Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: Tj0AXwMMxjVWT3rLHP/D5c+iJPy85rjnOHgmVXpqhD8=
Subject key identifier: DF:57:EA:7D:8C:15:27:87:95:59:68:14:F1:43:CF:4A:E1:71:ED:A7
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019FAC3F2716FFA98FE33873DAB5116D5C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1868
Signing time: Wed 29 Jul 2026 05:00:47 +0000
Manifest this update: Wed 29 Jul 2026 05:00:47 +0000
Manifest next update: Thu 30 Jul 2026 05:00:47 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: VWw15b2PdNOY/jzhbZiXjoSVsG+vmNwMtsbIlOr0Xps=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:27:16:ff:a9:8f:e3:38:73:da:b5:11:6d:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jul 29 05:00:47 2026 GMT
Not After : Jul 30 05:00:47 2026 GMT
Subject: CN=df57ea7d8c15278795596814f143cf4ae171eda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:94:15:39:b9:de:d9:33:e4:a9:29:55:ba:
e7:47:25:4c:cd:36:e1:3b:b6:06:11:7a:e2:fa:db:
b6:f9:ac:b3:15:da:ca:3f:87:4c:46:f6:af:e8:c5:
27:33:20:b2:0f:62:da:92:ae:cc:2b:45:fa:d4:ac:
3e:bd:1f:ad:d0:ee:84:12:43:28:3f:ac:03:52:90:
cf:15:27:e2:02:a7:e2:f6:1b:d3:49:b1:1f:ed:2b:
cb:5d:da:96:5d:13:22:40:3c:31:77:24:f1:a2:e0:
f5:19:a0:ad:32:60:84:23:71:c8:21:c0:b5:12:38:
50:2b:f6:86:e2:3a:02:aa:00:af:a3:e1:07:19:a6:
2c:f5:bd:f7:62:65:16:fc:bf:27:d1:f2:d6:d2:50:
30:c0:4d:57:1d:3f:77:a6:f2:67:3a:b6:00:33:d7:
11:87:a7:57:2b:b3:58:bf:6d:fb:4e:aa:29:ee:26:
50:af:fd:5a:36:9a:07:af:87:6b:26:5f:6b:c8:9b:
a8:59:d7:65:dc:06:f6:1d:71:43:4a:b4:72:25:dc:
ed:b8:01:46:7c:28:8e:aa:6a:e2:04:90:27:35:4c:
5b:55:20:84:fa:02:c5:33:4c:14:02:4f:e7:58:cb:
ac:38:2a:5c:fe:c4:72:46:27:85:8c:8b:d8:53:8a:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:EA:7D:8C:15:27:87:95:59:68:14:F1:43:CF:4A:E1:71:ED:A7
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ac:b3:b6:95:71:55:e2:4b:5f:3d:ca:80:08:cb:37:46:3c:
1e:87:7b:47:34:5f:de:5f:3a:71:35:39:8e:4d:53:39:d3:a9:
96:bb:08:22:60:2a:4a:10:e4:48:68:c7:5f:88:81:60:1f:06:
6c:a8:b0:92:e9:d6:e2:2a:18:07:94:a2:e6:32:7b:b6:46:7f:
85:f6:c9:6a:e9:a2:a5:d4:57:84:1b:57:0f:a6:bd:81:fa:11:
91:0c:2e:c8:6d:f1:a3:08:91:1d:b2:56:76:83:94:b7:0f:6f:
ea:8b:f4:e1:df:02:e6:93:54:a6:dd:aa:07:f8:9c:19:e5:e2:
5f:f6:4b:47:54:4e:a2:9c:33:21:5d:0c:80:42:61:ea:30:77:
7a:8e:85:d5:3c:ca:0d:18:70:96:fa:f2:65:19:e4:53:e7:6c:
4a:29:30:39:8d:4e:52:be:ac:0d:8d:13:9c:06:3f:c7:d8:be:
e1:f5:e3:a8:3b:6a:6c:4e:d6:6f:7a:95:e1:21:57:f3:4d:63:
aa:50:95:db:ad:38:89:ad:47:6f:d9:90:21:89:7a:b2:fe:7c:
52:9b:0b:f9:bd:1a:43:3e:6a:1d:3d:81:b2:54:6c:b4:fd:b5:
91:43:dd:3c:de:e9:51:d5:19:42:f8:cc:3e:0f:b8:5a:be:85:
b4:b2:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:11 2026 by rpki-client