Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: 76Zk8ShEAeKh3XIWU3tLmtt1hPF8S709QY0pkKGo2vg=
Subject key identifier: 3D:94:04:14:7C:BD:8E:35:B3:CD:DB:72:6B:18:82:DF:32:E6:1B:10
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019E30052999E5984986D9898C4996A87437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 09:01:45 +0000
Manifest this update: Sat 16 May 2026 09:01:45 +0000
Manifest next update: Sun 17 May 2026 09:01:45 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: 2vwBi/FfyDy2kn6iK3tdc/8k7AYDgjPsn++H5dRV1Mc=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:29:99:e5:98:49:86:d9:89:8c:49:96:a8:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: May 16 09:01:45 2026 GMT
Not After : May 17 09:01:45 2026 GMT
Subject: CN=3d9404147cbd8e35b3cddb726b1882df32e61b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:6a:52:8d:41:a4:25:ab:97:5d:bd:cf:5c:
67:85:2b:86:59:43:ae:aa:bf:cd:f3:c2:8d:fe:c2:
6f:a2:e0:b3:71:38:96:0c:b8:2d:ce:53:8f:89:83:
32:a7:43:d2:0a:16:a1:3c:81:af:ed:2a:26:46:f8:
37:5c:2b:8e:be:77:3a:ab:0d:d4:c1:d0:55:88:89:
14:a8:ce:4b:10:0f:4d:ec:6c:68:45:2c:1f:d6:56:
61:f3:83:34:30:19:42:67:a8:db:d8:4b:c7:31:22:
11:f0:7c:0e:ec:65:9f:79:f4:f8:fb:20:fa:d7:0a:
7f:96:32:51:46:a3:6e:df:66:8e:ac:18:65:25:f8:
98:5f:94:a9:10:22:09:2a:f1:cb:a2:bc:93:71:c2:
f2:3b:ad:b0:cc:a1:3c:5e:8f:67:eb:b9:fe:cd:e0:
ec:30:f0:2c:7b:13:6d:09:88:88:b2:9a:cb:7a:c9:
98:7d:14:0d:84:50:6c:07:b2:aa:bb:99:23:88:a0:
21:dd:bd:64:4b:36:8c:ce:fe:5a:b7:a3:f2:d4:1d:
40:3d:4d:02:6a:92:21:a5:48:79:9a:0f:03:a6:ea:
33:14:cd:b8:2e:dc:b9:99:84:66:9a:2f:68:c9:c6:
56:b5:b9:55:dd:ca:3c:d2:9b:b1:5f:11:27:b8:9d:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:04:14:7C:BD:8E:35:B3:CD:DB:72:6B:18:82:DF:32:E6:1B:10
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:07:7e:23:dd:1a:13:5f:74:33:93:72:9b:67:15:b2:f6:07:
0f:a8:3a:a5:83:df:6b:3f:5e:28:02:48:28:3f:73:2d:50:a6:
f0:16:d5:df:2a:bd:f9:be:94:43:5a:23:eb:52:d9:42:cf:e8:
1d:74:5c:ad:9d:76:33:2b:56:52:65:f7:1b:22:70:2a:46:dd:
5c:56:07:b8:cb:68:b9:a8:c2:b5:b8:63:f4:12:80:af:d9:2c:
01:01:2e:3e:76:e1:5e:e1:c3:17:72:74:07:68:f5:f1:7e:eb:
76:aa:dd:3b:9a:ce:e0:db:e7:2b:2b:8b:3f:29:cd:b1:9f:5e:
32:58:48:73:fb:42:17:e4:38:77:c8:db:a1:66:75:e5:10:2b:
bf:47:4c:62:74:57:f6:9b:2a:09:9f:44:c0:7d:cb:68:c8:de:
44:0f:34:5a:ba:bd:3c:39:c7:30:cd:68:45:e4:e2:c5:80:d7:
70:b8:ef:8f:58:4c:96:56:58:c0:71:c6:08:d7:2f:3a:be:42:
0b:3f:9e:48:6b:c3:52:57:66:84:ef:82:87:3f:a3:49:b8:08:
03:7f:4d:6f:96:8d:ce:9b:69:13:0d:77:f3:e0:6e:67:06:cf:
54:45:cd:2e:76:1c:f8:f9:c9:2b:74:e5:2f:b9:05:cc:a5:6c:
f2:8b:29:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBSmZ5ZhJhtmJjEmWqHQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDgyMDRkN2NmNWJjNGFhYjM4ZmZhMzlkYTNhNjgxZWQy
MTdiZDQwHhcNMjYwNTE2MDkwMTQ1WhcNMjYwNTE3MDkwMTQ1WjAzMTEwLwYDVQQD
EygzZDk0MDQxNDdjYmQ4ZTM1YjNjZGRiNzI2YjE4ODJkZjMyZTYxYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sxqUo1BpCWrl129z1xnhSuGWUOu
qr/N88KN/sJvouCzcTiWDLgtzlOPiYMyp0PSChahPIGv7SomRvg3XCuOvnc6qw3U
wdBViIkUqM5LEA9N7GxoRSwf1lZh84M0MBlCZ6jb2EvHMSIR8HwO7GWfefT4+yD6
1wp/ljJRRqNu32aOrBhlJfiYX5SpECIJKvHLoryTccLyO62wzKE8Xo9n67n+zeDs
MPAsexNtCYiIsprLesmYfRQNhFBsB7Kqu5kjiKAh3b1kSzaMzv5at6Py1B1APU0C
apIhpUh5mg8DpuozFM24Lty5mYRmmi9oycZWtblV3co80puxXxEnuJ2wawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2UBBR8vY41s83bcmsYgt8y5hsQMB8GA1UdIwQY
MBaAFAkIIE189bxKqzj/o52jpoHtIXvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjIt
ODgyM2YxMTFkZjA3LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjItODgyM2YxMTFkZjA3
LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgd+I90a
E190M5Nym2cVsvYHD6g6pYPfaz9eKAJIKD9zLVCm8BbV3yq9+b6UQ1oj61LZQs/o
HXRcrZ12MytWUmX3GyJwKkbdXFYHuMtouajCtbhj9BKAr9ksAQEuPnbhXuHDF3J0
B2j18X7rdqrdO5rO4NvnKyuLPynNsZ9eMlhIc/tCF+Q4d8jboWZ15RArv0dMYnRX
9psqCZ9EwH3LaMjeRA80Wrq9PDnHMM1oReTixYDXcLjvj1hMllZYwHHGCNcvOr5C
Cz+eSGvDUldmhO+Chz+jSbgIA39Nb5aNzptpEw138+BuZwbPVEXNLnYc+PnJK3Tl
L7kFzKVs8osp+Q==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:59 2026 by rpki-client