Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: c5crn0Ky0/K0LaLki27Yu7NbIMZ33L5o6LtAvtUgpZA=
Subject key identifier: 5A:76:C3:3D:84:1E:2F:4A:E0:E9:DB:05:5E:55:F8:A6:77:FE:39:BF
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 01A1250C053429E2362C7893D78ADC4EE7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 1A97
Signing time: Sat 10 Oct 2026 09:01:47 +0000
Manifest this update: Sat 10 Oct 2026 09:01:47 +0000
Manifest next update: Sun 11 Oct 2026 09:01:47 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: vETSZr63fm/3WgEky9oCgqrHymIGVdpmzlM7qQylZRc=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:05:34:29:e2:36:2c:78:93:d7:8a:dc:4e:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Oct 10 09:01:47 2026 GMT
Not After : Oct 11 09:01:47 2026 GMT
Subject: CN=5a76c33d841e2f4ae0e9db055e55f8a677fe39bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a7:8c:24:77:ad:79:ec:52:94:68:88:08:f5:
e8:0a:0a:1c:9a:cb:8f:16:d1:e0:12:a9:86:d9:84:
ca:66:4e:dc:b7:0e:0d:90:10:cc:d5:03:d4:e3:b8:
98:08:8e:37:18:29:fc:21:08:a6:0c:a7:40:ab:03:
bc:cf:da:6f:5a:d7:3b:3e:69:4c:3f:c4:f2:0c:ee:
64:67:e4:7d:3b:14:dd:35:5b:67:4c:8f:12:d5:19:
f7:77:5e:59:eb:64:a9:25:bc:c8:d5:61:61:b5:d6:
a9:b2:a1:45:99:53:4f:60:d0:a1:52:36:d7:19:cb:
a1:c3:d1:2e:03:e6:85:e1:01:3c:2f:d5:83:3e:7e:
2e:64:42:27:70:b7:89:7a:70:1f:2c:3b:28:ad:37:
1d:fa:6c:86:83:c0:7a:a6:15:78:43:0f:ed:56:9c:
1e:d6:85:19:0a:73:eb:bf:d0:da:3c:a3:2d:75:be:
97:a8:ea:d9:8f:dc:a0:0a:8f:25:ab:8c:4e:fd:ec:
5d:05:04:b1:0a:82:ae:74:52:f6:07:b3:97:85:1d:
8b:73:39:ae:6e:7d:39:c5:0c:10:88:1f:94:bd:96:
a5:70:ea:90:b3:79:2e:cb:b8:c6:1a:99:6f:df:13:
18:99:07:31:e5:26:81:fd:d8:a9:b6:bb:9f:4a:0c:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:C3:3D:84:1E:2F:4A:E0:E9:DB:05:5E:55:F8:A6:77:FE:39:BF
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:cb:ce:40:d7:a7:1a:de:2e:df:cb:55:a6:75:ec:d9:e9:
36:a4:c6:da:4e:7d:2a:3a:27:fd:0d:c0:fe:c8:57:47:fd:b2:
13:d4:f7:d1:7c:dd:aa:6b:16:e4:49:2b:3b:fb:8e:e9:02:55:
e0:13:49:93:d8:4a:87:98:ba:18:3b:33:96:0c:58:44:18:4b:
29:6d:98:7c:8e:31:32:02:53:f9:08:4c:29:7f:6b:a4:c4:99:
94:27:a1:db:6a:82:51:e3:3c:c7:e1:f1:d3:c7:4b:ad:43:ca:
f4:e8:8c:af:b6:dc:25:2f:f1:dd:75:1c:55:41:89:1a:ff:8d:
4d:12:87:88:18:66:8b:f0:b3:32:67:7c:d3:35:8d:c1:49:18:
9b:f1:84:fe:42:90:01:c2:88:e5:bb:b2:b4:f8:aa:22:ff:1e:
28:7a:d7:85:3f:5f:7c:08:0a:63:51:d3:48:bb:fd:a5:fd:c0:
38:33:2e:0f:ee:ca:95:e4:fb:b7:5a:16:88:d3:af:50:ef:f2:
d9:88:b4:92:97:56:30:37:64:fa:03:19:19:ac:1e:39:ec:b8:
f3:95:d2:9b:f0:b7:34:41:d1:ee:6f:f3:91:f8:a6:bb:18:9a:
c3:97:65:83:bc:ed:72:05:a1:e9:bf:71:3b:80:58:17:fb:a6:
4e:8a:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:59:19 2026 by rpki-client