Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: xcGUuoQzY7wgq0pkf2iTbpq37AseUUxhG/7/90AUaXg=
Subject key identifier: 96:70:4A:3D:5B:4E:13:72:81:17:90:67:FA:19:AD:2A:D1:A6:9B:59
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019D9D085A9C3FC67277F88275DE5A311177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1757
Signing time: Fri 17 Apr 2026 20:01:03 +0000
Manifest this update: Fri 17 Apr 2026 20:01:03 +0000
Manifest next update: Sat 18 Apr 2026 20:01:03 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: GD65WtnfdEqYZg8EOSnMmqIc8GgTDvVLY0nHJfxdWHQ=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:5a:9c:3f:c6:72:77:f8:82:75:de:5a:31:11:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Apr 17 20:01:03 2026 GMT
Not After : Apr 18 20:01:03 2026 GMT
Subject: CN=96704a3d5b4e137281179067fa19ad2ad1a69b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:05:c6:be:07:81:de:e2:8d:4d:ed:a1:cb:ea:
80:57:a4:7f:fd:0a:b8:da:08:8b:7a:1b:4f:e2:19:
4f:77:00:96:9c:1f:0b:4c:e2:4f:3a:94:11:af:5d:
5e:68:0f:12:8f:90:f4:ac:92:e0:08:e8:15:c3:19:
01:ad:f3:e1:d2:13:5c:b9:31:05:8f:50:f8:bd:36:
f7:22:1e:99:12:9c:7e:9b:72:c8:9b:e0:a3:00:6a:
ea:9a:07:c2:b3:17:dc:2a:5b:e6:51:f4:e7:cb:c9:
03:17:cc:ba:3e:9d:8e:ea:70:9b:21:1c:ed:41:27:
c0:8a:e7:a6:c8:23:85:1c:96:c4:24:50:4a:13:0d:
1a:a9:b2:b2:04:99:5c:42:55:c1:98:4a:cf:ab:8c:
13:ab:ad:1a:27:d7:18:6d:1d:ba:4d:c4:80:37:d0:
07:a9:88:59:fe:05:ac:7e:75:99:ae:e5:f7:a6:0e:
4d:8a:30:9f:11:fc:41:d6:75:7b:0e:51:cc:8f:67:
0e:85:fe:6b:e3:72:ca:7c:b9:a7:84:79:68:a6:9a:
22:db:0e:6a:d7:c8:ef:a0:1d:8f:91:41:5a:43:72:
ca:3b:fb:05:7e:3a:49:31:1b:a2:f3:08:51:e5:3b:
ca:4b:ac:90:36:cf:76:ea:a7:59:9a:d6:33:29:9e:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:4A:3D:5B:4E:13:72:81:17:90:67:FA:19:AD:2A:D1:A6:9B:59
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:28:02:0d:2f:83:90:b8:b7:67:35:54:e0:4e:2e:0d:d2:9a:
db:4b:86:36:24:00:9a:f7:0a:e3:bf:3d:68:6f:b8:bf:bf:1b:
c8:37:b2:5b:a7:33:fe:8e:73:95:33:21:6b:b2:22:f7:62:76:
b8:83:95:28:50:64:94:23:49:68:08:e4:41:d6:33:c3:0d:af:
8a:cb:21:a4:8a:b2:ba:8d:79:36:23:21:91:a3:28:fc:33:8b:
28:82:d2:ac:e3:9f:37:a0:4c:69:d8:aa:12:0b:b9:24:dd:24:
0e:e0:7c:91:37:b9:b0:e3:04:04:6f:52:2b:67:e2:ae:77:a2:
eb:ab:0d:8d:5f:c3:08:f4:ac:1b:02:65:3d:4e:2e:03:0e:01:
c5:f0:92:0c:fe:f2:06:18:6d:eb:e6:ab:cf:12:a7:b2:64:95:
ed:8e:18:c4:be:37:85:4a:75:26:d8:d6:fb:59:b7:52:be:f3:
7e:5a:23:ca:f6:52:bf:52:c6:f9:14:c9:7b:88:d6:06:eb:e6:
ac:8e:21:39:6d:6f:f1:2d:6b:23:6e:19:8f:34:47:0a:c0:dd:
a4:44:05:17:12:9f:0e:61:d4:42:55:96:dd:1c:57:ae:2f:29:
06:c8:07:f1:e1:07:7a:db:48:f3:51:63:3a:0e:de:aa:49:e3:
91:ad:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:25:56 2026 by rpki-client