Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: np7HdscSPJ9XBTawcUH7N1RuNtaaBDV+ujgVzn0Fs+I=
Subject key identifier: B2:B6:FE:D7:4F:9E:D0:D4:EE:8B:4F:DD:78:21:30:9E:68:C2:E2:6B
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 01A08E3274CE089C7D025B021957794CF21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 18DD
Signing time: Fri 11 Sep 2026 02:01:06 +0000
Manifest this update: Fri 11 Sep 2026 02:01:06 +0000
Manifest next update: Sat 12 Sep 2026 02:01:06 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: HgZfBZ22VuIqAjCEz1n9aF/tXiZhvdgfNTjTXEccKN0=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:74:ce:08:9c:7d:02:5b:02:19:57:79:4c:f2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Sep 11 02:01:06 2026 GMT
Not After : Sep 12 02:01:06 2026 GMT
Subject: CN=b2b6fed74f9ed0d4ee8b4fdd7821309e68c2e26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:17:3b:58:ab:af:07:de:a2:58:c6:9e:0a:
a8:81:5c:c4:36:db:08:e0:cb:35:06:5c:fc:dc:26:
d2:2d:ca:5c:8c:d4:1f:49:23:52:eb:9b:fe:3d:06:
05:ed:4c:79:d7:42:ea:a3:14:99:40:e5:6b:cc:73:
ab:e3:d7:bb:8a:db:f9:fc:87:c3:0d:02:51:33:b6:
03:51:9a:0c:6c:c8:c5:4a:86:db:64:47:47:0e:de:
53:22:ac:47:49:29:e5:8b:21:62:4d:67:2b:a7:75:
55:84:64:d4:d8:59:ec:19:c6:83:20:5e:75:2b:89:
95:b7:a9:26:77:7d:31:5e:d8:fa:27:62:bf:e4:21:
46:cf:a4:95:d7:cb:10:c0:15:6b:e6:45:ab:8b:a8:
cd:00:8f:d6:38:15:c3:9c:05:19:28:3a:33:8f:d8:
90:60:90:51:a5:30:b2:71:78:48:42:33:e3:43:62:
15:61:9e:c8:4a:33:91:0d:95:6c:72:d9:b5:8a:47:
7f:88:55:a8:02:6d:51:0e:d8:b1:46:4f:c7:21:f4:
09:93:9a:e2:77:4f:17:c2:50:29:2a:06:34:a5:ae:
18:9f:f7:01:b9:61:c2:6a:9c:96:90:9c:35:d2:36:
fb:e4:2d:fc:25:fa:1e:9f:1b:5a:16:11:da:b5:31:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:FE:D7:4F:9E:D0:D4:EE:8B:4F:DD:78:21:30:9E:68:C2:E2:6B
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ee:a8:70:ca:06:fa:15:83:70:a3:4c:76:f9:5d:e0:90:46:
eb:82:2d:d0:42:c9:6f:ee:fb:cd:ba:53:7f:73:d2:ad:ad:04:
b8:1c:61:66:8c:1b:d2:b3:ab:13:bb:a5:e7:9f:13:55:a5:c8:
2a:b0:00:b1:15:9e:73:b9:71:a8:ae:78:66:8c:a3:b0:a9:13:
0d:81:1a:00:25:e2:00:88:8e:93:43:89:24:cf:c3:e8:76:15:
88:4c:bc:64:dc:f6:ea:b8:3e:c5:3b:10:7a:c9:09:87:77:aa:
e7:fc:0f:ac:7c:d9:65:6a:cf:3a:e3:06:70:c1:20:ab:3c:49:
f8:cb:ca:12:d9:08:e4:d8:f8:58:e0:1c:5d:e4:eb:40:31:1f:
52:bf:de:f9:92:d6:57:db:d6:ac:8c:cb:72:4e:90:60:cf:9b:
e2:f1:6c:21:fa:3d:cd:63:a7:ed:98:68:34:90:c2:e7:b7:e3:
1d:7a:6a:63:68:fa:9d:85:79:76:5b:59:19:c5:84:eb:72:9e:
0e:03:53:6a:54:0c:74:47:75:fe:b2:d6:cc:40:86:bf:50:0e:
e5:d8:f3:77:fa:4e:48:d2:50:3a:e5:5e:06:58:6d:0c:72:4b:
c6:60:35:9d:e1:27:53:1e:23:99:de:35:86:3d:a8:5f:31:18:
bc:59:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:39:31 2026 by rpki-client