Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: cyfHbRRY0KJ5LrHIviZBbYlAXKLi1KQmbg4+Sxbxu60=
Subject key identifier: DC:95:B3:54:17:88:D3:D0:F2:46:98:2C:9A:E1:DD:7C:9A:71:E7:3B
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019EC2C9D00CA189FBAEC5A2AAA9E5BD8D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 21:01:06 +0000
Manifest this update: Sat 13 Jun 2026 21:01:06 +0000
Manifest next update: Sun 14 Jun 2026 21:01:06 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: abmn4jYBROHZqCY6IU4Nmcx21w0KgZ4EtRdO/H78+Pg=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:d0:0c:a1:89:fb:ae:c5:a2:aa:a9:e5:bd:8d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Jun 13 21:01:06 2026 GMT
Not After : Jun 14 21:01:06 2026 GMT
Subject: CN=dc95b3541788d3d0f246982c9ae1dd7c9a71e73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:ef:75:30:0a:ef:3e:ad:04:70:cf:44:b4:
b1:94:29:6d:ca:6b:60:3f:f2:52:54:7c:81:32:18:
02:8e:f8:d5:4d:a3:c5:01:be:e0:40:82:d3:61:c1:
e4:ee:b1:18:7e:79:ca:f2:c7:af:68:dd:83:43:83:
75:4f:23:25:09:6f:32:17:76:e7:a7:04:0f:f5:ec:
53:ad:47:c0:6e:2b:1c:37:59:8e:d6:00:49:95:b7:
c4:35:40:fa:fa:b4:a8:93:39:03:77:d2:39:08:db:
55:01:67:bf:be:fe:18:81:c7:8c:7e:60:53:b0:2c:
e5:42:6e:ba:f2:32:a5:2f:1f:82:93:f8:85:c4:83:
fc:23:0b:a7:14:f1:78:9c:88:8f:42:c3:69:b8:27:
f8:d5:56:80:6b:4f:6d:0f:36:fc:66:a7:5b:a0:d3:
13:87:de:7e:1e:23:2c:c8:fe:c0:4b:63:68:e5:54:
4f:b0:60:bc:65:c1:0d:3e:82:2b:49:8e:d8:c0:4a:
5a:1a:3b:f3:de:48:c6:bf:de:23:bc:87:1c:ef:70:
e2:8a:9b:0a:0a:1d:10:5e:e2:40:1c:3c:65:b5:ea:
e2:9b:b7:32:5d:6c:97:39:d4:00:b9:7f:74:f9:50:
db:fb:a4:91:49:f6:75:92:ff:35:2b:41:4a:98:b6:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:B3:54:17:88:D3:D0:F2:46:98:2C:9A:E1:DD:7C:9A:71:E7:3B
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6c:47:99:26:ef:55:62:6f:b1:12:43:f2:e2:f8:b3:e6:41:
49:e1:ae:5d:cd:25:e6:0b:56:f8:d6:68:c6:be:21:af:f5:45:
d4:75:af:32:71:43:e6:e3:ac:25:f1:7e:79:a1:38:79:ec:1a:
48:63:b7:48:16:21:96:92:18:9a:5e:af:18:b5:5f:92:24:b2:
29:a6:b6:20:11:fe:6d:cd:45:19:f8:41:c7:3a:cd:34:9d:35:
84:5a:db:ac:91:af:5c:fb:19:53:0a:d2:82:ac:4c:28:f2:03:
69:c3:6e:27:3b:27:69:c5:73:a5:67:e0:1f:7a:db:3d:ac:37:
49:14:a6:6f:23:0a:22:28:20:f5:bf:9e:22:d2:aa:d7:66:91:
7e:8f:84:f6:c6:3d:0e:d4:db:15:a1:75:3f:e4:ba:74:d3:d3:
1c:0f:b8:fd:d3:7b:0a:f8:4d:47:3d:a8:cd:d0:22:01:68:d6:
38:97:c2:02:cb:64:6c:b1:56:7c:3f:85:9e:3b:3f:3e:8e:9a:
db:57:e6:15:c4:53:28:d7:cd:2f:04:1b:9e:ed:86:e9:7a:f6:
39:cd:50:98:54:79:de:ea:66:ef:c9:82:bf:93:69:08:0e:dc:
f9:98:93:d8:39:3d:5e:b6:43:5d:d1:14:cf:08:7f:cf:2e:5c:
db:f3:69:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CydAMoYn7rsWiqqnlvY0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDgyMDRkN2NmNWJjNGFhYjM4ZmZhMzlkYTNhNjgxZWQy
MTdiZDQwHhcNMjYwNjEzMjEwMTA2WhcNMjYwNjE0MjEwMTA2WjAzMTEwLwYDVQQD
EyhkYzk1YjM1NDE3ODhkM2QwZjI0Njk4MmM5YWUxZGQ3YzlhNzFlNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yzvdTAK7z6tBHDPRLSxlCltymtg
P/JSVHyBMhgCjvjVTaPFAb7gQILTYcHk7rEYfnnK8sevaN2DQ4N1TyMlCW8yF3bn
pwQP9exTrUfAbiscN1mO1gBJlbfENUD6+rSokzkDd9I5CNtVAWe/vv4YgceMfmBT
sCzlQm668jKlLx+Ck/iFxIP8IwunFPF4nIiPQsNpuCf41VaAa09tDzb8ZqdboNMT
h95+HiMsyP7AS2No5VRPsGC8ZcENPoIrSY7YwEpaGjvz3kjGv94jvIcc73DiipsK
Ch0QXuJAHDxlterim7cyXWyXOdQAuX90+VDb+6SRSfZ1kv81K0FKmLa9rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyVs1QXiNPQ8kaYLJrh3Xyacec7MB8GA1UdIwQY
MBaAFAkIIE189bxKqzj/o52jpoHtIXvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjIt
ODgyM2YxMTFkZjA3LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjItODgyM2YxMTFkZjA3
LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWxHmSbv
VWJvsRJD8uL4s+ZBSeGuXc0l5gtW+NZoxr4hr/VF1HWvMnFD5uOsJfF+eaE4eewa
SGO3SBYhlpIYml6vGLVfkiSyKaa2IBH+bc1FGfhBxzrNNJ01hFrbrJGvXPsZUwrS
gqxMKPIDacNuJzsnacVzpWfgH3rbPaw3SRSmbyMKIigg9b+eItKq12aRfo+E9sY9
DtTbFaF1P+S6dNPTHA+4/dN7CvhNRz2ozdAiAWjWOJfCAstkbLFWfD+Fnjs/Po6a
21fmFcRTKNfNLwQbnu2G6Xr2Oc1QmFR53upm78mCv5NpCA7c+ZiT2Dk9XrZDXdEU
zwh/zy5c2/Npfg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:54 2026 by rpki-client