Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: g8eUbZ4xWCEgq9M9Aq46sX+fmFWdGbApOM9TQqIxei0=
Subject key identifier: C9:B0:91:02:A2:EE:1D:51:93:49:65:B9:04:30:63:E9:46:1A:2A:6C
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019EBEED66321832F0D1C019E53FE5D2C638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 03:01:29 +0000
Manifest this update: Sat 13 Jun 2026 03:01:29 +0000
Manifest next update: Sun 14 Jun 2026 03:01:29 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: /8arffRqtvbmmPQI93F9vkWCmGgV+KEzlDpQpdjmtIA=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:66:32:18:32:f0:d1:c0:19:e5:3f:e5:d2:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 13 03:01:29 2026 GMT
Not After : Jun 14 03:01:29 2026 GMT
Subject: CN=c9b09102a2ee1d51934965b9043063e9461a2a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:02:39:bd:51:8b:23:92:08:7e:aa:d7:06:
20:7a:a1:45:48:50:1e:63:85:2c:a5:d2:fb:68:03:
4d:ba:5f:88:f2:a4:24:53:65:a9:02:26:f4:7e:d0:
5b:28:cb:2d:fa:2c:e4:2a:49:80:65:2d:cf:5f:c9:
f3:7e:f3:5c:0d:9b:09:63:e1:d0:2c:13:f3:58:09:
5e:73:ff:52:cc:ba:ce:8f:8f:27:12:d8:02:1c:ec:
77:f0:d3:7e:02:18:03:be:73:b5:44:93:e8:a0:7f:
1a:5c:5f:c0:5f:80:5d:1d:6e:19:d7:1a:a4:f0:a5:
24:13:ba:a7:40:05:01:61:21:6d:84:e6:35:ce:26:
a0:51:4a:b8:ab:fe:9c:9f:25:46:c4:6c:7d:5d:2c:
94:de:11:65:0b:fb:96:cc:3e:a5:72:6f:3f:9b:7b:
e8:71:ba:bf:e3:ad:17:05:b4:3a:5f:b7:b2:23:12:
ba:5e:8e:84:c4:6f:5a:5f:67:ea:ed:36:0d:0a:5d:
c8:d0:3e:60:81:d2:95:50:57:88:9e:81:f4:15:7e:
ff:19:95:5a:c3:7d:a3:c6:e3:4c:c0:e4:ec:d8:94:
31:92:7a:f8:8b:6d:e7:ea:74:6f:73:18:da:c3:38:
3f:c5:8d:da:42:bb:3b:a8:c8:a8:57:a9:44:cb:3c:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:91:02:A2:EE:1D:51:93:49:65:B9:04:30:63:E9:46:1A:2A:6C
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:46:a9:27:51:3a:98:02:9a:0d:d2:ab:7c:d3:55:10:c6:75:
b1:41:4f:03:7a:d5:60:50:50:b2:c6:ad:02:5c:19:b5:70:34:
8e:94:b9:8e:7a:2b:f3:03:5c:41:6c:82:25:1c:a4:e5:7f:a0:
61:e9:18:7f:16:5d:4a:10:ac:6a:7b:c0:47:e6:9b:de:3a:cf:
a7:48:77:aa:4f:46:da:e1:79:e0:78:8d:62:d3:d2:28:1f:a0:
96:6e:76:ab:4c:de:5c:59:8c:13:39:7f:a2:e1:a0:8b:5a:1f:
89:8b:7f:94:2c:1f:23:59:56:6d:f2:9d:32:ee:2c:25:12:23:
37:d7:10:cb:af:a2:1c:d8:6d:a2:d1:47:b1:5a:91:d1:27:06:
23:46:af:ad:d8:d7:5d:92:c9:13:e8:b4:e0:2a:e1:7f:8f:f9:
ec:53:ca:4e:23:3d:bb:18:62:c2:13:93:4f:90:6a:ef:5c:90:
c3:c0:9e:2b:83:c6:e9:30:37:fd:d6:03:01:70:71:48:64:ee:
8f:db:3b:dc:28:95:3f:03:58:df:42:57:f2:22:f7:d4:9f:3e:
d9:77:59:dc:b0:e1:80:fb:a5:ed:04:c8:fd:b8:82:d2:6c:5e:
04:56:c6:9c:db:df:4a:ae:91:0a:50:08:16:fc:3a:12:23:7c:
cd:ad:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:34 2026 by rpki-client