Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: T5Wi/u6JP2WMLYO8/XjQWZOFydXufOai75mWfsmNcN4=
Subject key identifier: A7:0D:67:21:4F:72:74:CB:BB:0C:15:DB:46:E0:AA:E0:63:B9:4D:4A
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 01A0D3F0BF6DC54A7A34CE770A78F9519D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 15:02:45 +0000
Manifest this update: Thu 24 Sep 2026 15:02:45 +0000
Manifest next update: Fri 25 Sep 2026 15:02:45 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: 9IQq/XZLfM/v2EeLcHROgCBuVixbwC5uY6LCiMLkcU0=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:bf:6d:c5:4a:7a:34:ce:77:0a:78:f9:51:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Sep 24 15:02:45 2026 GMT
Not After : Sep 25 15:02:45 2026 GMT
Subject: CN=a70d67214f7274cbbb0c15db46e0aae063b94d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:d6:38:e7:c3:7b:9e:ef:91:c8:3b:51:03:
11:d5:96:8c:05:a1:6c:a6:d3:eb:32:4d:ba:c7:41:
87:3e:67:75:af:4d:48:c8:40:e4:0b:5a:9c:d2:32:
c0:25:a4:92:3e:ec:6b:57:d4:23:64:06:ab:d4:dd:
1e:6b:4e:ea:7f:cc:b4:27:f7:99:48:6b:4f:00:f5:
27:89:fc:f6:f0:9b:41:0d:3f:f1:b7:56:3d:78:ce:
4e:8c:de:5e:36:89:a1:7b:f6:4f:54:e1:e3:bd:2c:
f5:ba:ff:ef:6b:22:eb:1c:8b:1a:d4:76:b7:5b:f8:
aa:a6:78:3f:03:c6:31:5f:db:d1:6a:9f:5d:a8:b0:
2d:d4:b1:eb:15:62:b1:72:8a:83:a4:6f:02:f1:b3:
10:20:14:cd:0b:e9:92:07:f3:70:c5:78:94:4c:28:
2e:78:71:9f:cd:d5:9a:35:5f:cc:ae:22:92:06:2e:
43:14:b8:ed:a5:86:75:38:16:48:0d:0c:f6:61:e5:
5b:c5:ce:99:11:24:e9:be:64:a2:9a:e4:09:7c:65:
4a:12:9d:ef:d6:3e:1f:f4:fa:b5:63:61:86:a9:1a:
d6:7f:a0:ef:0e:6e:bc:2b:da:91:33:75:84:b0:b7:
1e:3d:2d:a2:96:bc:d8:3d:e7:cc:3e:57:f3:9e:c7:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:67:21:4F:72:74:CB:BB:0C:15:DB:46:E0:AA:E0:63:B9:4D:4A
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:3d:51:0d:32:cf:59:4b:00:a9:fd:68:bd:65:8c:6b:ae:
4a:08:6d:07:a8:52:c7:2e:53:4a:b9:da:c3:e0:d7:f3:72:25:
4a:02:87:62:06:5e:2b:77:ae:c7:ec:b1:79:bd:7c:96:db:2d:
a2:9d:f3:97:0c:86:18:0e:4f:16:32:d2:89:82:de:9f:b9:ff:
73:46:4d:a6:5a:dc:51:98:49:5d:9a:9f:2c:96:ab:19:68:ed:
40:0d:6d:ac:a0:c1:96:55:9e:30:b3:53:e6:a6:7e:16:2d:7e:
a5:0f:45:63:75:8c:7a:50:01:86:d2:29:e8:e4:21:5b:c7:27:
6d:a5:b0:7c:a8:b0:3c:6d:74:f4:70:73:be:4f:c9:b9:95:59:
e8:b3:1b:98:f2:ca:f9:63:76:55:f5:89:e3:e9:12:d2:6b:da:
8a:e4:bb:5d:27:b7:d7:30:53:60:6e:a2:49:70:a8:78:4e:8f:
09:f0:0c:77:19:a8:39:9a:45:4b:0b:5e:35:a8:62:0e:07:1d:
32:2b:ad:1e:be:76:d2:bc:d5:74:7d:ec:db:fc:ba:72:54:53:
41:88:c9:97:65:b5:28:f8:ff:5e:ce:a6:5f:ca:b9:a3:9f:b7:
ca:f5:cf:8f:53:46:13:61:79:ca:4d:08:be:23:d4:4b:55:d2:
3e:50:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:44 2026 by rpki-client