Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: 02voV+fxGRvAKJT/TbuR5N7sdl97nFzf6lIj5OCSDbk=
Subject key identifier: A8:A9:99:B6:E4:BC:3E:7E:BC:00:DA:FB:0A:3D:C2:74:26:42:9A:F4
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019D2EF470ABAEC5DF2F2671BDD72F8513D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 0978
Signing time: Fri 27 Mar 2026 11:01:04 +0000
Manifest this update: Fri 27 Mar 2026 11:01:04 +0000
Manifest next update: Sat 28 Mar 2026 11:01:04 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: /hguiiCB6HMpKi5VPj06skXZwIWSNHEUCrm9A4omjIQ=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
4: laGYyUqPK3fHCKoz7nqL0OXT2Eo.roa (hash: Lwh1rsMavQm34P2hRAMjpx40Roi5BFidjgw/3tt2hhE=)
5: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
6: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:f4:70:ab:ae:c5:df:2f:26:71:bd:d7:2f:85:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Mar 27 11:01:04 2026 GMT
Not After : Mar 28 11:01:04 2026 GMT
Subject: CN=a8a999b6e4bc3e7ebc00dafb0a3dc27426429af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:fd:aa:88:a9:5b:69:46:bf:10:00:2f:71:
0b:80:5c:11:67:1c:b9:60:28:08:f5:5e:74:f5:97:
78:ba:78:66:1c:73:47:f9:f4:b4:93:66:ca:d8:49:
64:e8:f5:db:8a:8c:2e:10:b1:4b:28:71:fb:8a:e0:
2f:f7:4d:ca:a1:b5:d6:ab:da:68:cd:d6:23:a3:95:
31:fc:31:1f:27:31:d1:c3:74:30:ad:71:e1:1f:e8:
a9:a0:3b:43:6a:8d:9c:9e:36:22:ab:77:d1:2c:e4:
04:4f:c1:be:92:ba:b0:1b:a8:2e:4f:4e:e9:26:80:
b6:eb:8c:97:4d:7c:ed:f8:2b:29:22:b1:62:4e:f0:
4e:ed:7c:12:92:49:cb:62:75:f1:a0:1d:98:1a:a4:
d0:9e:3c:41:fd:65:d3:a1:b3:f8:51:b6:6c:c9:fd:
70:44:56:76:bd:51:66:28:89:71:20:31:67:b8:04:
5f:16:51:2b:6a:10:da:67:ba:c7:d8:ec:be:a1:5a:
d5:67:c0:4a:f8:f7:2e:76:ec:8d:d8:93:c6:62:59:
19:bf:e6:b9:a4:e1:64:36:5a:3f:5c:65:84:7c:8c:
e3:3d:ed:10:9a:8b:21:24:1d:00:65:2d:42:4c:77:
0b:20:aa:58:72:18:9a:fb:f2:c6:4d:fb:10:7f:e7:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:99:B6:E4:BC:3E:7E:BC:00:DA:FB:0A:3D:C2:74:26:42:9A:F4
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:54:fa:a5:80:3d:41:2c:81:ae:e4:50:58:5b:05:54:5d:d0:
bb:cb:97:e3:d6:3c:84:52:01:28:ce:fe:3d:d8:a1:8d:c8:cd:
5c:0f:3b:ae:43:03:93:f0:e4:10:98:da:2d:a1:43:41:a5:d3:
67:63:0a:58:59:e3:79:56:91:58:d2:26:74:0d:d3:21:47:b3:
dc:32:dc:c3:56:e3:0d:e1:73:83:6a:65:d6:ba:d6:96:8a:1f:
f4:ea:10:de:8c:80:4c:7d:f8:98:36:20:70:2d:be:ff:b4:43:
04:61:bd:bf:33:df:8b:7a:a8:44:aa:c9:23:2b:c2:7c:f1:ba:
dc:9e:43:c8:b3:f7:20:88:cb:94:c6:77:89:57:0b:c9:8f:82:
ef:b5:b3:62:ab:8b:b6:5f:85:b5:ee:77:1f:3e:d3:35:ed:45:
a2:7c:9f:f7:7d:71:28:c6:d4:78:25:07:af:b1:f2:1f:95:86:
13:63:94:43:d5:62:92:74:63:7b:46:cd:c3:5a:c7:10:75:32:
4d:0c:80:8b:a0:c4:4e:59:68:c3:e4:7d:64:c7:21:58:d8:9a:
78:1b:ca:c6:ff:3a:f3:88:22:18:c2:c5:2c:fd:d8:03:a2:ab:
81:f8:b1:09:e0:3c:9c:c7:18:85:72:0d:9f:a3:bc:67:f0:d0:
dd:ce:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 19:35:57 2026 by rpki-client