Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: esmTndeVdRpw34smkDT1UzBkFwXHHnxXBHNuwYYVPTw=
Subject key identifier: 3E:26:AF:AE:D3:D6:3D:D8:61:C3:87:D8:B9:97:63:25:C6:FD:66:FF
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019D2772E5C1819AB2A358256EB84D3E9BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: z8bAzWWcUol8qckvpbwmcNk0Bk6z3o28tD8ybMJKffU=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e5:c1:81:9a:b2:a3:58:25:6e:b8:4d:3e:9b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=3e26afaed3d63dd861c387d8b9976325c6fd66ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:96:0b:c2:1c:6d:ed:43:1f:9d:a6:e0:e2:
30:7f:5a:4a:ce:2b:0c:3d:cc:a7:84:b7:bc:ca:a3:
95:cf:d4:b6:64:91:4f:7f:bc:00:eb:8d:1f:12:25:
f2:dd:84:11:d3:34:1a:d7:4c:2a:2e:d2:67:d6:a2:
a4:d0:83:31:0a:e4:45:2d:5c:c3:88:03:1b:06:0d:
ae:65:b9:e3:96:f2:a9:12:72:d2:c9:66:07:15:1d:
19:90:91:f9:1a:60:44:c5:57:ff:0c:06:ef:3b:84:
89:b6:33:18:81:59:82:f6:94:25:2b:e2:5e:d0:97:
59:62:a9:53:91:24:c1:7b:12:30:88:fe:a6:c4:5d:
06:12:99:af:36:05:06:a8:c0:cd:e3:a8:c0:51:73:
5d:7b:ad:b1:dc:97:f0:71:3e:24:38:b3:bf:bc:81:
d7:8e:a7:25:0c:4a:21:44:2a:46:b6:b9:ba:13:d7:
33:92:91:49:50:09:44:ed:44:91:d6:63:6d:e0:e6:
15:ba:7e:03:ff:69:15:9c:ab:2c:f6:94:55:72:58:
d6:af:fb:b8:9a:2a:bd:dc:b9:de:be:f9:d5:dd:82:
7f:4a:7c:b1:55:75:d2:c8:d8:79:b8:97:d9:40:af:
0d:51:f2:6b:ed:e9:7b:ee:9b:31:cc:1d:2c:03:0a:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:26:AF:AE:D3:D6:3D:D8:61:C3:87:D8:B9:97:63:25:C6:FD:66:FF
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:47:aa:f7:5f:e2:81:c6:4d:cd:c5:11:a5:1f:a8:70:f1:17:
a6:4a:1b:e4:45:46:ec:0c:78:61:e6:8b:03:8c:a3:73:22:e7:
3f:6e:78:22:ac:4c:49:4b:96:d2:93:9f:9f:3a:c3:3f:9d:7c:
32:8a:92:c3:9a:cf:58:06:b0:d7:48:b7:dd:dd:bd:97:ec:17:
84:8d:b6:42:7b:81:28:c2:60:68:28:00:74:34:a6:31:99:33:
40:78:70:0c:27:8c:bb:08:fc:da:3a:b7:f5:22:3b:35:26:96:
d1:c5:70:60:1f:08:d7:3d:44:d6:2e:3a:2e:2e:b0:86:35:1e:
fb:96:09:9d:2b:4b:b9:34:e2:e4:53:84:58:70:a2:a5:24:fa:
8e:19:9b:46:a7:03:2c:e2:bf:60:02:59:98:99:66:99:ea:0b:
47:6d:5c:85:56:57:be:4c:ae:3b:9b:29:4c:e4:86:b4:e5:04:
6c:91:37:a0:42:a7:45:64:3f:8b:6f:10:8d:8f:04:19:18:22:
74:fc:25:bc:59:8c:96:64:5a:a0:3b:47:9b:32:e9:86:21:9e:
56:13:46:19:9b:7d:69:9f:28:0c:67:c2:31:ea:98:38:27:e7:
47:ac:57:51:09:db:88:b1:89:0c:38:3e:b4:34:50:f6:4f:bc:
f4:28:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:42 2026 by rpki-client