Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: m/0+fObFiBN8sRxJvgBKRmutLkn5dV8Fxx9Z9yXzpIo=
Subject key identifier: 3B:FA:D2:DB:85:1C:12:76:E3:13:BC:43:0E:EE:B2:F5:D3:B2:F3:16
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019E1E6C109417C3F2C44AE7B13F3703AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 09F5
Signing time: Tue 12 May 2026 23:00:59 +0000
Manifest this update: Tue 12 May 2026 23:00:59 +0000
Manifest next update: Wed 13 May 2026 23:00:59 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: RfLW/3bPcAN/gMdcwJK+35QsxblLO/W7cq3s1OfzudM=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
4: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
5: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:10:94:17:c3:f2:c4:4a:e7:b1:3f:37:03:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: May 12 23:00:59 2026 GMT
Not After : May 13 23:00:59 2026 GMT
Subject: CN=3bfad2db851c1276e313bc430eeeb2f5d3b2f316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:ca:f5:f3:70:5c:04:60:bf:00:f5:07:a5:
8f:fb:9f:43:67:d8:e4:d5:d1:92:9f:d6:17:99:dd:
76:42:b4:4e:52:1c:80:b3:05:3e:27:5c:6d:8d:f8:
8e:f8:5c:2e:65:fc:94:6a:eb:be:8a:4c:c5:fa:cf:
cc:87:c0:e3:9a:31:93:ad:55:27:85:50:ea:57:22:
b4:08:0c:2b:e1:b8:f3:04:85:6d:88:e6:36:f6:54:
56:f5:12:36:c4:ce:49:7f:d1:58:54:23:7a:bf:aa:
99:10:b6:77:69:7c:35:72:02:b7:30:c5:87:4e:1c:
0f:65:ab:e8:cf:13:a6:54:9b:b8:f3:7f:1c:72:c9:
78:d3:7c:3c:2b:8d:9c:13:27:92:ed:9a:5c:2e:e5:
f5:49:28:30:26:47:58:ee:e8:98:e5:6f:15:fd:07:
37:1e:ac:5a:92:18:a3:25:32:9e:d0:54:44:b9:c4:
83:76:96:20:cc:79:4b:37:fb:4c:41:11:27:7a:8c:
7a:fb:12:a9:3a:0a:77:9a:41:fc:6c:02:2a:48:82:
82:0e:5c:ce:ee:c8:77:f9:f3:c1:68:ed:eb:f2:c0:
3e:41:0c:9a:4b:16:53:e5:37:2b:fd:14:bd:a6:cf:
d6:90:ca:8b:18:67:2c:0f:15:fc:54:09:16:64:7c:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:D2:DB:85:1C:12:76:E3:13:BC:43:0E:EE:B2:F5:D3:B2:F3:16
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ae:b0:74:80:d8:10:41:bf:a6:fb:26:41:a0:50:df:f1:f8:
91:6b:60:79:64:93:43:bf:8f:b7:b0:fa:ed:7f:a0:47:ca:90:
6d:93:2e:5f:ab:64:87:1c:f4:69:22:78:09:69:60:de:10:a8:
e5:9d:c0:8d:a2:4f:14:ae:85:7f:d8:6a:2c:5e:eb:6d:c9:3b:
5b:0c:43:c2:35:9b:84:a1:0c:b8:25:f8:30:65:4c:e2:5d:1e:
63:83:8c:d1:4b:3d:47:56:1c:3c:c3:79:80:02:25:3e:d0:cd:
f5:e9:1b:14:68:72:10:0f:71:14:12:6d:e7:bb:55:a8:26:37:
a6:0a:63:7c:fb:43:43:25:61:14:e2:41:98:f0:03:4e:b3:68:
6d:52:22:b2:27:77:57:47:ad:49:60:76:43:d0:c1:37:bf:ce:
0e:93:f8:7b:1e:33:66:d5:b8:95:e3:4c:54:ed:66:1a:ba:6f:
8a:aa:67:d3:17:79:97:24:56:ac:61:5a:e6:de:37:e3:46:aa:
b8:df:ae:0b:9c:aa:e4:20:f7:1e:65:42:c5:3e:dd:dd:29:4d:
85:fb:53:78:0d:0a:fb:2c:5f:f3:33:c8:42:88:62:12:0e:78:
c3:9d:08:41:6e:fe:47:1a:e6:12:b3:12:c2:49:2f:48:9b:de:
e4:49:2d:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebBCUF8PyxErnsT83A6uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx
NGYwYTAwHhcNMjYwNTEyMjMwMDU5WhcNMjYwNTEzMjMwMDU5WjAzMTEwLwYDVQQD
EygzYmZhZDJkYjg1MWMxMjc2ZTMxM2JjNDMwZWVlYjJmNWQzYjJmMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1rK9fNwXARgvwD1B6WP+59DZ9jk
1dGSn9YXmd12QrROUhyAswU+J1xtjfiO+FwuZfyUauu+ikzF+s/Mh8DjmjGTrVUn
hVDqVyK0CAwr4bjzBIVtiOY29lRW9RI2xM5Jf9FYVCN6v6qZELZ3aXw1cgK3MMWH
ThwPZavozxOmVJu4838ccsl403w8K42cEyeS7ZpcLuX1SSgwJkdY7uiY5W8V/Qc3
HqxakhijJTKe0FREucSDdpYgzHlLN/tMQREneox6+xKpOgp3mkH8bAIqSIKCDlzO
7sh3+fPBaO3r8sA+QQyaSxZT5Tcr/RS9ps/WkMqLGGcsDxX8VAkWZHzmGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv60tuFHBJ24xO8Qw7usvXTsvMWMB8GA1UdIwQY
MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt
MzNiZGM3M2VkMGVhLzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh
LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQa6wdIDY
EEG/pvsmQaBQ3/H4kWtgeWSTQ7+Pt7D67X+gR8qQbZMuX6tkhxz0aSJ4CWlg3hCo
5Z3AjaJPFK6Ff9hqLF7rbck7WwxDwjWbhKEMuCX4MGVM4l0eY4OM0Us9R1YcPMN5
gAIlPtDN9ekbFGhyEA9xFBJt57tVqCY3pgpjfPtDQyVhFOJBmPADTrNobVIisid3
V0etSWB2Q9DBN7/ODpP4ex4zZtW4leNMVO1mGrpviqpn0xd5lyRWrGFa5t4340aq
uN+uC5yq5CD3HmVCxT7d3SlNhftTeA0K+yxf8zPIQohiEg54w50IQW7+RxrmErMS
wkkvSJve5EktCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:27:59 2026 by rpki-client