e:01:97:d1:be:b4:
ce:a7:ee:e5:ed:45:db:e9:e6:09:6b:e9:9b:66:6f:
79:9b:5e:b6:5d:b9:d3:7b:86:c4:b6:91:e4:af:2f:
a3:d5:06:91:30:60:73:f4:0d:05:2c:aa:55:2c:21:
53:10:2c:ce:46:84:e3:85:fc:3b:27:61:16:01:63:
76:d7:4d:e4:42:9a:78:9e:10:5c:36:56:da:97:dd:
0f:b4:81:7d:38:20:43:51:c8:16:44:50:22:59:f1:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4C:2A:29:33:52:2D:50:C9:B7:9F:53:E2:2C:4B:34:D3:26:6B:39
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3a:25:08:20:90:dd:78:fb:87:2c:36:b8:4a:a0:10:60:22:
0f:a4:c3:3a:28:be:6b:0a:5a:68:67:67:cd:11:8b:88:06:c1:
04:4c:6c:35:27:78:31:47:40:2d:f1:53:eb:b2:11:3f:f2:2e:
69:66:a5:26:33:67:c6:d2:4c:1b:6b:d2:cd:cd:81:f9:db:23:
94:76:bf:76:9c:a9:c1:0c:73:d2:da:4c:0f:cf:93:88:3e:ae:
d1:f8:7e:e1:c7:4b:98:8c:32:37:26:0c:5b:88:f9:f5:5b:e2:
3d:ca:d8:ab:75:5c:b0:45:ea:0f:51:17:5e:c1:0f:01:4e:50:
aa:d7:f9:f6:97:02:11:c5:53:a9:29:1c:6d:fd:b6:0a:0d:64:
ba:9f:8c:26:85:08:49:d8:61:18:02:d1:75:73:6e:75:6b:2d:
6b:a8:4b:13:ee:a9:e1:fa:8d:94:68:8b:a3:d3:75:8e:97:8f:
9e:1e:79:76:cf:d0:e7:e9:03:24:ad:ad:3d:a0:5b:b3:0a:8b:
e5:41:02:e4:b3:08:eb:05:2f:6e:c0:9f:bb:78:7a:00:0d:6b:
8d:6f:ca:aa:35:cc:13:be:1f:0b:85:bb:7e:72:46:22:47:e7:
61:96:72:fb:06:13:95:6c:f0:47:5f:68:c8:03:f6:2e:32:0c:
31:f5:1d:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408Av283kv9Y5R+8VpfsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll
Y2IyZDYwHhcNMjYwMzI5MDkwMTM0WhcNMjYwMzMwMDkwMTM0WjAzMTEwLwYDVQQD
EygxNjRjMmEyOTMzNTIyZDUwYzliNzlmNTNlMjJjNGIzNGQzMjY2YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqasi9sBIyhNXITazF8blEQtZexrV
2YPBsy4aCvZTL5FWJ3zuJ8DP0QfwJdgqHE2sq3vOkq5OV9MyNWusSv1G3rIvlZgh
5LRbHHvbFJVvMoKPAnffVMD+bP5fzG7Pz7vyqz9lW+VaJaN7nrK5KQ6M3l+dWGbb
TAKz/6ARFdTAiDf7k893P65xiYXsiZT0EmOqoIADw4dnH0bZxG2DGCE+AZfRvrTO
p+7l7UXb6eYJa+mbZm95m162XbnTe4bEtpHkry+j1QaRMGBz9A0FLKpVLCFTECzO
RoTjhfw7J2EWAWN2103kQpp4nhBcNlbal90PtIF9OCBDUcgWRFAiWfHHswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZMKikzUi1QybefU+IsSzTTJms5MB8GA1UdIwQY
MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt
ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll
LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTolCCCQ
3Xj7hyw2uEqgEGAiD6TDOii+awpaaGdnzRGLiAbBBExsNSd4MUdALfFT67IRP/Iu
aWalJjNnxtJMG2vSzc2B+dsjlHa/dpypwQxz0tpMD8+TiD6u0fh+4cdLmIwyNyYM
W4j59VviPcrYq3VcsEXqD1EXXsEPAU5Qqtf59pcCEcVTqSkcbf22Cg1kup+MJoUI
SdhhGALRdXNudWsta6hLE+6p4fqNlGiLo9N1jpePnh55ds/Q5+kDJK2tPaBbswqL
5UEC5LMI6wUvbsCfu3h6AA1rjW/KqjXME74fC4W7fnJGIkfnYZZy+wYTlWzwR19o
yAP2LjIMMfUdQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:12 2026 by rpki-client