Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: rKMHnj2csCH1PMqagbfn/zIIhdEmhzS7PxrdxQGgl7o=
Subject key identifier: 8A:35:3F:CB:25:AD:18:49:4E:A2:CC:2F:B1:E5:65:4E:21:0E:A9:BB
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 01A13DEF1E09EA6053FA73CA42840E3B63DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1938
Signing time: Thu 15 Oct 2026 05:00:43 +0000
Manifest this update: Thu 15 Oct 2026 05:00:43 +0000
Manifest next update: Fri 16 Oct 2026 05:00:43 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: x0CoRpT6wFY8znhVQ4nFcGKCVdaLW9VPVGt2Yq5LNT4=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:1e:09:ea:60:53:fa:73:ca:42:84:0e:3b:63:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Oct 15 05:00:43 2026 GMT
Not After : Oct 16 05:00:43 2026 GMT
Subject: CN=8a353fcb25ad18494ea2cc2fb1e5654e210ea9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:40:f0:a1:97:75:48:d0:d5:dc:f6:eb:8f:
84:9d:af:84:fd:7f:50:38:f7:b6:74:fb:ce:c0:46:
37:de:b7:19:bc:f3:b6:13:6d:61:fb:81:b3:fd:67:
42:f4:2a:3e:18:21:a2:8f:41:28:e8:2c:0a:82:0a:
bd:d1:fa:77:c4:23:d4:54:83:4d:e2:18:c6:1d:0c:
b1:23:d9:8e:02:17:a1:6a:05:9d:4f:d6:62:65:9c:
de:18:f8:a4:c4:7f:70:e0:1f:6a:53:ee:71:62:07:
5c:45:62:08:80:6e:23:ee:5f:fe:be:00:0f:f4:ea:
79:21:17:e2:4e:e4:f0:01:89:d4:47:98:4f:c4:cd:
fe:33:2c:18:c1:a6:44:60:a5:07:7a:4a:26:43:93:
c2:62:c9:99:82:85:2d:89:0b:53:56:86:68:e1:22:
9c:44:b9:94:9b:05:7e:9a:c5:8f:36:0c:00:de:e4:
b5:ec:e8:30:f2:6b:57:c3:a6:74:c2:06:3e:43:56:
c2:c9:21:a7:bd:69:12:9a:de:0d:e8:db:da:29:62:
af:d9:2a:ca:8b:e0:4f:54:ae:de:09:12:8c:e3:f8:
7d:5b:dd:db:9f:af:d4:e3:1a:45:44:50:69:24:c0:
92:b0:76:88:32:fc:61:18:c2:16:50:c1:e6:d5:37:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:35:3F:CB:25:AD:18:49:4E:A2:CC:2F:B1:E5:65:4E:21:0E:A9:BB
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f2:56:3b:d4:4a:6f:ef:0d:6f:1a:46:92:b6:c9:d6:48:53:
ff:9d:51:78:32:4e:df:74:e3:aa:a2:29:91:be:94:5a:d8:ef:
38:6b:e3:54:0f:ab:40:ab:3b:40:d8:26:61:d7:76:e3:f4:6e:
11:d5:75:25:58:2d:71:a5:bf:b4:e6:21:90:00:1d:61:66:68:
3f:d0:e0:e2:d1:1f:a5:a2:11:1e:5d:7f:52:dd:f2:f7:23:29:
f6:f5:85:e1:a4:3f:d2:7d:0c:d3:d6:36:34:53:4d:6b:b4:68:
29:da:87:3c:c4:a7:c8:a8:95:15:48:9d:f8:c5:37:6b:21:ca:
6b:fd:6c:1f:0c:b5:0b:00:09:3d:1a:17:b2:94:6f:5e:53:63:
dd:f8:95:48:0c:56:dc:84:1b:65:e0:7c:fa:88:aa:32:be:af:
42:db:c2:79:35:55:fa:8f:b3:b9:db:54:88:62:d9:57:1e:59:
d5:6f:16:f7:67:67:77:60:af:bf:a7:8e:44:29:98:25:1b:b7:
5e:8b:aa:4f:b8:09:db:33:1f:47:f1:12:a2:7d:0b:cd:b0:e7:
e5:58:14:51:40:98:9c:b3:73:ac:e4:58:98:25:91:bc:32:00:
69:16:c2:da:c2:8f:46:27:6c:12:0b:d3:23:55:25:b6:b2:7a:
60:04:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:35:52 2026 by rpki-client