Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: fC86iWWpxLDONz0UVnZF3yRG2VP/x5Drws0WW2jiwBQ=
Subject key identifier: D2:3A:12:1C:3B:B3:62:23:D3:07:FB:12:AD:54:9C:2F:DB:19:8C:CE
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019D273B2E6B442007295E36B1FB908D3130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 0974
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: QXSjs945VU/jTO1+S7EAnbols7WRdRNJGg/2N1fmsdQ=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
4: laGYyUqPK3fHCKoz7nqL0OXT2Eo.roa (hash: Lwh1rsMavQm34P2hRAMjpx40Roi5BFidjgw/3tt2hhE=)
5: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
6: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2e:6b:44:20:07:29:5e:36:b1:fb:90:8d:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=d23a121c3bb36223d307fb12ad549c2fdb198cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:03:ad:51:df:31:23:7a:0e:c2:c0:e1:cc:
07:d4:57:cb:66:09:2c:60:9f:be:b7:fd:dc:f0:04:
44:e2:de:9f:97:cf:15:98:ce:ae:1e:3f:55:9e:a7:
2f:07:14:7f:8d:2a:5a:cb:b7:8c:25:25:7d:4d:20:
58:40:ed:6a:ae:d3:d6:bf:c3:5a:7e:78:28:06:b9:
ad:fa:d2:89:bc:88:9b:36:13:17:a3:27:e7:0d:96:
26:80:1c:23:71:0b:a2:54:48:91:ba:2a:2a:86:6f:
f3:90:5a:12:47:a8:d2:e2:9b:1c:7e:f8:a4:f2:e3:
ae:01:8c:d1:ce:0f:d4:bb:42:c2:23:83:ed:f1:0a:
b0:e3:1d:f0:68:1e:50:04:36:60:32:3a:2f:de:8b:
b3:7f:3d:11:3b:98:61:bc:a3:0c:43:a0:aa:50:0d:
14:85:28:3d:44:70:72:61:61:08:51:75:cf:1d:7e:
93:74:07:a1:78:18:ee:c6:76:91:2f:6b:2c:94:bc:
b1:98:3f:0a:76:86:d0:da:ba:44:07:0c:f3:6f:39:
f9:b1:ff:97:1d:e7:5c:3a:5f:f7:1f:6f:cf:b7:9c:
56:59:bd:d3:e7:17:da:cc:4d:3a:cf:bb:2c:83:75:
24:bc:73:8a:3f:8a:30:1b:9d:80:49:00:0b:29:63:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3A:12:1C:3B:B3:62:23:D3:07:FB:12:AD:54:9C:2F:DB:19:8C:CE
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fd:af:54:12:bf:29:5c:fb:3c:c3:3c:3f:62:b9:d0:f0:6e:
e6:5c:1a:d7:e0:fd:cb:07:2e:36:38:0a:90:77:b5:c0:d1:ea:
b8:86:38:30:24:7f:83:97:f5:b5:a3:fb:a9:d4:97:92:8c:86:
ac:04:b8:79:8f:0c:9d:8b:8c:04:0a:e8:b1:29:da:49:73:08:
5a:7d:2e:55:f0:c3:11:aa:dc:64:2f:2c:9d:2d:bb:b7:4f:87:
24:25:c6:d9:4b:ae:6c:4c:b3:3a:11:32:dd:79:fa:fc:6f:ab:
6e:75:c8:81:6c:9b:e7:e0:4e:8e:32:b6:7c:8b:ef:8c:00:69:
49:a1:e4:6c:06:3b:6d:2e:53:62:e8:ba:95:22:d9:a8:3f:54:
38:f2:8f:ba:03:97:46:ad:3a:fe:70:83:8e:c8:8d:ac:4b:7f:
c8:c2:76:e0:23:7e:a4:7a:83:f5:88:93:6f:a6:a2:a4:2a:93:
bc:70:8d:c4:70:1d:98:bd:7a:a5:fb:77:a8:27:45:8f:3c:df:
e1:ae:df:ed:6d:aa:b0:5e:0c:8b:6a:f9:d7:f4:2a:70:57:cb:
44:b9:2c:b1:fa:2e:eb:d9:c2:1b:b5:af:57:2b:91:c0:33:31:
26:5f:9f:a4:40:76:55:c1:f7:11:50:d5:64:3a:66:83:e4:74:
fb:d5:a0:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOy5rRCAHKV42sfuQjTEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGU1OTJhMmUwZDQyN2EwOWFhMmRlMWI5YmFmMDhjY2Qx
NGYwYTAwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
EyhkMjNhMTIxYzNiYjM2MjIzZDMwN2ZiMTJhZDU0OWMyZmRiMTk4Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLIDrVHfMSN6DsLA4cwH1FfLZgks
YJ++t/3c8ARE4t6fl88VmM6uHj9VnqcvBxR/jSpay7eMJSV9TSBYQO1qrtPWv8Na
fngoBrmt+tKJvIibNhMXoyfnDZYmgBwjcQuiVEiRuioqhm/zkFoSR6jS4pscfvik
8uOuAYzRzg/Uu0LCI4Pt8Qqw4x3waB5QBDZgMjov3ouzfz0RO5hhvKMMQ6CqUA0U
hSg9RHByYWEIUXXPHX6TdAeheBjuxnaRL2sslLyxmD8KdobQ2rpEBwzzbzn5sf+X
HedcOl/3H2/Pt5xWWb3T5xfazE06z7ssg3UkvHOKP4owG52ASQALKWP1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI6Ehw7s2Ij0wf7Eq1UnC/bGYzOMB8GA1UdIwQY
MBaAFAkOWSouDUJ6Caot4bm68IzNFPCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYt
MzNiZGM3M2VkMGVhLzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xNWY2OTAtNWFkZC00NzBkLWEyODYtMzNiZGM3M2VkMGVh
LzEvQ1E1WktpNE5Rbm9KcWkzaHVicndqTTBVOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP2vVBK/
KVz7PMM8P2K50PBu5lwa1+D9ywcuNjgKkHe1wNHquIY4MCR/g5f1taP7qdSXkoyG
rAS4eY8MnYuMBArosSnaSXMIWn0uVfDDEarcZC8snS27t0+HJCXG2UuubEyzOhEy
3Xn6/G+rbnXIgWyb5+BOjjK2fIvvjABpSaHkbAY7bS5TYui6lSLZqD9UOPKPugOX
Rq06/nCDjsiNrEt/yMJ24CN+pHqD9YiTb6aipCqTvHCNxHAdmL16pft3qCdFjzzf
4a7f7W2qsF4Mi2r51/QqcFfLRLkssfou69nCG7WvVyuRwDMxJl+fpEB2VcH3EVDV
ZDpmg+R0+9WgiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:14 2026 by rpki-client