Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: G9bmZNPcjYC9AARI2O9ydfNFDUrqPHgyoyLd3UH82NM=
Subject key identifier: C4:2B:7B:36:62:74:12:1B:5C:61:2D:27:49:D8:AF:A9:BA:51:3D:65
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01A1DE714D0282073977B6816846EEA17C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 09:02:09 +0000
Manifest this update: Sun 15 Nov 2026 09:02:09 +0000
Manifest next update: Mon 16 Nov 2026 09:02:09 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: BBqBnxd/bOLB7VpeFhMc/1SDFVdOjjU+N1ndGr8Ryh4=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:4d:02:82:07:39:77:b6:81:68:46:ee:a1:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Nov 15 09:02:09 2026 GMT
Not After : Nov 16 09:02:09 2026 GMT
Subject: CN=c42b7b366274121b5c612d2749d8afa9ba513d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:93:2c:e4:da:3a:f8:98:81:6c:1f:de:86:ea:
62:d4:c1:52:25:49:05:5e:f3:73:8f:89:7d:52:78:
ec:ac:f7:90:de:e7:5a:83:1d:ff:56:4b:d5:99:af:
eb:f2:98:03:b5:af:40:da:41:5a:00:0a:01:57:81:
65:98:37:1f:fa:ff:1d:a1:c8:38:db:29:a0:67:8e:
8a:76:7d:cd:8e:37:9c:a4:de:ab:e2:c7:62:d2:e2:
f6:d3:d7:93:4b:5e:73:cf:68:a7:bc:5f:24:b6:08:
96:e8:14:85:6e:41:b8:41:36:1a:4d:d9:ea:39:4c:
a7:38:34:f1:26:1b:b7:a4:e2:de:5b:9f:4f:db:bf:
95:3e:85:a3:81:ec:c4:30:0d:a6:b7:fb:f4:c7:d9:
11:21:91:ba:8d:71:f4:09:91:d9:03:db:03:9a:6c:
e9:d2:46:a6:41:77:84:94:53:40:79:8e:f8:4f:79:
da:f0:df:5b:83:92:14:67:eb:3f:8a:2e:53:ee:fc:
44:cb:2f:40:c7:a3:3f:65:e5:24:d5:e1:a2:b5:ba:
0e:27:30:aa:81:bf:42:42:c3:7c:9d:ad:65:84:17:
d4:bc:4a:74:4a:50:fa:ff:8c:e0:ee:98:5d:a2:a4:
07:7c:cb:87:4f:da:4f:93:87:e3:2c:c1:95:49:02:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2B:7B:36:62:74:12:1B:5C:61:2D:27:49:D8:AF:A9:BA:51:3D:65
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:d1:61:37:c8:84:5d:d6:17:09:6e:3d:9e:d1:57:3e:58:
06:d3:3f:24:f6:3d:c3:01:80:3c:ff:73:60:ee:71:fb:db:7a:
ad:e7:54:3a:80:c6:f9:22:48:d5:90:a9:cb:d9:90:18:33:bf:
8f:59:f7:f6:ed:ca:62:ed:ed:3a:f8:59:e5:07:a0:30:71:4a:
44:b8:63:35:4c:71:7d:28:2b:53:fe:10:d2:fe:0e:62:e6:96:
74:d3:59:9b:f9:e3:7d:47:83:4e:38:43:31:e8:6e:bb:b6:94:
a8:3a:1a:92:ad:89:ef:12:d5:75:81:4a:c1:d7:08:7c:62:e3:
39:db:92:d3:97:15:1d:d2:9e:ca:a4:69:ba:f8:e4:8b:d8:96:
0d:c1:88:23:1a:94:fc:be:c8:03:98:2d:d5:47:4e:72:7b:32:
be:99:ac:c1:b4:0c:38:84:24:b4:7f:78:a2:62:85:0f:0c:af:
eb:bb:16:79:30:e8:99:cd:e8:5b:07:a2:69:c5:91:4f:20:42:
78:94:89:40:4c:82:af:72:b2:06:42:67:11:ef:d0:bc:ff:cc:
0b:b6:b0:f7:82:8c:63:5a:6d:7e:c3:80:10:87:88:5b:11:5f:
34:4c:8e:0d:ae:ee:26:49:63:ad:38:6e:56:c9:2f:b1:98:74:
9f:60:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:32:05 2026 by rpki-client