Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: AFuuHvAetFulvxN1dwyWiGhk8SbCzxfaU1wU6ug42CA=
Subject key identifier: 77:82:42:C4:60:51:82:9C:30:72:1B:FF:D6:95:B4:27:AD:0D:B2:80
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01A0CA47B7A7D5FA900A7D38C8CE92849812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 18:01:32 +0000
Manifest this update: Tue 22 Sep 2026 18:01:32 +0000
Manifest next update: Wed 23 Sep 2026 18:01:32 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: AAQs3HVFnVPQ2c6hLcUUeOQ7I7T96ZQUflkMK7NvkVU=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:b7:a7:d5:fa:90:0a:7d:38:c8:ce:92:84:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Sep 22 18:01:32 2026 GMT
Not After : Sep 23 18:01:32 2026 GMT
Subject: CN=778242c46051829c30721bffd695b427ad0db280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:c9:bb:5c:6b:e8:7e:1a:dd:b4:72:1e:3d:
3b:b0:d4:d0:6b:6f:f0:90:a2:50:3d:6e:38:3a:98:
4a:37:64:9a:7e:4b:47:7c:b3:47:ed:57:60:87:dd:
18:b2:05:24:cf:cf:8b:a8:c4:d4:69:39:21:ce:95:
32:86:e1:1e:2d:be:a3:12:a2:76:74:30:9e:ff:e8:
15:65:bb:27:fb:0d:a8:67:94:b4:4a:63:28:71:9b:
95:ab:73:50:81:90:f8:9f:49:0f:1c:26:e1:c3:e6:
75:af:37:53:ec:ad:fb:9f:20:9f:bf:a4:1c:3c:5f:
dc:03:52:bf:d7:cf:ba:6b:bb:95:c1:8d:49:7c:9f:
f0:75:4b:6b:48:a1:72:5b:68:b4:c7:67:93:c6:ec:
5d:f8:5a:f4:dc:81:bc:8d:4d:5c:5b:0c:73:4b:62:
30:d3:e1:97:cf:58:b2:22:1b:3d:58:93:5c:fc:6d:
61:6e:d2:d4:a5:96:39:1d:25:a2:c0:74:0b:c4:ab:
00:51:37:d3:9a:46:b7:19:12:04:cc:d8:b1:03:ab:
58:d4:7d:a5:65:cd:97:d4:90:6f:8d:dc:29:ec:c5:
cc:0a:6d:86:cb:a8:43:70:a7:0f:1d:2e:51:f2:56:
9b:5b:a4:46:55:a4:b2:c3:2f:14:7f:81:d3:ea:ed:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:42:C4:60:51:82:9C:30:72:1B:FF:D6:95:B4:27:AD:0D:B2:80
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8d:a7:ee:a6:65:5e:89:d8:11:3d:eb:62:e2:f2:d7:6c:a2:
12:b6:f0:ab:b0:67:9f:8a:21:98:f7:56:81:00:12:13:cc:12:
f1:33:e6:42:18:3f:70:d9:d3:9d:46:5d:09:c8:4d:2d:70:fa:
44:9f:44:c4:b2:61:ab:e9:27:9c:ec:99:4b:ee:62:56:0b:1d:
5a:17:ba:4c:19:de:b5:9c:be:f8:d9:24:35:d1:71:4f:74:b0:
15:a0:40:6d:c6:81:83:12:a5:40:b0:51:33:f8:c0:b1:5f:eb:
a6:85:3b:cb:fb:86:de:b6:e9:9e:46:01:91:cc:9f:24:94:14:
48:58:60:09:1b:b3:9f:30:c3:9c:56:1f:0d:4b:3a:5d:bd:4a:
53:04:83:a7:04:0c:15:9c:d2:4c:ec:c8:01:98:b0:5d:3d:f0:
aa:c8:3f:59:43:ce:b8:34:72:54:bd:f0:eb:b4:98:0c:63:23:
44:f1:0f:b0:7e:d1:96:28:b7:17:5e:79:8e:1f:48:0b:6d:7a:
89:35:4c:43:5e:98:b9:2d:07:10:b3:50:02:bc:3d:10:8a:de:
16:f8:fb:d9:f8:33:a2:22:ba:bc:04:49:14:51:2a:e4:af:01:
5b:c0:ac:f0:34:7d:ca:1a:d4:d9:97:83:0f:29:cb:7b:7a:97:
6f:8a:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:57:54 2026 by rpki-client