Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: ZXpsv8g2MJRMRrjTckaHZmZE0XBgVF3m5OLhBZDRyPI=
Subject key identifier: 42:CB:06:24:CA:2E:F1:35:CB:A8:0A:6D:CB:4B:E8:AE:63:7F:DB:36
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019D9961E284479BAF5A79A526BC011F6F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: 0lWHQ5w7xweqE0s6ve3tHW+QTu1y9QHKVvSt5JOV1u8=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e2:84:47:9b:af:5a:79:a5:26:bc:01:1f:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=42cb0624ca2ef135cba80a6dcb4be8ae637fdb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:7b:ef:99:61:13:60:e9:6e:9b:53:e7:ae:
84:03:a0:b0:34:dd:22:a7:6c:21:3c:f2:13:d3:59:
d4:86:6f:37:10:6e:2c:de:3c:d0:23:23:9c:27:b0:
dd:83:24:60:4e:ed:43:13:55:3e:dd:40:9d:34:92:
9b:d2:cf:4d:6c:b3:e4:f7:db:fc:c8:d7:ec:f4:f5:
c1:fe:57:5c:39:7b:0d:71:c1:59:4d:9e:d3:33:f9:
8d:22:12:3a:b6:44:0f:8f:01:75:fa:ab:b6:cc:4d:
b3:3b:d4:5a:ad:9e:19:65:a2:9a:86:54:c7:01:ea:
f6:f8:13:61:19:4f:8f:8a:0e:49:a0:6a:39:fe:b2:
a5:ec:73:a2:70:89:a5:d6:63:8c:a3:5a:3a:78:be:
fb:c6:10:00:64:93:3c:6b:24:0c:6a:2b:8d:00:e1:
62:68:7b:b7:f0:b2:ed:39:ce:07:e7:df:5b:ab:50:
9c:92:ef:78:29:aa:a8:32:4e:d7:15:f7:eb:cc:17:
3a:61:8d:c7:95:b6:79:71:da:7f:c7:56:ad:b8:82:
bd:f8:e5:fe:24:6f:45:07:6a:9f:d1:17:b3:6b:33:
e9:5d:27:a9:b7:76:c7:0a:13:c0:5f:96:c7:1e:f7:
88:b8:02:92:e8:38:c9:53:2a:87:9d:be:7b:ac:de:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:06:24:CA:2E:F1:35:CB:A8:0A:6D:CB:4B:E8:AE:63:7F:DB:36
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:18:18:9a:08:e1:29:36:88:35:a7:7a:92:b0:f6:8c:19:96:
f5:50:2f:f7:b5:9f:c3:05:bd:c2:55:c4:28:2b:b3:12:53:9f:
26:08:dc:1b:d8:80:74:8b:df:36:d3:9c:1a:91:1c:68:c1:29:
0d:3b:5b:2e:8f:ef:a6:31:dc:74:3a:fb:d7:e9:30:0d:93:61:
67:23:a6:4f:48:ae:45:c0:97:4f:70:44:a4:d1:92:a8:af:4b:
89:2a:11:07:47:1a:d7:e4:5c:f1:cc:3c:8a:fe:4b:10:c2:f0:
c7:b7:7c:10:22:91:5a:1b:9f:50:f5:69:88:1e:f5:9c:fb:1f:
48:9a:b3:d8:ba:e9:d4:ae:5f:03:9d:44:72:37:b8:b4:d6:18:
f8:3a:69:8e:31:95:7c:aa:7f:4e:2f:41:6f:08:d9:bc:5c:83:
36:1d:17:5c:4d:f4:c6:b7:62:b3:84:b8:39:1e:2f:a8:52:49:
26:c6:41:3f:b5:ae:01:e4:8f:c1:8f:bf:88:24:f7:51:4b:7b:
bd:6c:51:eb:6e:5c:a0:48:cc:61:a4:cd:4b:42:9f:74:e0:76:
9b:c9:46:64:9a:31:3c:d0:3d:eb:ab:83:38:45:27:59:b5:a4:
ee:b2:26:6d:ef:a4:11:59:cc:f1:cc:23:12:34:b2:8f:8b:9e:
83:71:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:34 2026 by rpki-client