Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: zS5KBjcIsFcoOzoDDfTNpR84PINXOLkMCUt8TXZFd50=
Subject key identifier: E9:FE:73:FB:DA:C3:23:1D:26:B0:44:D4:4B:DC:AF:F7:6D:82:17:22
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019CAD901AB9D685B80468D0A0E865AF309C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 16DB
Signing time: Mon 02 Mar 2026 08:00:28 +0000
Manifest this update: Mon 02 Mar 2026 08:00:28 +0000
Manifest next update: Tue 03 Mar 2026 08:00:28 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: srEyBSHJEQArReI6EjGTumasE9Yb4cmLOvAk40gcdeA=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:1a:b9:d6:85:b8:04:68:d0:a0:e8:65:af:30:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Mar 2 08:00:28 2026 GMT
Not After : Mar 3 08:00:28 2026 GMT
Subject: CN=e9fe73fbdac3231d26b044d44bdcaff76d821722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:4e:4d:a4:df:54:63:41:bc:9a:df:4a:db:
52:54:e7:7f:cc:00:19:9b:fe:a8:bc:d2:e5:5c:73:
4b:fd:b0:9f:46:4f:a7:1c:ab:75:24:94:b1:7a:02:
b1:be:f6:b5:df:c6:26:fc:f5:a5:a1:cd:21:7a:43:
26:65:b3:e2:97:28:ca:e8:78:76:81:33:ed:b0:4e:
3f:06:ab:22:93:ad:89:0c:9c:69:7b:3f:8b:c3:47:
18:27:9c:c1:79:2c:08:8c:6c:d3:51:b1:ea:72:4b:
97:5b:47:06:83:f6:f2:38:68:be:fa:65:3a:b9:e7:
7b:1e:4d:b7:45:34:87:3c:0b:99:11:c8:51:3d:48:
14:9b:e7:32:63:43:37:ef:24:11:a8:25:6d:a8:56:
43:b3:ac:ff:76:1e:10:c4:2c:57:b1:a5:56:6c:bd:
df:c4:d6:11:34:be:21:35:f4:28:ba:ba:25:2a:65:
2e:13:99:e9:c5:56:2a:7f:4f:23:a5:13:be:15:ac:
ba:95:6f:2a:1e:40:c7:0e:01:1d:e6:fd:a7:b9:f6:
79:52:21:24:71:60:ee:b4:d2:a3:5c:97:15:78:7e:
29:19:a7:1f:2a:ec:23:48:b6:48:cc:30:44:62:1c:
87:2f:b0:24:f7:43:dc:3c:57:ce:8e:14:f5:d6:11:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:73:FB:DA:C3:23:1D:26:B0:44:D4:4B:DC:AF:F7:6D:82:17:22
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:66:b3:bd:73:19:13:04:13:96:2b:ee:1b:c3:a6:c0:eb:
ea:c1:d2:6d:df:10:cf:3f:d4:53:ce:67:8c:0c:20:64:99:a3:
36:8d:57:b3:48:81:f8:c9:94:ed:4c:8a:53:37:94:fb:83:71:
a4:67:b7:a3:c8:15:93:ab:55:fa:0e:2d:3c:2d:f2:fc:27:bc:
51:9d:43:bf:01:b3:ed:09:25:ed:af:9a:8d:fc:0d:06:58:ee:
83:29:16:84:64:1b:b4:0e:fc:5b:62:21:c3:ef:b4:8b:97:02:
c6:0a:5f:e8:36:2b:64:00:ad:f8:5b:01:5b:88:ba:39:ff:1e:
2e:6d:a2:21:37:8a:b8:87:5d:47:a6:05:3f:cb:3b:24:f6:a1:
ac:41:ad:c5:84:4e:cb:a8:e1:b2:6c:0e:c8:b0:c8:d1:c8:6f:
ff:b4:d9:f5:71:89:c4:d5:28:f5:18:88:65:c2:c1:fc:ee:d1:
19:6d:0f:06:34:11:ca:26:93:f3:71:42:82:31:14:09:ee:48:
ed:4e:79:f2:1f:d0:7a:b6:23:fd:a4:dc:92:40:fa:fa:d8:d7:
fc:4e:5c:77:39:d8:02:6e:45:7d:76:1c:0f:6a:c3:60:c6:f6:
18:ad:95:9a:fc:e5:cf:35:66:44:2f:92:53:a0:1f:e9:2f:3f:
1d:1a:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:16:25 2026 by rpki-client