Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: RJcJyi14HPJvEXzn8R5MpXjLdDJR+4MfZbCQ8SC+NH0=
Subject key identifier: 08:5B:84:72:C5:0A:47:AD:45:A1:59:CA:4B:5D:24:FC:F5:3D:43:D8
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019EC0A3F32E3718493F80B123AC679FE64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 0A49
Signing time: Sat 13 Jun 2026 11:00:30 +0000
Manifest this update: Sat 13 Jun 2026 11:00:30 +0000
Manifest next update: Sun 14 Jun 2026 11:00:30 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: U2uc0ygh4H6YgfMFwyfEN3bC3ukRWXPba/oZYKlIArc=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
4: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
5: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:f3:2e:37:18:49:3f:80:b1:23:ac:67:9f:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Jun 13 11:00:30 2026 GMT
Not After : Jun 14 11:00:30 2026 GMT
Subject: CN=085b8472c50a47ad45a159ca4b5d24fcf53d43d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:bb:f2:ad:50:b5:7e:67:a3:fb:91:bf:6b:
67:1e:d1:fa:09:ca:3b:65:bd:7e:0c:1c:d3:43:70:
77:d9:5b:d0:fc:85:cd:02:da:95:65:e1:a3:3f:d5:
07:2e:7d:16:c6:d6:6d:91:d1:54:fe:a9:97:63:4a:
44:04:53:b0:16:63:66:13:a3:10:55:20:47:08:fc:
6e:e3:05:04:43:d6:0f:e3:29:61:91:9f:44:52:02:
bc:3c:be:cb:23:79:0f:b0:24:64:21:6d:1b:40:0c:
ec:56:dd:50:3a:d2:32:44:6c:d8:3a:dc:af:cf:64:
43:19:19:54:76:4c:c2:18:de:43:15:6b:51:71:bc:
62:06:4f:19:ef:ee:99:4b:cd:ca:ad:fe:0a:ec:02:
02:14:fb:9f:07:ff:a3:01:63:1b:59:f5:29:8b:f3:
30:b1:16:42:13:ca:1e:38:4f:20:e8:63:e2:03:32:
94:09:9a:46:37:5f:21:91:9e:3f:da:c9:7b:b3:e3:
56:cc:c5:0b:77:df:df:0a:46:88:11:9d:0b:bf:54:
24:85:72:f8:f9:2f:cf:ee:ad:20:4d:e3:37:95:5f:
5b:86:31:97:5a:0c:53:3d:f7:11:76:3e:e2:c1:d8:
f5:20:01:63:f6:40:97:64:02:23:c0:d5:27:b2:60:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:84:72:C5:0A:47:AD:45:A1:59:CA:4B:5D:24:FC:F5:3D:43:D8
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:94:02:46:79:ea:57:d7:cb:d8:6c:00:97:59:0d:37:34:
81:48:68:41:44:73:55:da:6e:56:4a:e3:f9:da:0c:8e:3f:14:
85:12:81:44:8f:58:d9:68:0d:5a:e5:8a:fc:b9:23:33:97:83:
7b:1d:ac:84:3f:78:94:27:f3:73:dc:fb:5c:a7:af:57:45:b7:
e2:58:d0:71:29:a3:3c:52:e4:76:54:a5:e6:f1:d5:09:f6:dc:
34:7b:b2:f8:07:be:2f:1c:a7:aa:2c:a1:09:07:86:08:0d:21:
c4:10:f7:57:18:fd:3e:fb:6e:76:1f:92:cd:91:98:7a:c2:bc:
2a:bc:75:24:56:7a:4d:fc:d0:cb:2b:84:6c:0a:ef:38:05:17:
9a:aa:c2:d2:1a:72:b5:fd:fc:96:8a:d8:2e:1d:91:66:d9:65:
10:d5:8e:1a:ee:93:41:f5:87:19:a6:83:69:4f:b9:1d:b6:84:
5a:e9:cd:13:e6:53:73:4c:02:e7:2a:b0:c2:c5:51:a1:4b:e3:
70:ee:b6:72:3a:54:af:45:fe:ed:c7:32:ce:7b:3b:14:f7:8b:
e1:12:03:ce:be:6d:d5:81:8e:32:35:f8:7c:d8:51:ce:95:a7:
c4:f9:7d:99:69:74:de:2b:53:94:7d:28:c3:1e:22:e4:c4:9d:
af:cd:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:52 2026 by rpki-client