Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: Leo4+69Ln4iottLD9FebigBAUfOmGSFUwuwP8rThRMM=
Subject key identifier: F2:1A:54:F0:8F:EF:78:EB:07:CE:CA:02:1E:D2:30:2A:D6:E0:9B:00
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019FA297397AFA1D5CED3B16F688AE5DDD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1863
Signing time: Mon 27 Jul 2026 08:00:47 +0000
Manifest this update: Mon 27 Jul 2026 08:00:47 +0000
Manifest next update: Tue 28 Jul 2026 08:00:47 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: fAWeArQCDl4N2v93t35L6+MvamX4/h1aLrWfWYT2K0g=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:39:7a:fa:1d:5c:ed:3b:16:f6:88:ae:5d:dd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jul 27 08:00:47 2026 GMT
Not After : Jul 28 08:00:47 2026 GMT
Subject: CN=f21a54f08fef78eb07ceca021ed2302ad6e09b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:91:24:82:12:db:31:75:36:a4:6e:b4:60:
73:f5:db:ac:19:2c:fd:db:9a:3b:b6:f0:d0:10:6b:
c5:aa:45:c9:af:93:e0:66:df:2e:ef:c3:ca:76:15:
59:6f:d6:40:3c:2e:ea:c1:d8:68:ae:a8:8c:fd:5b:
96:b8:7e:f7:b9:6a:d6:e3:42:05:60:e5:6d:ee:53:
52:a4:e8:66:48:f0:25:03:98:72:b3:cd:01:74:0e:
00:2f:8f:cc:6b:4b:69:0b:82:d8:f5:4d:85:0c:f7:
61:28:cd:32:4d:14:01:d1:af:e7:26:61:5d:53:47:
c4:41:5b:cb:b8:05:4f:90:1b:f6:dd:8a:e8:ea:0e:
55:1c:42:c4:e0:f0:1a:c0:dc:8c:b7:f3:23:ce:8d:
71:d9:d9:ef:96:95:b2:01:37:36:8c:fa:48:ae:a7:
49:54:a8:9d:a7:0c:73:33:c7:0b:86:46:84:7f:bc:
5c:1f:8d:d2:5d:dd:5f:30:4a:a7:fc:5b:21:7c:9f:
5d:ab:7c:96:20:f1:da:0a:d7:73:a3:ee:b9:75:d3:
ed:ca:d2:5a:92:40:f0:8b:a2:05:c1:d8:32:23:40:
a8:8f:c2:16:30:e6:0b:5d:17:49:39:e9:6c:7b:5d:
9e:76:92:d6:9c:c7:3b:b9:f3:f0:43:5b:29:7c:7d:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:54:F0:8F:EF:78:EB:07:CE:CA:02:1E:D2:30:2A:D6:E0:9B:00
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8f:aa:6a:8e:5a:c0:9c:89:5a:05:c6:5d:cb:7b:9d:98:21:
de:9e:bf:1c:36:c4:66:c3:23:71:b7:66:48:c8:74:46:12:78:
6a:90:6e:ac:39:dc:c1:af:c8:42:54:c1:a0:c0:65:6f:59:87:
c4:b5:30:ab:6a:27:2b:0a:57:64:33:db:ab:65:6a:20:90:b0:
33:38:9b:9c:40:0b:76:f6:8c:61:70:3b:1b:b6:02:4c:87:20:
91:7e:fc:5b:f6:c3:61:f0:74:40:d9:29:ac:31:51:db:94:c3:
4c:a7:65:03:1e:d0:91:ff:a5:77:39:a5:61:cc:ac:e1:9a:8d:
e6:c1:01:e0:2a:8f:46:5a:ea:db:a5:c6:8b:af:ce:66:43:08:
9c:0e:af:7a:30:ae:1e:5f:34:e8:6b:78:99:da:25:cd:ee:3f:
94:5c:e9:cc:f2:34:0a:2d:bf:12:01:47:d2:79:b5:83:0a:01:
cc:8e:34:ef:b8:68:6f:3e:30:b0:de:a8:2d:0a:93:72:d2:0d:
2d:72:34:13:bb:7d:25:99:88:ae:9e:b1:86:d8:d4:b6:42:7c:
22:1f:6f:3c:16:6a:5b:8f:f8:d7:3b:01:d7:10:41:8f:e3:e7:
da:b1:fd:c9:9b:a7:dc:a8:ee:a5:53:89:2a:8a:bf:6e:e8:51:
3b:aa:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:20:17 2026 by rpki-client