Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: TBifzTEdif0farOCx6KRkcJX4Ys9k5urNx5mu3OY650=
Subject key identifier: 1F:04:10:C5:71:FF:71:53:E4:2B:6D:A5:63:FF:73:37:CC:16:C6:9C
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019CABD9D689B2023EAE56BAC7F017DBBAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: ORJQ+5lmf4BQI1y6lmgcuP6O8hvUuHbFUQv+zFvCMiQ=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d6:89:b2:02:3e:ae:56:ba:c7:f0:17:db:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=1f0410c571ff7153e42b6da563ff7337cc16c69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:f8:5a:7f:47:1e:b6:14:12:58:a9:32:21:
d4:bd:30:bb:63:30:9b:53:0d:36:af:55:94:29:c3:
3c:1e:d7:33:67:48:05:8e:3a:c7:d0:00:a9:a2:88:
f2:77:dc:9a:a8:07:28:db:da:b7:c0:6a:0f:5f:8b:
1e:0e:33:9a:26:fc:c7:5c:d4:23:95:3c:f9:ff:7e:
6e:dc:a6:8e:fc:36:56:eb:ef:36:d5:67:86:e2:81:
55:f9:73:7d:3e:e0:62:b4:c7:4b:3d:06:36:e0:a0:
d2:d7:cb:06:56:1f:8f:8a:80:e2:6a:64:d5:9b:99:
b1:92:9a:35:8a:61:fb:ac:9a:e9:7a:9b:98:05:54:
c2:18:31:09:ba:c2:2d:02:80:72:7d:6e:09:78:0d:
50:b9:01:33:7b:fa:19:3a:29:d8:45:c7:8d:3e:22:
0c:27:f8:d7:ce:5e:0a:01:96:81:9b:8d:70:70:22:
e3:53:db:89:92:c1:60:07:16:04:6e:f4:7d:6c:60:
3d:da:e1:f0:95:6b:7a:2d:43:b7:e9:7f:8d:8f:7f:
e5:3b:67:a8:2c:08:55:72:26:23:c7:ec:3a:90:54:
f4:41:b1:87:dc:86:ac:62:ec:69:7f:e6:6d:9d:2b:
c3:02:38:34:bd:4b:cf:c2:99:9c:e4:3e:08:19:73:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:04:10:C5:71:FF:71:53:E4:2B:6D:A5:63:FF:73:37:CC:16:C6:9C
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:31:80:f3:07:5b:92:b7:f5:a3:4d:a1:fa:f5:81:0b:af:
02:3b:35:98:18:86:39:c6:92:05:c8:b4:41:5f:9a:19:13:69:
d3:d6:5d:3d:fc:f8:a3:27:ce:f1:91:69:3d:2d:d4:2c:3d:30:
c5:d7:6a:3b:df:f9:96:80:5a:21:47:25:73:d9:f1:86:d0:df:
5e:d4:52:4e:d3:ee:b0:30:8a:e3:b3:03:8f:54:83:20:98:65:
e0:87:23:7b:12:56:20:ab:7b:fd:85:e8:57:ce:8b:44:fc:92:
64:09:31:8e:0d:7b:05:54:e0:95:bb:86:98:91:48:9b:1b:8b:
c4:33:85:67:69:08:ce:21:45:3e:7d:97:d7:bb:06:d6:7f:d9:
96:00:72:8e:ee:2c:85:a0:c6:ff:06:f6:52:ee:67:05:9b:0c:
18:3b:db:76:2e:af:6e:2b:b8:8b:cd:df:7c:b8:89:08:8c:6a:
a9:ce:ad:0a:02:06:9a:da:db:42:e0:66:5d:e4:67:44:24:17:
32:12:b9:1e:26:69:27:94:33:fa:11:5f:3b:6c:12:ae:d3:eb:
94:a4:c0:80:ab:3b:3b:ee:2d:ba:a6:f6:27:19:c0:ce:bf:49:
34:ac:86:c4:20:26:f6:91:71:7c:61:a4:7a:61:a6:1a:fe:48:
96:f8:fa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:12 2026 by rpki-client