Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: 5FSEsBHlfC+AIVITirzxk0aFjUAU7pnU6T5DsmnrLXI=
Subject key identifier: 2E:5C:2E:18:78:EA:E0:4B:7B:23:68:64:2E:59:82:2B:06:88:47:FA
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019EC292890588CE4AED6657085B1767C873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 17EF
Signing time: Sat 13 Jun 2026 20:00:43 +0000
Manifest this update: Sat 13 Jun 2026 20:00:43 +0000
Manifest next update: Sun 14 Jun 2026 20:00:43 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: AFJLlCZaFQLqPL0GyWXj9YRb8lKi5DDtXlicenYcCzg=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:89:05:88:ce:4a:ed:66:57:08:5b:17:67:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jun 13 20:00:43 2026 GMT
Not After : Jun 14 20:00:43 2026 GMT
Subject: CN=2e5c2e1878eae04b7b2368642e59822b068847fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:ec:e3:f1:aa:71:cd:4d:c3:8e:44:c7:05:
13:da:e5:5b:56:59:13:a9:62:85:c0:ae:ae:e1:c5:
60:bd:8d:b3:ab:f3:68:9a:e9:2f:d7:3c:90:c2:5b:
a2:7f:22:25:f4:d5:64:be:cc:28:9a:59:4b:bd:5b:
ea:e2:1b:4f:e2:7c:cd:0e:ff:e9:99:70:55:f1:7b:
38:b9:77:6f:28:35:3f:4f:a7:e0:dd:86:99:01:24:
6c:7b:30:6a:27:8f:44:6e:ef:57:ef:0e:17:d1:aa:
ba:db:a3:bd:ab:51:49:03:ec:7e:62:84:60:76:9e:
52:c8:b0:d2:24:64:21:79:cf:2b:4f:14:4f:77:8c:
cb:56:82:1f:69:51:06:ca:c3:cf:a7:e2:de:d3:70:
21:80:9f:7e:ad:2e:4d:46:e6:20:aa:64:c4:2c:9f:
97:b6:ee:b0:d0:14:47:56:29:c1:e2:9f:5e:9c:66:
9e:ee:02:5c:1e:28:0b:48:87:bc:24:66:e4:ed:1b:
38:9b:46:15:fa:9d:6e:d8:58:4b:69:1e:79:63:56:
12:3f:8b:55:7f:43:2f:73:70:38:c4:c5:39:28:cf:
fa:5c:ba:c2:b2:2a:ac:39:ad:d2:2e:60:c8:a8:c4:
b0:35:7c:19:f2:46:9e:af:47:47:1e:40:bc:be:70:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:2E:18:78:EA:E0:4B:7B:23:68:64:2E:59:82:2B:06:88:47:FA
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d6:a9:1b:38:2a:d3:08:f9:77:6a:50:c1:29:1d:7a:fd:98:
71:f7:e0:ba:68:78:76:29:8b:b7:a1:76:c6:7c:47:5a:9b:27:
6a:f1:4f:6b:d6:4f:a0:a9:89:eb:8b:af:a6:29:30:bf:dd:83:
47:9c:3d:6d:a1:24:39:17:d9:4d:23:cb:b9:d9:c0:d7:75:b4:
b2:fe:11:ad:73:5e:90:db:83:89:da:63:8f:14:95:36:63:79:
05:26:20:eb:7a:ef:bc:9f:b2:67:ea:10:83:e2:35:39:11:32:
d1:a8:e5:15:42:55:09:fb:04:f8:ee:a0:28:a1:95:88:47:30:
c6:8e:54:e9:2b:e3:30:a7:cc:2c:64:2a:24:14:6f:09:5e:c8:
62:5a:99:5a:96:f7:4b:18:4b:bd:d1:1e:ac:7b:74:f7:34:d8:
4c:8a:c1:bc:e1:5b:fe:34:ab:98:42:1b:51:1d:4c:9c:69:8b:
cb:23:4c:02:e2:4a:b2:b5:15:65:8f:f4:eb:a2:ec:85:cc:13:
46:f3:04:45:a5:e0:f1:f8:a1:78:43:0f:33:6c:a8:44:5c:4e:
a9:11:97:6b:10:68:6d:7a:60:9e:b8:6a:69:28:39:33:19:89:
b3:07:83:16:1d:ac:58:3c:93:c2:6f:4c:43:bb:82:ef:32:48:
c7:ff:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:08 2026 by rpki-client