Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: /2exRzihC0+8RQNu9Re5KZnpMly/G8am5/a0G5A49yM=
Subject key identifier: 4C:13:13:68:62:D3:EA:54:70:76:6C:A6:E8:77:BD:35:43:97:46:98
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019F8F7F9DC71ACF091656F38E7091B829CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: 3bH7Sw/BEnpNp4IfDvRceeJAOsCdRra8oipESy2J/Tc=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9d:c7:1a:cf:09:16:56:f3:8e:70:91:b8:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=4c13136862d3ea5470766ca6e877bd3543974698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:58:fe:d9:fe:ab:57:70:58:8d:e5:0a:4c:
a6:a2:b9:da:fa:d7:9e:09:aa:21:82:f3:f0:6c:0a:
45:21:88:1b:39:62:e6:c5:5e:93:f0:43:6f:0a:3f:
51:82:57:ad:a2:c1:05:bb:a7:3b:8f:b9:f9:28:a9:
d2:ec:fb:7d:b1:ba:47:5c:0d:3d:a0:81:e9:22:c0:
73:1e:37:a7:dc:da:5c:70:ad:39:ea:80:db:4a:28:
1e:13:e2:bd:4f:f1:f6:7c:63:c9:f9:78:0a:67:48:
30:94:8a:9f:1e:a1:6e:ea:05:25:1b:56:46:31:e6:
df:16:ea:9b:d7:3f:d4:b3:02:7e:57:66:a5:16:97:
26:85:76:9b:4c:34:01:c7:e7:29:34:ee:8d:54:6b:
03:80:d6:71:3e:a5:9b:78:ab:8d:75:86:17:4a:d8:
86:93:94:11:f5:15:09:ad:5a:bd:35:57:db:40:38:
3a:e3:81:69:1b:dc:3f:7b:0b:51:f0:75:e9:66:8f:
4e:f0:60:59:b1:cf:00:75:36:96:ff:ea:ce:df:be:
82:17:82:d9:92:01:07:0b:28:b3:71:49:2d:32:6a:
38:9b:2c:76:f8:7f:a3:3d:b9:83:93:6b:0b:63:8f:
7a:fa:01:99:e4:34:91:e7:4a:c5:fb:e4:d7:be:b8:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:13:68:62:D3:EA:54:70:76:6C:A6:E8:77:BD:35:43:97:46:98
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:a6:9a:61:94:18:84:7d:51:89:97:7a:cd:f5:06:34:04:
55:ee:1a:77:e6:a4:dc:f2:51:80:cb:5c:3a:d5:75:6e:82:ec:
1f:2e:a4:49:6c:e4:20:4a:ae:52:b2:cc:1e:e8:2e:5c:22:eb:
81:19:ad:ff:03:1b:1f:ba:17:fb:84:e4:b6:0e:d7:2b:9e:01:
ab:93:48:02:3c:92:02:63:5d:79:2c:90:f6:cb:09:52:77:f6:
ea:87:d7:67:83:34:8a:5f:e8:c7:79:17:9f:1a:d7:52:7f:0c:
54:dc:9c:f6:f8:26:25:41:e9:47:1e:b5:d0:09:84:bc:fe:26:
da:ee:15:37:f4:4b:c5:a6:8d:a4:02:b5:b9:04:61:08:83:0e:
5b:60:e0:b9:bb:b0:de:99:18:2f:2d:db:18:d8:4b:31:a5:04:
d3:67:3d:6a:a6:4c:1c:27:12:47:f5:0f:f2:89:7b:24:f3:f7:
41:10:6b:12:58:00:35:47:5c:9b:f9:20:b9:11:fb:f7:ee:8f:
c5:5d:31:09:a5:2f:4b:89:a0:9e:50:ff:af:4f:10:58:21:dd:
db:8a:92:b0:22:f1:88:55:3e:60:00:74:87:1a:90:b2:6c:15:
50:e8:21:01:bf:6a:28:00:c1:86:c7:d6:44:7c:33:80:4e:e6:
ba:2d:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:03 2026 by rpki-client