Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: EL1/btX1uJug26fRxc7u7vva/UNrZZNrm0Lp5s7XXVA=
Subject key identifier: 86:B2:05:2F:87:AB:6D:05:DD:A4:F5:ED:70:DB:21:62:25:7D:31:2F
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019FAA878777DBC161998018DB43271DCC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:00:36 +0000
Manifest this update: Tue 28 Jul 2026 21:00:36 +0000
Manifest next update: Wed 29 Jul 2026 21:00:36 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: vUexVwUESclK80KrodrlEU5bA+tAqdTuUJnzhITjxM0=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:87:77:db:c1:61:99:80:18:db:43:27:1d:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jul 28 21:00:36 2026 GMT
Not After : Jul 29 21:00:36 2026 GMT
Subject: CN=86b2052f87ab6d05dda4f5ed70db2162257d312f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:34:b6:09:2a:25:3a:66:a9:15:21:7c:e8:
ec:50:d9:fe:f7:66:3c:9a:f9:70:74:9a:fb:0d:32:
66:bb:80:75:fa:78:78:08:95:6e:17:38:06:44:94:
e2:f5:a0:b4:95:bf:3d:f2:2d:30:e5:2e:41:23:e8:
84:ab:71:6e:3a:a7:90:a2:6c:32:0b:1a:a8:a9:55:
df:c5:ee:05:4d:25:9e:b0:82:7d:f5:35:d5:58:f3:
be:9c:2e:92:23:5d:25:cc:1c:d6:32:76:48:c6:90:
f0:11:b6:27:20:25:97:e1:0e:cd:3a:bb:66:cf:3e:
31:55:73:3b:45:13:74:96:b3:b6:4c:fc:d9:38:9e:
82:8f:55:17:09:73:31:bd:c0:d6:03:9d:1b:db:be:
b9:5f:e9:e0:66:51:12:a9:e9:49:2a:ec:ed:5d:22:
6e:ac:7b:dd:11:29:84:ab:19:29:12:82:fc:71:dd:
71:9e:06:09:12:ab:65:48:fa:d6:73:b7:71:a5:af:
62:45:0b:e3:34:af:0a:99:2d:2b:b2:a5:d2:d3:dd:
be:cb:0c:fc:a4:ee:9b:10:d4:71:c9:c3:a6:63:51:
13:3e:5c:ed:ed:36:cb:08:59:b8:29:40:11:7b:e5:
84:9d:1c:11:e0:3e:35:6d:d9:d5:08:eb:a8:01:76:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B2:05:2F:87:AB:6D:05:DD:A4:F5:ED:70:DB:21:62:25:7D:31:2F
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0e:16:22:1b:1c:ed:85:fa:10:20:66:12:1e:a1:a6:6d:9c:
38:8f:5d:23:5e:51:4c:45:05:23:ba:59:35:2b:c5:fa:c8:8f:
b1:3c:96:07:d1:79:f0:ab:99:19:73:c4:eb:bc:5d:76:f0:e7:
da:8b:8c:1c:b3:be:1b:49:e9:af:02:a6:15:35:82:29:36:f1:
b3:c4:2f:ec:07:07:23:e0:d7:af:77:6d:5d:ef:91:87:09:47:
17:d6:3e:a4:0f:05:4b:73:1c:51:af:a7:e9:b8:75:88:c9:da:
38:70:56:a0:f0:42:85:55:46:df:60:03:f1:12:e8:3d:1b:3e:
68:59:c2:29:05:a5:bc:be:5c:0e:62:f1:45:1a:df:e4:bf:6e:
55:6b:01:45:18:c2:85:53:17:97:69:ef:65:70:9b:3e:e2:f1:
ec:6b:33:b4:84:cd:de:8f:8d:e2:1f:cc:f2:3d:e0:70:8a:32:
16:4c:d6:73:54:3e:9f:7e:fa:01:54:df:24:a3:68:80:b0:ae:
ca:46:47:de:cb:2d:1a:d5:7f:0c:c2:37:89:3a:e5:5b:c9:95:
e2:2c:42:56:5a:15:e8:c6:7a:dc:fe:6d:14:43:5a:4a:5c:12:
7c:0d:9b:cd:d5:a9:fd:a7:28:3c:49:11:59:c9:57:79:9d:ac:
ce:3d:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:09:57 2026 by rpki-client