Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: p9/sM664kdGVzijDc31+lvFmHPE/t0eKJbBWoITn6FI=
Subject key identifier: 5D:7B:B0:AB:F2:CA:58:61:FD:EA:B2:6D:B2:BA:96:04:4F:A0:7D:85
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019D389C3E357A1B0F73F753461B17C6B765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1723
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: j0nqQZ0Ng8Qa2vW9A+JTk3iAzqWSoYgX8wtfTS9gB4k=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3e:35:7a:1b:0f:73:f7:53:46:1b:17:c6:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=5d7bb0abf2ca5861fdeab26db2ba96044fa07d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ed:a7:96:39:85:0c:23:cf:59:55:fd:0f:65:
f1:b8:37:78:f8:35:5c:26:ac:74:2f:8f:7f:0d:6c:
da:f9:0d:95:d0:ba:b7:e4:d9:2e:ca:10:7c:c7:5b:
b5:38:b5:c4:0c:f1:e0:49:de:54:7c:c9:2e:a1:f2:
b4:37:8d:34:08:6c:ad:cc:a7:f8:4f:21:7c:76:4f:
be:21:64:64:47:d8:d1:40:c8:89:f3:3e:b5:b0:ed:
cc:7f:09:da:96:66:e0:ea:25:10:db:ba:0f:a6:2a:
33:83:76:f5:e9:f5:81:db:70:0b:70:81:38:b1:18:
4c:fe:2d:29:29:c3:de:70:d3:d1:00:ba:49:8d:bb:
37:94:5a:46:9e:f2:be:81:ce:a3:ed:93:2d:ae:04:
42:97:b1:74:9d:49:73:59:31:07:6e:5d:a2:e3:67:
30:f9:b7:e4:b9:3e:18:9f:d6:e9:40:40:b1:7d:a9:
44:0d:4a:fe:ab:05:9f:54:bb:b5:65:d8:d8:d0:7f:
5d:97:ae:55:06:ab:ce:10:b6:e0:60:76:34:cb:69:
d9:0d:80:56:9e:f5:2c:32:3c:38:aa:1b:23:8c:63:
0e:93:85:2a:a1:0b:d6:3b:88:80:10:74:44:bc:93:
25:38:86:1a:91:2a:f8:0c:95:9a:74:d2:8e:2c:85:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:B0:AB:F2:CA:58:61:FD:EA:B2:6D:B2:BA:96:04:4F:A0:7D:85
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:a0:60:5d:4d:b3:3a:a8:da:d1:14:57:1b:2e:74:fb:5b:
43:77:00:ad:e1:59:63:8e:de:2b:14:e3:05:03:88:1b:c1:b6:
be:96:53:4e:60:83:99:57:14:00:84:67:0b:81:1f:f7:78:a3:
7c:a1:ab:df:1b:5a:d0:e7:ba:2d:18:ea:4f:6d:25:ce:9c:e6:
ff:f5:5f:37:27:1b:39:82:73:9a:2d:58:97:21:1c:f8:c6:5e:
d8:e1:d2:be:6a:8c:93:5b:ef:4c:86:69:81:d7:36:0d:9e:99:
f7:02:3e:b8:8c:d1:eb:d2:da:f5:da:c4:1a:ef:73:b4:76:7f:
9b:6f:97:75:65:11:89:0a:0c:d9:39:50:26:b9:68:79:f6:8b:
f2:25:44:01:3f:46:57:b7:92:77:9b:51:00:f1:37:5b:00:49:
d0:28:b9:b7:93:49:e5:4d:60:6e:c4:4c:d4:2a:5e:29:e5:6c:
c3:11:63:88:99:26:a5:a0:1e:4c:e2:47:33:32:aa:48:1b:1e:
b0:31:b0:09:c1:dc:ab:45:8a:73:22:fb:9e:b8:a2:17:e9:07:
4e:68:85:12:11:6b:8a:b4:0e:93:65:78:30:92:aa:7c:fe:a8:
b4:62:f5:ea:c5:dc:03:09:88:ad:8d:ba:ea:45:11:9e:e3:b7:
fa:85:eb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nD41ehsPc/dTRhsXxrdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1
OTI2ZmQwHhcNMjYwMzI5MDgwMDU2WhcNMjYwMzMwMDgwMDU2WjAzMTEwLwYDVQQD
Eyg1ZDdiYjBhYmYyY2E1ODYxZmRlYWIyNmRiMmJhOTYwNDRmYTA3ZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/O2nljmFDCPPWVX9D2XxuDd4+DVc
Jqx0L49/DWza+Q2V0Lq35NkuyhB8x1u1OLXEDPHgSd5UfMkuofK0N400CGytzKf4
TyF8dk++IWRkR9jRQMiJ8z61sO3Mfwnalmbg6iUQ27oPpiozg3b16fWB23ALcIE4
sRhM/i0pKcPecNPRALpJjbs3lFpGnvK+gc6j7ZMtrgRCl7F0nUlzWTEHbl2i42cw
+bfkuT4Yn9bpQECxfalEDUr+qwWfVLu1ZdjY0H9dl65VBqvOELbgYHY0y2nZDYBW
nvUsMjw4qhsjjGMOk4UqoQvWO4iAEHREvJMlOIYakSr4DJWadNKOLIUfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF17sKvyylhh/eqybbK6lgRPoH2FMB8GA1UdIwQY
MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt
YWQxMzc4Mjg5YTEzLzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz
LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpigYF1N
szqo2tEUVxsudPtbQ3cAreFZY47eKxTjBQOIG8G2vpZTTmCDmVcUAIRnC4Ef93ij
fKGr3xta0Oe6LRjqT20lzpzm//VfNycbOYJzmi1YlyEc+MZe2OHSvmqMk1vvTIZp
gdc2DZ6Z9wI+uIzR69La9drEGu9ztHZ/m2+XdWURiQoM2TlQJrloefaL8iVEAT9G
V7eSd5tRAPE3WwBJ0Ci5t5NJ5U1gbsRM1CpeKeVswxFjiJkmpaAeTOJHMzKqSBse
sDGwCcHcq0WKcyL7nriiF+kHTmiFEhFrirQOk2V4MJKqfP6otGL16sXcAwmIrY26
6kURnuO3+oXr2A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 10:18:44 2026 by rpki-client