Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: B1d+spga3B2xMC2SnxfTYd2P5Bfl6YcQTjlGHGSUOLM=
Subject key identifier: E5:BE:0A:4C:E6:19:AB:0E:A2:5A:03:2F:6A:AC:AF:C1:47:8E:1A:08
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019E1CB4A37D68A5D22051AA0A59BF421E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 15:01:00 +0000
Manifest this update: Tue 12 May 2026 15:01:00 +0000
Manifest next update: Wed 13 May 2026 15:01:00 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: HXE4aefDjgJjc8GCjLVkwpQpmqiD6usRYArOtBFowHw=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:a3:7d:68:a5:d2:20:51:aa:0a:59:bf:42:1e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: May 12 15:01:00 2026 GMT
Not After : May 13 15:01:00 2026 GMT
Subject: CN=e5be0a4ce619ab0ea25a032f6aacafc1478e1a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:1f:65:98:6d:6b:6f:d9:70:f9:7f:ab:ba:
3d:2e:0c:5f:7f:f3:f8:5a:8e:98:a4:ff:7e:72:b4:
54:a9:c4:09:2b:6e:a9:96:04:2f:d0:ca:b0:8f:40:
18:ac:f1:dd:ac:ca:b7:11:03:8c:11:b1:e2:ac:c9:
59:80:ba:82:ff:57:5f:ac:bf:75:b2:4b:d6:c6:77:
c0:af:b0:40:23:85:83:43:88:a3:c4:9d:89:51:9d:
57:4f:12:25:c9:08:4b:bc:9b:7a:84:3d:5b:f1:de:
7c:bc:fe:cb:0d:15:04:0b:0d:44:52:01:d9:0e:82:
4b:7b:b2:88:b1:0b:ed:37:d6:48:0d:41:96:53:c2:
4c:04:f7:7c:29:59:fd:4a:00:7e:35:9b:36:48:e4:
a8:b8:c5:97:1d:be:37:2f:9d:36:3a:6b:4e:e5:b5:
7b:f2:04:57:3a:95:f2:39:d8:b6:e1:5e:3b:b8:13:
71:9f:9f:4b:c4:1a:bd:99:a0:85:a2:44:f9:88:8a:
dd:2d:d5:76:8e:c6:61:0a:bc:e7:e5:38:cf:03:c6:
12:61:ae:57:53:14:b4:40:3f:1d:bf:7c:9a:47:f1:
6e:49:7d:3c:eb:8d:7b:9a:5a:11:e9:20:a3:3d:e8:
e1:c0:ae:2b:d5:a2:2a:95:ec:4a:5d:0f:c8:eb:ae:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BE:0A:4C:E6:19:AB:0E:A2:5A:03:2F:6A:AC:AF:C1:47:8E:1A:08
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f1:bc:7b:60:f7:6e:d9:1e:5a:ae:52:20:d4:c2:cf:03:61:
cd:e0:91:16:b0:91:2f:39:6d:2b:8c:a7:c3:be:2b:d9:54:18:
d4:20:4a:fd:aa:6b:9a:f2:45:fd:71:af:70:93:5f:fa:12:33:
be:ff:ee:aa:76:96:fa:3e:23:9a:2d:c4:16:f8:01:b2:ab:fc:
8d:0d:74:9c:b3:95:3a:cd:17:99:c0:2e:5e:71:cf:fb:73:75:
e4:dd:bd:7b:cc:88:9a:4c:1a:85:c1:8f:18:04:ca:31:65:5b:
35:75:76:ed:05:4c:21:f9:28:92:e0:0a:58:34:8f:8b:0b:73:
0e:ba:c5:a6:67:90:72:79:97:70:4c:53:3a:e4:c3:a1:6a:f1:
c1:b4:20:9c:df:42:1b:63:71:ba:53:58:a3:17:10:e0:af:56:
e9:2e:17:f7:8f:f7:97:ff:eb:31:e5:d7:11:85:fd:da:8d:6c:
01:bd:09:6b:78:54:21:7c:81:54:c5:3e:a8:1b:0b:89:62:bc:
d9:51:d4:ff:da:c4:30:3d:0b:03:b7:91:bc:b2:a2:db:29:5b:
b3:ff:99:99:16:54:91:b6:4b:3f:01:98:57:ee:ed:f6:e2:ba:
96:1f:be:1c:6f:4f:f4:e2:ce:e8:2f:c4:29:5c:a2:71:14:0e:
e5:16:3e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:19 2026 by rpki-client