Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: UkzRNQfGUdCTXTzqCNp+U71pv//LwZYwXIq11aP7vPw=
Subject key identifier: D2:F0:3A:78:BA:94:DE:98:57:80:B5:A1:A5:D5:B6:BC:C8:E8:F0:AF
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019CADC7D7D960E46B77078FDA682478D734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 09:01:21 +0000
Manifest this update: Mon 02 Mar 2026 09:01:21 +0000
Manifest next update: Tue 03 Mar 2026 09:01:21 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: lBgxi+SmGcFFT8Vw8UlM9PWOF90xKDfXbabKQta3h0E=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:d7:d9:60:e4:6b:77:07:8f:da:68:24:78:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Mar 2 09:01:21 2026 GMT
Not After : Mar 3 09:01:21 2026 GMT
Subject: CN=d2f03a78ba94de985780b5a1a5d5b6bcc8e8f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:f0:9f:f5:39:0f:5d:7c:59:16:36:4c:6d:
17:9c:95:61:b5:28:90:6c:2d:45:c8:8b:94:5b:11:
7f:97:31:e5:25:57:5b:80:8d:cb:9f:7b:5c:84:6e:
d7:07:3e:e8:47:ca:9d:eb:f2:3d:19:22:8b:ae:47:
28:a0:54:6b:ac:3d:ef:d0:3e:27:d4:59:9d:0b:86:
ec:0b:bd:30:5c:c7:f2:1a:2b:c4:d6:3e:da:96:fb:
3d:93:67:fd:1e:41:4c:81:e7:3d:18:3f:cb:54:93:
90:ae:66:90:fe:4c:4a:10:57:c8:e6:3d:3e:e3:e9:
2c:59:59:5c:96:ec:26:79:ff:dc:d1:2c:73:71:31:
09:52:de:38:25:24:75:b3:21:1a:de:9f:ae:4e:82:
16:25:00:c9:c0:26:a5:6f:42:fa:6c:fe:ab:ad:78:
08:18:2c:52:00:c9:a6:30:e5:99:0d:dd:73:19:3f:
f3:eb:6f:b3:50:be:db:89:3e:a6:9e:c4:06:c8:ff:
83:e2:ce:4f:ee:d3:f1:35:af:82:8b:4d:88:1f:7c:
d2:ae:f0:ca:b0:14:73:50:3d:31:d2:99:0a:3d:c0:
ae:28:c7:65:7c:76:aa:fe:93:80:dd:d1:6b:af:6c:
d8:82:77:b4:c4:ce:d8:1a:f2:a7:88:c2:ff:68:6e:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:3A:78:BA:94:DE:98:57:80:B5:A1:A5:D5:B6:BC:C8:E8:F0:AF
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:5b:64:f1:02:b1:d1:05:6a:9a:69:9f:86:82:e2:7f:6b:
60:ac:1f:11:4f:ec:ef:e9:50:5c:8f:1e:84:7e:e7:47:8f:f0:
ed:fb:f4:78:2b:3d:8d:d9:9d:f2:7b:7a:26:51:92:ea:ef:d7:
04:02:03:36:d3:34:79:95:5a:5e:05:2b:4a:2f:c2:f1:c7:59:
21:42:c8:76:8d:89:05:db:b2:31:5f:e0:d5:73:9e:a7:47:7c:
76:c2:e2:21:98:20:a6:58:51:3d:5e:e3:04:57:34:97:96:96:
f4:df:01:53:9e:82:ea:04:32:0c:68:3d:23:c0:79:02:5d:94:
7c:49:cc:5e:b1:e4:d2:79:46:cf:97:48:df:0e:5d:b1:ef:83:
a1:37:73:8f:2f:80:a7:a8:bf:9d:85:31:12:dd:cd:83:55:4b:
b6:b4:05:dc:cb:2b:8d:46:b9:1d:1b:15:29:ff:56:30:e4:47:
3b:27:c3:ec:2c:d5:57:23:69:bf:bd:78:b2:bb:5e:5e:1f:9e:
63:f2:d4:8c:0b:03:a2:18:01:9e:47:40:83:27:db:00:f1:65:
0f:91:34:e5:f7:fb:42:2c:14:7a:c9:18:a1:38:54:d4:f7:d0:
33:0f:9b:bf:b9:06:c9:53:da:a6:a5:9a:ca:74:96:93:ba:0f:
ae:8e:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:34 2026 by rpki-client