Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: f5zF+zS/am2lx+1DvpZaD+T4pwCOZ+hSGNAfvaYHYyg=
Subject key identifier: 20:2B:F2:52:12:34:3E:DB:90:AF:84:40:FE:F2:A0:0C:33:FC:08:D0
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019D9B5051C87A443E26D489ADCC22DBBC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:00:25 +0000
Manifest this update: Fri 17 Apr 2026 12:00:25 +0000
Manifest next update: Sat 18 Apr 2026 12:00:25 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: 9l6k9FquYWyhIq9N1zhVAjVrKm1r5IlqUW5wsCKdY4s=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:51:c8:7a:44:3e:26:d4:89:ad:cc:22:db:bc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Apr 17 12:00:25 2026 GMT
Not After : Apr 18 12:00:25 2026 GMT
Subject: CN=202bf25212343edb90af8440fef2a00c33fc08d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:49:91:33:71:45:a0:eb:6d:42:4c:97:3f:
2d:53:d7:e5:f8:1e:74:2c:45:e8:5d:e2:a7:bc:e7:
6d:51:7c:56:9f:d0:da:75:0a:23:25:1e:ad:6d:da:
69:c1:71:60:b5:19:bf:7a:5c:a7:43:02:a3:4f:89:
db:6b:bb:fd:17:11:9d:60:97:3d:02:64:34:8c:b0:
52:15:a9:2c:9d:ef:63:92:3c:65:76:a4:e5:0b:ae:
9c:fc:91:4d:3e:9e:e1:5f:59:74:34:46:aa:14:d5:
b7:3b:de:76:be:6e:89:38:1a:50:68:f9:1d:6e:d4:
77:2a:36:95:d5:8e:97:c8:94:6d:ad:82:5a:13:23:
e1:86:d1:9b:ca:e6:08:a8:9c:8e:ac:a1:0c:2a:d4:
cf:61:d2:69:5b:d2:1f:ff:9a:e9:77:61:84:0b:ba:
8f:5c:05:50:5a:82:6c:b9:ca:cb:03:28:1a:7d:a8:
0c:c2:ba:7e:28:ba:8c:24:8d:57:b0:54:0f:28:e1:
04:04:6d:e2:94:bc:1d:f5:2a:92:27:3f:c3:c7:67:
9a:72:5a:4d:ae:28:69:40:91:38:d1:b1:61:25:6a:
96:e7:df:f4:d4:b2:fc:45:71:b4:d2:21:4c:e6:80:
a0:8e:9b:7b:85:51:9c:2f:33:20:ad:35:1d:60:a7:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2B:F2:52:12:34:3E:DB:90:AF:84:40:FE:F2:A0:0C:33:FC:08:D0
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:14:23:e7:c7:0c:a2:ed:4e:df:91:f3:2a:45:d7:7c:8e:d9:
ea:49:60:c0:c5:dd:9c:db:fe:d7:52:77:75:13:55:f3:68:ff:
fe:90:1c:85:c4:72:9d:8b:0b:46:46:19:99:4d:a8:14:d7:1a:
1d:76:ca:b5:37:95:be:bc:08:29:08:36:8d:1f:90:83:f5:d3:
3a:b6:de:b5:3d:67:5f:24:40:49:9b:0d:45:1a:19:33:dc:ae:
e7:b3:cc:47:38:7c:6c:6b:b0:4b:80:81:6c:5f:a0:22:32:59:
ce:97:9e:b7:fc:d9:66:ef:07:42:b9:fa:dd:48:20:96:eb:4e:
10:af:af:f5:91:41:89:94:12:98:fc:f7:5b:1f:78:f9:1b:44:
b5:31:8a:8e:c5:fe:4e:a0:67:b4:6d:d2:68:0a:02:d6:80:0f:
cc:cc:7a:bb:73:f9:02:e1:cb:a4:08:dc:67:5f:58:53:e0:7e:
ee:d9:7b:11:7b:78:f2:fb:0f:61:6e:5f:96:33:f9:46:43:d1:
94:37:5f:dd:d0:c9:96:c7:ba:61:10:92:8a:d1:76:b3:11:57:
8e:f2:dc:42:3a:bc:e7:a0:be:8c:e4:a4:e0:5f:50:c2:94:56:
39:c8:96:f8:3e:2b:8d:bd:d0:03:c4:c2:32:c8:6b:1b:e8:41:
97:bf:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:19 2026 by rpki-client