Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: BZuu3RCwGVuCQfoCNMdKym6oRYDeCYVGqN86ju5VX54=
Subject key identifier: 59:67:CC:48:00:69:00:C9:55:FC:09:04:CD:B1:67:0C:70:56:01:C5
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 01A0E7AF04C7731776878253CD7EC6BF2E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 0B67
Signing time: Mon 28 Sep 2026 11:03:21 +0000
Manifest this update: Mon 28 Sep 2026 11:03:21 +0000
Manifest next update: Tue 29 Sep 2026 11:03:21 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: Vc2xZ/Y0nFp6wrO07VJqzyC3ZCpXL/DPYgt2Z4PgwVY=)
2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
3: ePY7pKo_r6F5r4kushtbD4C6B8c.roa (hash: OOhXQHhG608Rk4uBCg7UcjZxEcLM+GjApQwGOTyy+Xk=)
4: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
5: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
6: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:04:c7:73:17:76:87:82:53:cd:7e:c6:bf:2e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Sep 28 11:03:21 2026 GMT
Not After : Sep 29 11:03:21 2026 GMT
Subject: CN=5967cc48006900c955fc0904cdb1670c705601c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:69:1b:a0:53:2c:60:53:ee:58:65:bb:d1:
cf:1e:f4:fa:ba:7f:11:c3:98:a8:af:93:de:f9:ec:
32:6b:17:aa:0b:72:4b:93:37:da:c1:99:19:6a:7e:
0a:60:18:60:f8:53:b1:70:3e:89:d2:d4:93:cf:3c:
df:86:d9:ed:58:46:84:81:4d:0f:7e:e8:26:1b:a7:
ce:81:f2:94:d8:57:01:20:c4:a9:39:da:73:e2:6c:
1c:ad:6c:13:46:1b:86:d9:80:ba:51:ea:af:dd:ce:
38:7b:9b:89:be:ae:37:6d:79:de:74:5a:69:ce:2d:
60:3a:57:31:bc:65:a3:08:d7:b4:a4:a9:70:f8:b7:
b4:a0:3d:14:16:c1:b5:8a:f1:20:7c:b7:e2:ee:4e:
eb:7a:6f:30:b6:85:2d:d7:d7:c7:d5:4c:f8:49:55:
77:55:4c:a2:8f:63:46:d4:cf:8f:16:72:07:95:db:
c6:99:27:ee:76:1f:74:5c:13:10:c8:f2:79:f6:24:
99:37:f3:1e:0f:da:83:ea:95:83:9f:5a:0d:61:4c:
60:51:43:28:c5:1e:c7:70:8a:a4:ac:9a:b1:4f:ed:
57:2d:ac:05:fe:08:9d:61:fc:17:c2:65:01:a4:3a:
52:ae:f0:2c:64:9c:b0:15:94:12:c5:89:32:e5:aa:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:CC:48:00:69:00:C9:55:FC:09:04:CD:B1:67:0C:70:56:01:C5
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:8d:6b:9e:2a:38:6f:6a:0f:f5:f0:6d:2c:bf:88:e7:bb:
d1:b7:8a:02:f3:ef:d1:af:fb:5d:1f:64:9b:2d:ab:d4:3a:e3:
31:8b:de:d6:77:07:4d:1b:9f:df:4c:65:e7:d8:ab:24:74:0c:
3c:51:3b:84:db:63:86:46:d7:f4:2b:0d:39:3c:bc:c1:e0:7a:
fa:e3:cb:cb:fd:d1:e9:3b:36:6b:e8:be:42:45:7d:3c:c8:7b:
4f:bd:27:56:d1:ef:19:67:cf:5d:b3:08:22:77:f3:92:fc:c4:
26:14:09:e3:86:c2:56:24:61:73:af:1d:80:72:87:5c:be:db:
ab:25:df:12:53:34:f2:99:43:70:46:33:cd:1a:d2:43:08:d9:
22:50:ff:8b:4b:8e:35:0d:a9:36:46:c8:f5:cf:a9:f4:c0:7d:
6b:2c:4d:e8:b6:72:84:5b:87:b6:a3:f5:6f:3a:cc:ba:86:73:
be:71:3e:d4:4d:bf:ea:ea:0a:d5:82:15:46:ed:bb:fd:9d:7b:
eb:f6:8c:ad:a5:6e:e7:e9:a3:68:d9:24:14:77:dc:a6:d6:4e:
d3:6e:56:7a:35:8f:a1:03:08:54:a5:14:bb:d6:f5:1f:dd:68:
46:73:11:6d:a9:3d:ed:4d:4e:bc:5c:e4:de:c3:04:b7:dc:8b:
1c:18:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:41:22 2026 by rpki-client