Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: EAN9Jax4RKvvCnKl4epMy601EAeqIWKee68r75IFGcw=
Subject key identifier: FA:6B:BE:C5:99:F4:D8:79:9C:34:A0:74:55:D7:58:80:3F:13:CA:83
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019FF4FD9368B0772580604D74843095C757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 121A
Signing time: Wed 12 Aug 2026 08:01:26 +0000
Manifest this update: Wed 12 Aug 2026 08:01:26 +0000
Manifest next update: Thu 13 Aug 2026 08:01:26 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 746lgZvvmME0KdKy6OtEJVa52tJ45D6WOS5STxUZMrQ=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:fd:93:68:b0:77:25:80:60:4d:74:84:30:95:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Aug 12 08:01:26 2026 GMT
Not After : Aug 13 08:01:26 2026 GMT
Subject: CN=fa6bbec599f4d8799c34a07455d758803f13ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1b:15:c2:83:6b:72:42:9d:4b:5f:53:0f:78:
be:23:6c:f4:2f:87:c6:a3:57:c2:bc:41:ae:3a:c6:
c0:20:90:02:29:4c:1b:70:81:85:4d:6f:39:24:7a:
40:0e:5a:97:4f:b7:52:d1:5f:39:07:bb:75:49:25:
0a:68:85:bf:e2:04:d8:97:87:32:13:61:64:17:33:
47:e3:37:35:46:ec:b0:8e:c2:2a:fa:8f:b4:d6:38:
b7:ac:d2:62:9d:ea:a6:d0:b3:ab:0e:c7:b8:d2:50:
bd:08:85:b4:20:b3:d4:aa:b5:45:40:0f:8e:64:48:
6c:81:3d:57:65:7a:40:27:f9:37:f5:22:2e:bd:44:
7c:f0:de:87:d1:ec:8c:bb:4f:94:34:62:04:da:71:
ea:d8:86:62:74:dd:42:32:10:fd:8c:39:f6:52:a4:
35:6e:74:40:a1:29:1e:fd:69:76:c3:94:7d:df:e5:
81:09:5b:ae:89:6c:19:82:3d:85:a8:3b:9a:8a:c7:
dc:56:40:02:9f:41:ef:9b:c1:a5:b2:47:a1:12:48:
d0:f3:a2:25:97:ee:2b:40:30:a0:97:4b:8d:f7:36:
11:d8:18:b0:38:77:e3:9f:5b:84:43:ef:38:6c:db:
ca:16:4e:7c:47:ef:40:d6:01:56:cf:5e:69:72:c4:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:BE:C5:99:F4:D8:79:9C:34:A0:74:55:D7:58:80:3F:13:CA:83
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9b:25:ea:c8:60:bf:e6:5c:96:3c:1c:44:eb:0f:2e:f8:98:
9b:d4:63:8e:42:cd:ff:b0:78:eb:59:90:d6:2b:ae:ba:da:a9:
ac:1d:95:f3:3f:c0:4d:6c:95:06:c3:99:e4:60:3e:a6:52:85:
d7:fb:24:4a:12:c8:c1:f9:6c:ef:ab:8c:2e:b0:8a:c0:82:76:
18:61:fb:2d:81:f6:ad:93:01:fc:30:48:de:9f:6d:70:d7:26:
44:bc:87:7a:95:7c:93:25:b8:13:f4:76:e0:83:44:00:94:48:
b1:93:36:b1:dd:8b:32:d8:c0:91:70:3c:d8:7c:08:9e:46:94:
98:41:91:64:d9:fa:0b:b0:59:c2:c7:19:51:3a:b3:11:77:d2:
7f:cc:67:cd:aa:96:b8:59:ff:59:5b:a1:de:42:65:34:50:53:
d6:89:1d:c6:1a:15:d0:89:3d:b2:95:2e:6d:7f:da:86:9b:3b:
38:8d:a0:12:db:65:4b:81:92:51:e8:fd:b0:9e:ac:d9:40:13:
64:2c:40:c9:12:f6:28:85:1e:11:2d:38:60:8c:12:40:a9:b1:
1a:7b:8c:cc:28:d3:d7:95:d6:f6:61:ef:ec:30:ad:c0:8e:98:
17:ed:20:0b:8b:f7:46:b0:23:e6:0f:f8:96:06:fe:3a:d9:e1:
fe:7a:11:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/0/ZNosHclgGBNdIQwlcdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjYwODEyMDgwMTI2WhcNMjYwODEzMDgwMTI2WjAzMTEwLwYDVQQD
EyhmYTZiYmVjNTk5ZjRkODc5OWMzNGEwNzQ1NWQ3NTg4MDNmMTNjYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hsVwoNrckKdS19TD3i+I2z0L4fG
o1fCvEGuOsbAIJACKUwbcIGFTW85JHpADlqXT7dS0V85B7t1SSUKaIW/4gTYl4cy
E2FkFzNH4zc1RuywjsIq+o+01ji3rNJineqm0LOrDse40lC9CIW0ILPUqrVFQA+O
ZEhsgT1XZXpAJ/k39SIuvUR88N6H0eyMu0+UNGIE2nHq2IZidN1CMhD9jDn2UqQ1
bnRAoSke/Wl2w5R93+WBCVuuiWwZgj2FqDuaisfcVkACn0Hvm8GlskehEkjQ86Il
l+4rQDCgl0uN9zYR2BiwOHfjn1uEQ+84bNvKFk58R+9A1gFWz15pcsS5bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPprvsWZ9Nh5nDSgdFXXWIA/E8qDMB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZsl6shg
v+ZcljwcROsPLviYm9RjjkLN/7B461mQ1iuuutqprB2V8z/ATWyVBsOZ5GA+plKF
1/skShLIwfls76uMLrCKwIJ2GGH7LYH2rZMB/DBI3p9tcNcmRLyHepV8kyW4E/R2
4INEAJRIsZM2sd2LMtjAkXA82HwInkaUmEGRZNn6C7BZwscZUTqzEXfSf8xnzaqW
uFn/WVuh3kJlNFBT1okdxhoV0Ik9spUubX/ahps7OI2gEttlS4GSUej9sJ6s2UAT
ZCxAyRL2KIUeES04YIwSQKmxGnuMzCjT15XW9mHv7DCtwI6YF+0gC4v3RrAj5g/4
lgb+Otnh/noR0Q==
-----END CERTIFICATE-----
Generated at Wed Aug 12 15:55:39 2026 by rpki-client