Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
File: CQKHJW4l-jQNOvungOrGDVVq3sA.mft (raw, json)
Hash identifier: LKB8l40yySZqRkg71RHUtto8+jGVMT7Gtj1EzdMO924=
Subject key identifier: 3A:E3:91:F0:CC:8A:EB:10:0A:A8:8D:C4:E9:F1:97:00:DA:15:43:F4
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 019FA9E2D2295FFD8BAEC8BE2E2EA63B75EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
Manifest number: 0CF0
Signing time: Tue 28 Jul 2026 18:00:42 +0000
Manifest this update: Tue 28 Jul 2026 18:00:42 +0000
Manifest next update: Wed 29 Jul 2026 18:00:42 +0000
Files and hashes: 1: 4TWnkEehYGPz8S3MxMCECSR21Hk.roa (hash: n3+/E4ft5KJ8lIw6jVs8x5Mt/ftJJPREMORWJ+SrYKM=)
2: CQKHJW4l-jQNOvungOrGDVVq3sA.crl (hash: jLNhzn0JBRnrFMdVGjHs1eqAgT9ekw29w7dPp6JXyx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d2:29:5f:fd:8b:ae:c8:be:2e:2e:a6:3b:75:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Jul 28 18:00:42 2026 GMT
Not After : Jul 29 18:00:42 2026 GMT
Subject: CN=3ae391f0cc8aeb100aa88dc4e9f19700da1543f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:6f:e4:49:84:b4:f0:5a:27:b7:6e:43:56:
88:0a:d2:c0:62:e1:3d:04:00:f0:64:e6:b0:54:61:
19:26:fa:82:cc:b9:b0:ea:87:e1:74:1d:52:1f:11:
c8:5a:e0:57:f0:c6:25:ba:7a:26:97:98:d7:09:41:
38:c6:3b:d9:c6:b0:f1:87:64:0f:02:9d:5e:ad:0c:
c5:a3:50:df:16:c5:c0:78:a7:1e:46:d5:52:37:b2:
89:14:da:20:92:28:9f:ff:6d:9d:ac:07:93:01:ea:
03:e5:0c:37:77:f9:50:c2:a1:0c:40:17:29:55:af:
69:18:4a:ea:6a:06:b6:bb:c1:f4:db:35:6d:ed:d2:
7e:df:f8:9e:1d:dd:54:d9:78:51:92:d4:db:23:fd:
fb:09:52:3d:55:a2:14:54:07:4e:52:7e:c1:6d:40:
42:df:68:64:8d:9d:4a:a2:05:c1:3a:81:66:47:79:
ef:b8:2e:35:d8:dc:9a:7d:a5:6b:69:76:c9:de:bb:
35:eb:e0:cd:5a:9f:7e:ec:94:ed:6b:61:8b:65:30:
95:a0:2c:16:97:be:b6:c7:b6:15:18:26:df:35:f7:
9a:4f:8d:c0:4a:aa:4a:30:c0:23:75:4e:78:46:b3:
aa:fc:83:4f:31:9f:22:e3:29:c1:f2:65:66:95:8f:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:91:F0:CC:8A:EB:10:0A:A8:8D:C4:E9:F1:97:00:DA:15:43:F4
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ef:8e:b5:ae:05:87:27:71:a0:cf:7b:b8:00:d7:71:a1:44:
40:cb:85:ce:ea:26:59:1f:dd:e8:04:2c:d3:45:f2:c5:7d:3d:
49:1f:38:fa:f6:b3:68:da:af:17:4f:e5:23:ae:55:51:41:ae:
7f:f5:47:01:24:2d:54:30:09:c9:ea:31:91:da:d5:6b:1b:9c:
b2:a8:0a:71:46:e5:52:b0:09:7f:fa:e9:c4:e8:29:17:0f:c8:
a9:f2:1f:4b:1f:aa:b9:69:78:63:20:c8:0e:5e:f2:f2:bc:bd:
80:cf:9a:dc:ca:59:e3:1d:77:b4:68:69:6b:0e:b9:8f:8f:a1:
1d:af:1e:20:d7:d0:fb:03:ce:c1:70:98:27:ab:ce:14:de:24:
a6:35:51:d9:74:f8:c2:fc:f1:2e:d8:c9:4b:b7:69:52:d7:ed:
80:00:e8:f0:04:24:60:47:28:36:7a:19:fb:ab:be:52:60:f8:
98:61:c1:c4:62:7a:4b:f1:fa:61:61:cd:b6:1d:29:66:b7:3e:
ab:b3:ba:75:ee:ae:fe:26:ff:6d:66:98:76:87:cc:77:87:33:
91:43:ab:2a:d1:21:40:90:4e:31:e9:b6:01:44:a9:3a:80:17:
f3:2f:c1:31:3f:e8:fa:e0:01:fd:2a:21:92:79:63:4a:ee:2b:
7d:3f:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:15 2026 by rpki-client