Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
File: CQKHJW4l-jQNOvungOrGDVVq3sA.mft (raw, json)
Hash identifier: OFMDqXUAT23Uv+JvCx1Left+NPPnv5hneUuhIoX4Gos=
Subject key identifier: 77:38:1C:AF:D5:84:E9:8B:1C:39:8C:44:4F:C5:83:8F:21:27:AC:09
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 01A0C1E89D0B6648A3E8907457871097ACEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
Manifest number: 0D81
Signing time: Mon 21 Sep 2026 03:00:42 +0000
Manifest this update: Mon 21 Sep 2026 03:00:42 +0000
Manifest next update: Tue 22 Sep 2026 03:00:42 +0000
Files and hashes: 1: 4TWnkEehYGPz8S3MxMCECSR21Hk.roa (hash: n3+/E4ft5KJ8lIw6jVs8x5Mt/ftJJPREMORWJ+SrYKM=)
2: CQKHJW4l-jQNOvungOrGDVVq3sA.crl (hash: qUJM/HTVrUHag4SO+9hM4VM8vDnpas7pc5AsjWfVv8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:9d:0b:66:48:a3:e8:90:74:57:87:10:97:ac:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Sep 21 03:00:42 2026 GMT
Not After : Sep 22 03:00:42 2026 GMT
Subject: CN=77381cafd584e98b1c398c444fc5838f2127ac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:79:78:a1:ad:22:94:02:61:08:eb:48:7a:
1b:43:19:cb:89:51:b6:a7:8d:fd:66:0f:09:20:e4:
ac:09:7b:09:76:b1:90:9b:32:cf:2a:52:a0:2e:9c:
b7:cb:56:99:b1:f4:fa:53:58:08:79:d6:db:48:de:
fd:06:32:d9:d0:09:e3:89:d7:14:34:5b:71:b3:3d:
b5:d7:1b:81:a2:4d:e1:a3:50:90:00:32:3f:85:8e:
53:3e:3c:5e:ce:f5:61:d8:b4:c6:fb:64:0e:2f:b7:
71:ad:c6:ba:68:d1:86:7a:f3:4a:d1:10:66:5e:f2:
db:13:13:0c:86:b8:80:af:7c:ee:ad:20:11:35:ba:
bf:2c:e0:95:d8:71:43:ba:b2:42:0f:58:02:f5:57:
e1:5a:ae:c4:25:c8:9d:66:19:41:52:3c:00:2c:d2:
cd:3f:e0:3f:e6:bf:d4:aa:35:5b:80:1b:53:7a:06:
57:d3:62:73:78:2e:3b:70:65:3b:a2:15:b3:b0:c9:
83:f3:68:fb:14:28:08:91:89:1c:0a:74:b9:f6:18:
7c:86:10:f1:ea:0e:12:1e:24:be:21:2a:34:4d:3d:
6d:d2:11:00:c2:5a:a5:4d:90:ab:bd:ad:71:c2:e6:
92:c4:99:02:03:30:57:9b:32:e2:fa:6f:d0:84:8d:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:1C:AF:D5:84:E9:8B:1C:39:8C:44:4F:C5:83:8F:21:27:AC:09
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:9c:77:40:40:58:3a:8f:9e:37:84:1d:17:62:e8:6c:76:
e0:e7:e3:76:37:d5:85:36:9f:98:e2:79:60:15:1e:df:ea:0b:
7a:41:be:fa:5e:71:5e:4a:3c:24:00:69:d8:d9:04:3d:aa:c9:
cf:60:fe:f5:a2:32:fc:3b:a2:31:d9:96:1c:40:3d:87:c1:bd:
60:58:06:f2:32:21:2e:0b:65:e4:3c:c0:27:49:a2:67:fd:f7:
42:b6:13:53:1e:ff:cc:38:7a:3b:96:e4:36:87:c7:93:c7:6e:
67:38:14:20:88:f2:14:7f:9e:7f:d1:09:63:22:f5:6c:15:e4:
b7:12:e3:37:53:d6:1d:e4:4e:d8:0a:45:e3:2b:35:1a:32:06:
2a:44:7f:c2:fc:e6:53:42:f9:bc:09:21:90:ba:19:84:99:c6:
15:df:cb:80:0e:5a:f7:52:59:46:f8:12:4f:b6:37:3b:37:92:
c4:7f:a2:8f:8f:c7:cc:73:1b:63:bc:a8:ea:e2:fd:93:0b:35:
8c:bc:a5:72:f8:e9:fd:ba:44:eb:fc:8d:dd:ed:45:46:9b:e2:
a5:b6:c0:42:52:99:f1:38:7c:b3:ca:fe:30:07:92:94:f0:a9:
fe:94:67:12:47:2b:f2:25:87:8e:d9:18:df:7c:51:78:50:03:
35:59:17:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6J0LZkij6JB0V4cQl6zqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDI4NzI1NmUyNWZhMzQwZDNhZmJhNzgwZWFjNjBkNTU2
YWRlYzAwHhcNMjYwOTIxMDMwMDQyWhcNMjYwOTIyMDMwMDQyWjAzMTEwLwYDVQQD
Eyg3NzM4MWNhZmQ1ODRlOThiMWMzOThjNDQ0ZmM1ODM4ZjIxMjdhYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Od5eKGtIpQCYQjrSHobQxnLiVG2
p439Zg8JIOSsCXsJdrGQmzLPKlKgLpy3y1aZsfT6U1gIedbbSN79BjLZ0AnjidcU
NFtxsz211xuBok3ho1CQADI/hY5TPjxezvVh2LTG+2QOL7dxrca6aNGGevNK0RBm
XvLbExMMhriAr3zurSARNbq/LOCV2HFDurJCD1gC9VfhWq7EJcidZhlBUjwALNLN
P+A/5r/UqjVbgBtTegZX02JzeC47cGU7ohWzsMmD82j7FCgIkYkcCnS59hh8hhDx
6g4SHiS+ISo0TT1t0hEAwlqlTZCrva1xwuaSxJkCAzBXmzLi+m/QhI2sRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc4HK/VhOmLHDmMRE/Fg48hJ6wJMB8GA1UdIwQY
MBaAFAkChyVuJfo0DTr7p4Dqxg1Vat7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWIt
NzdiMjFjMDRiYzdkLzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWItNzdiMjFjMDRiYzdk
LzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifScd0BA
WDqPnjeEHRdi6Gx24OfjdjfVhTafmOJ5YBUe3+oLekG++l5xXko8JABp2NkEParJ
z2D+9aIy/DuiMdmWHEA9h8G9YFgG8jIhLgtl5DzAJ0miZ/33QrYTUx7/zDh6O5bk
NofHk8duZzgUIIjyFH+ef9EJYyL1bBXktxLjN1PWHeRO2ApF4ys1GjIGKkR/wvzm
U0L5vAkhkLoZhJnGFd/LgA5a91JZRvgST7Y3OzeSxH+ij4/HzHMbY7yo6uL9kws1
jLylcvjp/bpE6/yN3e1FRpvipbbAQlKZ8Th8s8r+MAeSlPCp/pRnEkcr8iWHjtkY
33xReFADNVkXcg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:15:36 2026 by rpki-client