Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: fEfc/CgSqTnZmM2OJ60wHCqbtgT6mx+3c0NpCDjQU2I=
Subject key identifier: 2B:FC:3D:3E:38:2E:F8:A8:BF:2C:71:47:00:6D:82:A7:5E:48:77:E3
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 01A13E266D2AE4786EDF54243D20C70F1654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 06:01:08 +0000
Manifest this update: Thu 15 Oct 2026 06:01:08 +0000
Manifest next update: Fri 16 Oct 2026 06:01:08 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: fTyCxZR6HO1AG34FdAlkGLElrC70c6jhYBaCOrlSgs8=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:6d:2a:e4:78:6e:df:54:24:3d:20:c7:0f:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Oct 15 06:01:08 2026 GMT
Not After : Oct 16 06:01:08 2026 GMT
Subject: CN=2bfc3d3e382ef8a8bf2c7147006d82a75e4877e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:a8:e6:18:0a:71:e6:af:17:b9:04:fd:00:
c4:8b:ea:69:28:c5:93:db:6d:d5:9d:a7:3c:16:13:
48:d4:47:6f:02:87:80:6c:7f:37:33:13:f4:0c:45:
1e:a7:6a:cc:e5:a5:f9:f5:af:98:04:53:73:0a:1a:
82:e3:1d:7c:b3:27:28:bf:99:7a:84:2b:5f:4e:4a:
f5:e6:02:c3:72:1a:b8:37:7b:94:fe:4c:1e:57:95:
c7:f0:4a:e5:dd:4d:01:13:13:9c:68:2e:e8:6b:4b:
14:37:ba:44:70:4c:c3:74:5c:cc:dd:53:61:58:9a:
36:af:69:e9:48:67:fd:9e:3a:01:be:aa:5f:6e:3a:
5d:59:03:4a:da:ab:19:f6:6f:26:1e:fe:ea:14:56:
c3:82:5a:de:04:76:f6:07:7e:36:2e:13:d4:4e:d7:
eb:d7:2a:3f:43:9b:55:0b:3b:89:c8:da:46:92:bb:
c4:ab:52:f4:40:6c:8e:8f:70:b0:37:b0:64:25:17:
b4:81:a1:23:23:48:e8:23:09:9e:8f:49:69:b5:aa:
9c:ab:e7:3a:ef:72:f7:b9:75:aa:25:21:90:e1:7d:
db:9c:51:55:93:30:88:c9:fe:7a:ee:34:89:f0:26:
95:df:a1:70:ba:fd:3c:b0:29:3f:44:a9:39:03:b4:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:3D:3E:38:2E:F8:A8:BF:2C:71:47:00:6D:82:A7:5E:48:77:E3
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d5:8e:dc:ac:33:34:ef:46:11:c4:00:f4:81:11:60:be:4e:
9b:9c:8f:92:13:89:c2:85:c8:7a:14:bf:48:4a:e1:2a:18:53:
3d:cf:3e:b2:48:ea:4b:1a:4f:64:ff:a6:58:c8:4a:0b:f4:da:
7b:7a:8b:b8:6b:53:20:3e:48:9c:7c:5c:c5:54:67:63:c9:f4:
ea:bd:d2:99:60:eb:5a:a3:0e:0d:9f:0e:6a:e8:70:a7:e6:2e:
2e:85:38:66:32:c0:b4:36:32:2f:9f:9e:6b:9a:58:84:af:78:
83:fa:b4:c5:93:fa:fe:a7:99:42:4b:97:6f:27:83:3e:5d:c1:
78:d1:32:48:25:bb:f9:aa:c3:85:c7:ab:39:13:76:f2:30:c7:
d4:6e:58:43:52:bc:99:15:78:24:c7:0e:d3:91:73:d5:f0:63:
e3:2c:27:44:a2:45:7c:9c:bb:ec:5b:66:b8:b5:cf:e3:2e:cb:
00:94:03:f0:64:aa:8c:25:1f:77:24:01:af:a4:5e:0f:0f:e6:
d7:d2:8a:9d:7f:ea:66:e1:1b:f8:6b:77:df:18:0e:15:f6:19:
ca:6a:2a:0b:8f:cc:7d:27:25:17:02:23:c7:19:e6:50:13:ea:
5f:e5:7b:ae:ec:6e:c6:98:69:8a:36:af:2a:93:54:11:16:90:
0c:16:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:59 2026 by rpki-client