Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: iTSHXWoVCuV1JfTJvaMdhWy73XBd7DgQkgNdZQmkIB0=
Subject key identifier: 76:30:90:28:6C:CE:1E:F5:FC:71:51:F6:BB:20:96:64:93:7F:1D:C5
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 01A18375524E2BE69685BF0B4F19360DD803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 195C
Signing time: Wed 28 Oct 2026 17:01:06 +0000
Manifest this update: Wed 28 Oct 2026 17:01:06 +0000
Manifest next update: Thu 29 Oct 2026 17:01:06 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: 0ZrKGcRo7bEpvOczAH0mBNdGw4ai2JPpfZr75iIPBcA=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:52:4e:2b:e6:96:85:bf:0b:4f:19:36:0d:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Oct 28 17:01:06 2026 GMT
Not After : Oct 29 17:01:06 2026 GMT
Subject: CN=763090286cce1ef5fc7151f6bb209664937f1dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:3c:50:5e:af:99:9f:e7:b2:0b:f0:1b:e9:
55:47:12:9c:7a:32:fd:15:7b:1b:7e:b8:1e:da:7c:
be:53:22:b4:ab:0e:98:20:72:a3:70:be:bd:97:32:
10:e4:9b:2c:f2:6b:e3:ed:92:1d:8c:0f:6d:dc:7f:
7b:86:34:30:a9:bf:c2:89:c8:04:17:dd:d8:87:e6:
b4:29:e0:ac:f9:3f:b5:8c:16:7c:b4:22:7b:80:8f:
19:d3:58:fa:82:ff:d9:bd:49:ed:bd:8e:34:4b:2c:
79:bd:59:bd:c7:03:37:1c:25:54:54:cc:3c:15:f6:
33:46:82:7e:5b:7d:35:6e:d0:0c:99:1e:d0:5c:1d:
02:3d:70:78:75:ff:b2:66:62:90:01:a1:2a:d6:a8:
a2:2c:94:ac:7b:88:78:01:08:9a:97:67:0c:d3:d6:
6b:f1:da:6d:39:8a:f2:b4:95:f9:49:ac:66:ed:aa:
29:65:0d:44:8a:09:ac:bf:c3:13:65:6b:b6:da:a4:
6c:39:72:e7:d6:f2:fb:ba:01:cd:4f:89:5b:ea:6c:
aa:88:88:ef:66:68:3d:07:a1:f7:99:3e:44:5b:b1:
6e:58:d7:bf:5b:00:5d:d4:dc:b3:ae:8d:a3:a7:8b:
1d:da:95:0d:40:6d:98:1d:c1:7f:c2:71:cb:be:90:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:90:28:6C:CE:1E:F5:FC:71:51:F6:BB:20:96:64:93:7F:1D:C5
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:56:a4:c8:3d:20:60:af:90:d9:07:21:24:b0:64:c7:05:
74:d4:d8:c2:24:04:c6:f8:f2:6a:06:c1:46:fd:28:83:fa:6b:
9e:b3:51:ee:dd:89:5a:a5:96:19:c5:6f:79:d8:ed:7d:27:be:
56:46:2a:6e:78:f1:7c:b9:f6:f3:47:99:4c:7b:a0:e4:42:d6:
66:20:a5:dc:99:82:dc:14:41:3c:22:77:3c:01:04:06:2e:ed:
88:1d:1a:5b:ca:38:be:10:2b:ae:ce:93:3d:a4:de:c7:f5:e5:
8c:bb:58:f0:ea:22:f6:6f:41:91:19:01:27:84:21:04:31:99:
24:40:16:04:fb:bb:a5:89:6d:8f:8e:86:da:1f:0d:b7:c7:63:
ef:cb:ba:16:82:88:52:1b:9b:65:06:a4:24:36:0b:eb:43:13:
67:c4:2a:df:a7:92:98:19:74:99:13:7e:ad:8c:37:cf:8d:a4:
c0:71:1e:ad:a7:49:f8:3c:e6:ce:32:d6:b5:fc:e4:b2:a2:10:
16:3c:71:93:92:18:61:4d:b7:38:48:0e:cd:72:88:c6:18:ca:
ba:0e:e4:c5:66:4f:6b:ea:48:cc:8f:ca:d6:81:f2:0f:66:14:
42:b5:95:b8:39:70:ba:be:f4:5b:ea:fb:e2:81:47:01:20:c5:
0f:8d:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:52:07 2026 by rpki-client