Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: bPy28Ek0ml5XlMKiXzxuvtohgymxdrtjz05lajQQhDo=
Subject key identifier: D2:E8:7D:D7:4B:A4:B5:82:61:B0:EB:3D:11:A2:F0:3E:7E:CD:24:E1
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019D38D33B6868C301C2E97EEF84756B7654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: hLv73VoOkH1TlBxLlRV2/ToVelYP6heuacMXMcoSQSU=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3b:68:68:c3:01:c2:e9:7e:ef:84:75:6b:76:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=d2e87dd74ba4b58261b0eb3d11a2f03e7ecd24e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:5a:30:b4:a7:ed:45:c1:94:fe:7a:98:c0:
8f:99:66:e3:39:fb:0e:16:bd:71:8b:d4:6a:3f:2f:
88:43:da:c1:66:fa:cd:a5:20:42:59:41:56:a9:e6:
d9:9d:66:df:48:8a:a3:24:3b:df:9f:b1:a8:3a:f7:
c3:b3:c4:d4:7f:2b:dd:54:e1:5b:13:99:ee:92:eb:
ce:99:15:41:4f:d6:7a:23:bd:e7:ec:f0:b2:c8:9e:
d8:ac:98:6e:38:40:2b:c0:99:05:35:43:65:da:49:
61:46:ce:4b:2d:ba:ab:ed:08:6c:0b:27:03:f1:c8:
67:a6:4f:1a:ff:bc:e7:3f:d0:a5:06:6e:12:1f:51:
c4:cf:83:24:a2:48:90:c9:6a:56:ea:ee:db:66:7c:
5b:29:5a:21:e6:d2:cb:a0:03:61:bb:2c:38:3b:4e:
a6:35:0a:fd:94:9f:37:f3:e3:1a:58:a1:f4:a8:c3:
e8:25:41:38:9a:be:a6:89:5d:ee:22:26:38:f9:95:
e6:15:25:96:b5:f8:cb:03:a6:83:2b:14:d9:d9:4e:
d9:dd:b8:ea:ca:67:e0:54:a2:73:c0:7f:15:60:17:
ad:33:93:23:d0:e0:6e:41:f7:d6:fb:99:95:f2:14:
51:ab:d3:e4:5d:e2:dd:95:bb:72:86:f2:9b:1e:d2:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:7D:D7:4B:A4:B5:82:61:B0:EB:3D:11:A2:F0:3E:7E:CD:24:E1
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6c:4e:9e:4f:f7:2a:b2:03:08:e0:38:b8:8d:34:9b:fd:b1:
ee:5a:03:70:2f:8c:a2:9e:79:b0:76:82:35:7f:8a:0b:29:81:
0f:00:9d:da:3c:4c:30:9d:7c:fd:cb:60:b4:7b:9d:a5:0f:5d:
88:27:50:56:8c:8e:39:5d:83:5f:a6:78:c3:c4:b6:98:a0:55:
50:a2:ed:98:41:79:39:0f:61:30:f7:46:e6:0a:3a:8c:0e:06:
e6:e4:f0:31:59:46:d7:da:cc:d1:02:28:3c:1e:c4:04:ce:5e:
30:4d:1e:09:2f:7b:0f:8b:ce:22:23:ce:7d:c4:69:e2:42:d9:
62:bf:59:0a:71:4e:a0:51:31:4e:c3:4a:12:03:aa:24:65:09:
a9:6c:1d:01:3a:67:e2:ff:16:2f:38:13:3d:c8:8f:94:10:d2:
fb:44:cf:5c:7c:72:57:49:fe:d7:4f:67:3b:22:ed:22:23:ee:
61:57:45:21:ee:78:14:1d:e0:4d:6c:91:86:fb:7d:15:71:45:
d9:be:d6:cf:48:ac:94:22:fb:29:4f:ad:8d:50:87:e0:9e:06:
b8:76:41:03:cd:40:c0:2c:9d:3c:62:e2:0f:26:c7:f8:2a:7c:
8c:7f:f1:15:7f:2e:09:d3:39:e9:74:ac:99:62:9f:00:15:a9:
71:e0:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:48 2026 by rpki-client