Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: pysPMDXQsNyLLC+daNQh/cxb+9I30WmF7ePByMkT8js=
Subject key identifier: DD:92:34:B3:1D:44:69:58:B2:7B:9B:4B:C8:94:98:2E:70:68:F7:95
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019FAA50A0AAECAD70052F4E7AB6EA7D81DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 0AC2
Signing time: Tue 28 Jul 2026 20:00:38 +0000
Manifest this update: Tue 28 Jul 2026 20:00:38 +0000
Manifest next update: Wed 29 Jul 2026 20:00:38 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: QekBlVKr0O/zzVT3vz2ZYHmgOAzAT9yST59/nOF7AU0=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
4: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
5: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a0:aa:ec:ad:70:05:2f:4e:7a:b6:ea:7d:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Jul 28 20:00:38 2026 GMT
Not After : Jul 29 20:00:38 2026 GMT
Subject: CN=dd9234b31d446958b27b9b4bc894982e7068f795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:8f:a5:d6:7a:22:5a:fd:24:37:14:f8:ca:
a9:b1:27:4d:da:31:bc:fb:8e:bc:21:8b:ef:38:eb:
b6:17:9b:ee:88:85:bf:c1:ab:64:c7:ee:06:dc:79:
60:15:ca:03:73:72:cf:78:03:8e:c9:86:9a:f3:89:
4a:b5:9d:1a:76:5c:f2:58:d8:5b:74:c5:61:7c:62:
e2:23:6e:d5:31:92:83:3a:ed:5d:38:a8:8a:3d:58:
8a:18:83:52:89:07:d9:71:0c:fd:05:f3:00:e5:fd:
b1:b3:03:16:50:8d:4b:34:34:64:c6:0c:1e:c7:7a:
0f:51:a5:c0:32:b2:9f:7a:d4:af:14:a2:74:8b:a5:
06:49:96:2f:6e:35:fe:e8:8d:fb:d4:7b:b8:88:71:
f0:a3:bd:67:7f:f1:47:ce:31:d2:42:a5:9d:77:bb:
c9:99:06:ca:76:2e:88:ea:8e:e4:9c:a1:92:57:00:
d0:d2:d1:ad:96:52:38:48:ec:8e:9b:7b:39:d9:34:
e0:25:49:09:3f:6b:28:eb:8f:36:e6:09:2d:65:57:
eb:41:e6:86:3a:d6:33:0c:24:32:9a:21:dd:69:a0:
15:8b:a2:18:26:c8:24:30:60:0d:fc:ae:a7:4d:79:
2a:59:13:51:b8:0a:fa:6a:9b:7e:84:d4:da:08:b7:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:34:B3:1D:44:69:58:B2:7B:9B:4B:C8:94:98:2E:70:68:F7:95
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f4:be:86:b9:80:5a:74:1b:36:17:4b:bc:c2:4c:c3:70:4c:
82:4b:52:d2:7b:87:8d:b7:96:6e:19:a3:f4:f0:4e:6b:ab:bc:
fe:71:d5:91:5c:e3:f4:d2:8a:38:3c:77:6c:82:26:1d:96:bf:
ec:d0:0e:a0:e5:1e:1c:63:03:2c:a0:65:a8:f5:72:0e:7f:ed:
bd:c2:be:1e:90:52:d6:03:3f:fa:2e:cb:8f:a9:da:70:29:e7:
39:b8:db:62:31:2a:b6:68:c5:37:ec:81:d5:83:71:0e:39:d7:
66:e3:d6:64:13:f4:69:5b:87:10:8e:13:46:44:87:af:ac:cf:
a9:5d:83:fd:90:28:55:ec:71:d1:74:f2:a4:f9:a1:65:34:09:
06:0b:f5:c3:8e:51:31:18:af:fd:f8:44:fe:8e:43:18:88:c4:
e9:49:b7:91:6f:8d:f8:59:11:be:28:3d:6a:3c:6b:a0:2e:5c:
c4:fb:d1:8c:d0:d0:d2:da:61:c2:e7:65:28:ed:d8:6b:ba:4b:
c9:06:d2:bf:f9:6a:86:ec:ce:a7:67:94:91:4e:21:34:11:50:
f8:d6:d9:f4:c7:85:25:07:57:ff:e7:62:df:05:de:77:38:ab:
c4:0b:8c:10:c1:30:21:fe:2b:dc:72:f4:fa:74:66:09:3d:7f:
5e:65:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:24 2026 by rpki-client