Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
File: CQKHJW4l-jQNOvungOrGDVVq3sA.mft (raw, json)
Hash identifier: OTnoqSJ30+MpHUOmo3Mk5EyPCmqlqdFK2F1kPI/A8CI=
Subject key identifier: 04:A1:B8:23:91:58:02:5A:6F:14:E0:80:E5:CA:5D:0E:D6:93:3F:72
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 01A000CA495E45DC4B08D18004807727B7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
Manifest number: 0D1D
Signing time: Fri 14 Aug 2026 15:00:51 +0000
Manifest this update: Fri 14 Aug 2026 15:00:51 +0000
Manifest next update: Sat 15 Aug 2026 15:00:51 +0000
Files and hashes: 1: 4TWnkEehYGPz8S3MxMCECSR21Hk.roa (hash: n3+/E4ft5KJ8lIw6jVs8x5Mt/ftJJPREMORWJ+SrYKM=)
2: CQKHJW4l-jQNOvungOrGDVVq3sA.crl (hash: TZIzHyH9MNPrsVJRDAsRJfQTYH7oZe+0ehfdGgeqDR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:49:5e:45:dc:4b:08:d1:80:04:80:77:27:b7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Aug 14 15:00:51 2026 GMT
Not After : Aug 15 15:00:51 2026 GMT
Subject: CN=04a1b8239158025a6f14e080e5ca5d0ed6933f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:6b:13:05:59:11:10:4e:4c:db:b6:48:2f:
5f:0b:58:42:46:5a:3b:e5:d4:0d:fb:0b:b5:e0:36:
c9:1a:f1:f6:a7:df:76:e4:ce:6b:4f:14:f6:d3:1f:
72:76:71:91:01:a7:3c:be:55:d8:6f:2f:40:dd:bd:
86:18:3f:c4:2b:2b:e8:f8:8e:ce:68:27:9a:80:a4:
f5:40:7e:68:23:6b:42:5c:f4:19:b2:9a:66:8d:a5:
b1:2f:f2:f7:db:36:e7:76:5b:bd:01:9a:26:fc:c6:
60:9e:af:e1:27:1d:ed:5c:21:ec:00:47:b3:00:54:
fa:b5:e0:f7:f0:48:ee:db:27:9d:cc:40:f4:aa:4f:
15:07:f8:0e:e5:07:1a:e6:c5:ca:37:38:d6:f7:7e:
72:4f:54:fc:22:5f:11:cd:36:9f:e1:9e:66:c0:69:
24:d8:cf:09:c0:8b:ad:8b:fd:c9:55:d1:1f:85:6c:
b0:30:ed:3e:19:26:c2:1e:2b:f7:f8:3f:c2:30:73:
a2:09:b6:ad:53:f1:2b:66:68:83:ab:d9:f3:f6:d9:
19:fb:c7:e6:94:87:1d:06:99:72:0c:c4:39:45:b2:
fb:20:38:08:4d:5d:d2:ff:50:dc:49:7d:b1:7d:81:
aa:a6:e8:88:47:c0:21:ff:90:1e:e1:1f:d0:1d:38:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A1:B8:23:91:58:02:5A:6F:14:E0:80:E5:CA:5D:0E:D6:93:3F:72
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:57:6a:c6:f0:d0:53:9b:df:f6:40:24:94:40:c6:f1:3d:43:
fa:38:b5:cb:0a:6a:f6:d7:16:57:73:2f:7b:13:c6:1e:0c:eb:
f2:9a:6f:e0:2e:cc:52:53:8d:93:44:b0:60:d1:1f:50:a9:da:
13:b6:d2:28:82:02:37:8f:7e:15:02:24:b1:f3:c4:f9:ef:86:
72:fd:4e:93:ee:27:54:ec:92:0f:e0:05:ed:0b:b5:be:0b:cd:
fc:bd:9f:84:8e:c6:cf:96:8f:30:d4:f3:f4:e9:3f:59:90:af:
2a:b6:f9:f6:69:80:48:20:de:01:7e:97:40:aa:66:f7:54:0f:
85:e3:03:6a:75:74:8b:a9:c4:50:8d:b6:c9:38:9c:d2:91:e6:
f4:3a:d4:3d:ff:34:85:6d:9c:1a:1e:8c:b9:ec:2a:86:85:3b:
e2:00:20:3e:3c:4e:e8:36:7b:c3:f1:f9:17:7c:71:fb:5d:13:
5a:32:3e:4e:36:48:82:03:db:e9:4e:fa:59:4b:cd:4c:0c:66:
95:23:da:17:f8:d9:81:18:99:83:13:71:5b:be:93:31:b3:b9:
95:56:7c:b6:b0:ff:ec:65:c5:5e:86:c5:c9:26:b2:cb:20:67:
db:ec:9c:ec:a5:2c:b2:f6:f9:b0:d7:aa:05:28:b8:0f:50:58:
71:63:20:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAykleRdxLCNGABIB3J7euMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDI4NzI1NmUyNWZhMzQwZDNhZmJhNzgwZWFjNjBkNTU2
YWRlYzAwHhcNMjYwODE0MTUwMDUxWhcNMjYwODE1MTUwMDUxWjAzMTEwLwYDVQQD
EygwNGExYjgyMzkxNTgwMjVhNmYxNGUwODBlNWNhNWQwZWQ2OTMzZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv59rEwVZERBOTNu2SC9fC1hCRlo7
5dQN+wu14DbJGvH2p9925M5rTxT20x9ydnGRAac8vlXYby9A3b2GGD/EKyvo+I7O
aCeagKT1QH5oI2tCXPQZsppmjaWxL/L32zbndlu9AZom/MZgnq/hJx3tXCHsAEez
AFT6teD38Eju2yedzED0qk8VB/gO5Qca5sXKNzjW935yT1T8Il8RzTaf4Z5mwGkk
2M8JwIuti/3JVdEfhWywMO0+GSbCHiv3+D/CMHOiCbatU/ErZmiDq9nz9tkZ+8fm
lIcdBplyDMQ5RbL7IDgITV3S/1DcSX2xfYGqpuiIR8Ah/5Ae4R/QHTjLWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAShuCORWAJabxTggOXKXQ7Wkz9yMB8GA1UdIwQY
MBaAFAkChyVuJfo0DTr7p4Dqxg1Vat7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWIt
NzdiMjFjMDRiYzdkLzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWItNzdiMjFjMDRiYzdk
LzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVdqxvDQ
U5vf9kAklEDG8T1D+ji1ywpq9tcWV3MvexPGHgzr8ppv4C7MUlONk0SwYNEfUKna
E7bSKIICN49+FQIksfPE+e+Gcv1Ok+4nVOySD+AF7Qu1vgvN/L2fhI7Gz5aPMNTz
9Ok/WZCvKrb59mmASCDeAX6XQKpm91QPheMDanV0i6nEUI22yTic0pHm9DrUPf80
hW2cGh6MuewqhoU74gAgPjxO6DZ7w/H5F3xx+10TWjI+TjZIggPb6U76WUvNTAxm
lSPaF/jZgRiZgxNxW76TMbO5lVZ8trD/7GXFXobFySayyyBn2+yc7KUssvb5sNeq
BSi4D1BYcWMgDQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:46 2026 by rpki-client