Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: 2ZBKuTQXFJn2uMvdYE70/FzQD15PTZdz8EJgr+Q9Uuc=
Subject key identifier: BF:A4:F6:2A:6D:82:F4:58:EF:4B:D7:7F:C3:D9:92:56:B3:BE:50:5D
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019D9B1968FF62C00860B62CBDE12F2E9F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 09B1
Signing time: Fri 17 Apr 2026 11:00:26 +0000
Manifest this update: Fri 17 Apr 2026 11:00:26 +0000
Manifest next update: Sat 18 Apr 2026 11:00:26 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: UGH2WP6O5yCpWhsvQWnRt+lwAYIzFEL13kBjXT6ibcM=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
4: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
5: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:68:ff:62:c0:08:60:b6:2c:bd:e1:2f:2e:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Apr 17 11:00:26 2026 GMT
Not After : Apr 18 11:00:26 2026 GMT
Subject: CN=bfa4f62a6d82f458ef4bd77fc3d99256b3be505d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:43:52:cb:3f:e1:ac:dd:b6:92:56:f0:6e:
a6:88:9e:e3:91:71:a5:0d:4d:e8:b2:24:3c:2f:d4:
58:56:4e:06:66:65:a1:e5:92:ea:a8:7d:c0:01:c6:
c7:7a:4a:1c:84:61:02:8b:18:82:89:d4:f2:a7:b2:
7a:b5:8a:80:92:2f:a0:36:ef:1f:1a:75:63:61:18:
2e:bb:29:c4:6d:77:6e:75:72:c3:14:9c:f1:42:cc:
e5:25:64:ba:ec:37:2f:e7:53:8c:dd:fb:08:26:5c:
0c:96:52:94:cd:d0:10:06:cc:df:26:5d:5a:81:6c:
2f:cf:c3:90:96:47:d2:82:fd:fe:4b:27:c0:4f:e2:
66:a2:25:e7:cd:32:60:12:c0:28:df:09:59:a6:0c:
f6:df:4d:38:28:2c:25:f8:02:b4:99:82:d0:d2:c4:
9f:b5:fd:cc:21:84:1a:d4:8f:d7:b7:2a:de:30:08:
a5:69:2e:5c:ae:f0:cf:27:42:85:9a:b6:6f:bc:ac:
2a:a4:60:be:21:45:e5:45:04:4d:93:8c:3a:28:cc:
7f:4f:5d:88:40:19:dc:8e:fb:95:53:a5:64:56:90:
cc:f4:12:58:bc:ca:1f:79:4a:4e:07:d0:90:1b:3c:
48:01:0a:1b:40:6b:55:4d:c8:48:0d:55:d5:2d:2a:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A4:F6:2A:6D:82:F4:58:EF:4B:D7:7F:C3:D9:92:56:B3:BE:50:5D
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:97:b1:16:16:2f:ac:a0:a1:c2:20:43:bd:71:cd:08:51:
ec:de:86:33:37:d1:bf:6e:21:15:26:a7:26:58:19:c3:ce:9e:
96:18:79:e3:18:49:1c:36:bc:e9:3f:fa:be:91:59:e5:28:e4:
90:20:c4:a8:81:16:40:b3:cf:ac:57:e9:8f:54:6a:5f:22:86:
bd:e2:a6:14:af:c4:93:c9:bd:5d:04:3b:0b:ad:26:67:c6:0d:
02:e7:99:9d:51:c9:7b:68:64:76:35:c8:cb:2b:c4:07:a3:3c:
c2:dc:44:fa:21:0b:db:02:67:b8:ab:06:ef:ef:7b:a9:4b:2a:
58:35:13:dd:df:6e:4a:c2:9e:45:0b:40:7e:c4:f9:32:e7:fd:
f9:dc:91:2e:e7:57:52:54:ea:53:62:89:0c:1e:00:3a:78:d6:
0c:26:4a:f0:22:3e:cc:22:dc:c1:ba:db:9e:2a:0b:dc:c5:46:
c3:44:53:df:0d:80:68:dc:7b:e1:b8:99:dd:ac:47:2f:6f:ab:
d1:71:ea:e8:d4:eb:71:c3:9b:2e:34:f8:0a:53:f1:75:31:1b:
d7:52:9a:45:66:d2:67:87:a1:6b:c2:22:bb:1a:a5:76:e9:55:
54:ea:77:10:e3:a0:5d:33:99:a3:81:bd:f3:ab:49:15:55:c4:
14:2d:e6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGWj/YsAIYLYsveEvLp9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx
NGYwYTAwHhcNMjYwNDE3MTEwMDI2WhcNMjYwNDE4MTEwMDI2WjAzMTEwLwYDVQQD
EyhiZmE0ZjYyYTZkODJmNDU4ZWY0YmQ3N2ZjM2Q5OTI1NmIzYmU1MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyZDUss/4azdtpJW8G6miJ7jkXGl
DU3osiQ8L9RYVk4GZmWh5ZLqqH3AAcbHekochGECixiCidTyp7J6tYqAki+gNu8f
GnVjYRguuynEbXdudXLDFJzxQszlJWS67Dcv51OM3fsIJlwMllKUzdAQBszfJl1a
gWwvz8OQlkfSgv3+SyfAT+JmoiXnzTJgEsAo3wlZpgz23004KCwl+AK0mYLQ0sSf
tf3MIYQa1I/XtyreMAilaS5crvDPJ0KFmrZvvKwqpGC+IUXlRQRNk4w6KMx/T12I
QBncjvuVU6VkVpDM9BJYvMofeUpOB9CQGzxIAQobQGtVTchIDVXVLSoq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+k9iptgvRY70vXf8PZklazvlBdMB8GA1UdIwQY
MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt
MzNiZGM3M2VkMGVhLzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh
LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0KXsRYW
L6ygocIgQ71xzQhR7N6GMzfRv24hFSanJlgZw86elhh54xhJHDa86T/6vpFZ5Sjk
kCDEqIEWQLPPrFfpj1RqXyKGveKmFK/Ek8m9XQQ7C60mZ8YNAueZnVHJe2hkdjXI
yyvEB6M8wtxE+iEL2wJnuKsG7+97qUsqWDUT3d9uSsKeRQtAfsT5Muf9+dyRLudX
UlTqU2KJDB4AOnjWDCZK8CI+zCLcwbrbnioL3MVGw0RT3w2AaNx74biZ3axHL2+r
0XHq6NTrccObLjT4ClPxdTEb11KaRWbSZ4eha8IiuxqldulVVOp3EOOgXTOZo4G9
86tJFVXEFC3mfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:14 2026 by rpki-client