Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: +6MnM7RYUZhVFqWMi9r6FZtdN8eJ0dZDJn+cIU49Jgo=
Subject key identifier: A4:72:86:E4:93:8B:A1:35:6B:F1:63:E1:C7:98:1E:10:42:5C:56:B7
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019E31BBD5A93E68916689B85B7CA4D2815A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 17A4
Signing time: Sat 16 May 2026 17:00:53 +0000
Manifest this update: Sat 16 May 2026 17:00:53 +0000
Manifest next update: Sun 17 May 2026 17:00:53 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: FuszW691VH5YCUiI/f6tBFMXLBOvksm4qOKHqH8k8P0=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:d5:a9:3e:68:91:66:89:b8:5b:7c:a4:d2:81:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: May 16 17:00:53 2026 GMT
Not After : May 17 17:00:53 2026 GMT
Subject: CN=a47286e4938ba1356bf163e1c7981e10425c56b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:96:1f:e1:54:a8:d1:c9:04:42:4c:1f:0d:
ae:03:1c:96:ee:22:e5:26:e2:29:99:9f:21:a4:99:
ab:f5:78:81:e7:e3:b4:b8:75:81:85:ae:24:34:73:
b4:6e:4d:28:d4:f3:9c:4f:cd:60:8f:96:8f:b1:1f:
81:e5:e8:bb:f0:29:6c:52:90:2b:47:c2:17:fa:74:
db:c7:96:d7:44:40:99:f9:ec:b8:f7:49:6c:59:fd:
ac:06:ef:b0:0f:57:a3:93:89:ab:dd:ee:4f:1d:e5:
72:46:ea:23:7d:01:cc:42:0b:e5:8b:9b:6f:ac:97:
8a:16:75:50:51:23:18:6d:a9:15:0c:05:11:a8:b8:
c0:7d:0c:27:13:47:fe:f8:b0:6a:8c:b7:b6:4f:88:
c7:7e:52:5c:ec:b7:cf:46:95:f2:f4:ee:53:01:1f:
21:bf:b1:4e:49:03:10:8e:0e:4c:ef:f9:0b:e8:84:
e4:f2:dd:2e:89:88:8b:0d:42:25:c3:e9:19:2e:56:
b2:cd:2a:d7:d1:36:4d:bd:ea:c6:77:cd:51:e5:57:
88:bf:a3:6b:e8:e5:38:c5:58:b5:c4:5a:96:23:49:
2a:18:b7:bb:1a:2d:c9:06:10:b1:f7:32:cd:f0:cb:
4c:8b:a7:1a:6f:06:66:a0:77:93:32:9a:28:8c:c6:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:86:E4:93:8B:A1:35:6B:F1:63:E1:C7:98:1E:10:42:5C:56:B7
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:e1:ce:a9:75:5f:24:82:dc:dd:52:18:a9:ce:c4:a4:73:eb:
5b:52:84:d9:5f:7d:ac:e5:d8:21:7f:7e:d3:90:96:cc:f9:9b:
f7:ec:93:77:dd:48:95:fa:9e:a9:05:cc:41:22:ad:95:ed:26:
23:13:87:91:43:e5:f0:2d:ef:55:11:ea:76:fe:c2:db:37:22:
a0:16:7d:53:8c:c1:8b:a0:f0:3b:e7:c5:0b:08:66:b5:57:9e:
eb:d1:eb:46:e5:e0:5b:85:a1:83:e8:76:e1:1c:3d:e8:18:7a:
f8:d1:55:59:b0:4a:a9:15:76:f0:dc:77:b1:74:a5:4a:35:f0:
e9:c3:4a:50:a7:66:9f:05:9c:90:42:b3:36:a2:1e:64:44:80:
06:88:f3:52:ec:b1:9a:e6:9c:6f:8f:b3:2e:92:a9:43:90:ff:
74:5b:1f:3a:1b:bf:89:ed:d3:24:4e:a3:6b:d7:7b:c1:5c:1a:
b6:35:2c:6b:70:fb:6f:e3:ae:80:d4:d9:04:63:46:71:94:2b:
97:a2:06:e4:ef:aa:0d:2a:db:63:3c:3f:a8:8f:7b:1e:ca:78:
51:8a:d6:67:76:a0:b3:85:20:b5:4d:b7:33:2f:ac:d1:44:e4:
d3:dd:f7:79:3c:2b:55:e7:f4:06:27:78:36:8d:f8:41:2f:30:
3a:a4:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:47 2026 by rpki-client