Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
File: CQKHJW4l-jQNOvungOrGDVVq3sA.mft (raw, json)
Hash identifier: FQ6NWtINPvq+uPR+xUjOYIJVJwRG26bxc6CaXiLDH5Y=
Subject key identifier: E0:39:2B:66:8E:E8:6A:47:A6:F9:3A:05:9E:E8:F3:52:BE:84:AD:1A
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 019F90C7ABEB8F50DC71FF8EF9E296375B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
Manifest number: 0CE3
Signing time: Thu 23 Jul 2026 21:00:32 +0000
Manifest this update: Thu 23 Jul 2026 21:00:32 +0000
Manifest next update: Fri 24 Jul 2026 21:00:32 +0000
Files and hashes: 1: 4TWnkEehYGPz8S3MxMCECSR21Hk.roa (hash: n3+/E4ft5KJ8lIw6jVs8x5Mt/ftJJPREMORWJ+SrYKM=)
2: CQKHJW4l-jQNOvungOrGDVVq3sA.crl (hash: zopjBiEyTNSQJqPYzniQNR4YyNVuW9yBqZBti924UY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ab:eb:8f:50:dc:71:ff:8e:f9:e2:96:37:5b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Jul 23 21:00:32 2026 GMT
Not After : Jul 24 21:00:32 2026 GMT
Subject: CN=e0392b668ee86a47a6f93a059ee8f352be84ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:21:c4:5f:c3:40:2c:bb:ea:ef:6d:ee:f6:
2e:8d:76:b3:87:52:68:b6:10:56:5e:a3:c8:d9:28:
3b:0a:49:63:f3:d7:68:e0:20:8c:45:26:e9:d1:74:
93:6a:d8:da:6f:cb:6e:ab:36:e3:ef:32:98:be:01:
fa:e1:85:3d:b1:fb:92:33:af:69:8f:34:ff:54:a8:
ef:f6:c7:ab:c1:3d:d8:ef:30:fa:12:01:ef:14:bc:
a6:6c:3f:6a:f4:69:9d:3f:e7:74:ba:a0:af:9f:b1:
83:04:ae:0e:91:4f:69:c1:72:f1:34:d5:50:e0:7e:
80:72:8a:b4:1d:ce:e1:a6:a9:39:7b:33:7d:b4:df:
73:53:51:61:bd:fb:43:69:11:4e:e5:a1:55:4e:f4:
15:18:41:45:cb:b6:4c:d9:32:fe:f1:f2:1e:ee:24:
0f:22:a9:06:45:fa:9a:2b:c6:3d:62:05:f9:e6:1c:
9d:3c:8d:72:c5:2c:90:86:a7:0d:1c:28:6a:8c:35:
5d:04:55:20:82:e9:cc:5f:57:32:30:0a:2d:30:b9:
6f:f7:5e:c5:0a:00:d9:30:23:9c:9e:8d:30:81:94:
c5:be:2a:15:d8:c5:f3:69:c9:d1:53:ce:1c:84:b7:
6c:fc:98:db:76:03:fa:ee:98:2a:55:8b:17:88:b2:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:2B:66:8E:E8:6A:47:A6:F9:3A:05:9E:E8:F3:52:BE:84:AD:1A
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:ad:26:fc:76:12:d6:42:62:71:f2:13:9d:66:c9:21:44:
ef:4a:5a:52:0c:93:e6:28:82:42:33:e9:13:94:a8:7d:e4:43:
82:d0:fb:2f:cc:c7:c5:ad:2a:c8:97:ec:fa:87:25:f3:71:a5:
6e:62:a5:ea:4d:06:2d:9a:f9:5a:1c:51:fc:72:72:b4:2a:81:
b5:3d:43:49:6a:f1:8c:e8:1e:e1:39:61:2f:6e:65:14:8c:f2:
36:d2:2b:3a:e3:91:c4:6a:0f:a2:14:4e:6c:2b:ad:90:52:7c:
f1:6e:29:d4:07:40:87:65:85:a0:49:03:06:6f:f1:b9:37:2f:
13:5d:24:c2:12:40:11:11:1b:aa:d4:bd:d4:06:11:5f:57:4f:
18:6d:92:d5:ce:ab:de:cf:46:5d:39:bd:a4:6c:29:bc:88:06:
6a:25:49:57:02:b0:cf:7f:0c:db:1f:c0:ad:4d:88:24:4e:ed:
31:d0:a1:c4:4b:7a:77:c6:93:c2:9f:5e:51:0f:92:50:c8:ea:
e9:f6:4d:19:37:f5:30:cd:09:06:6e:6b:0e:24:28:d8:8f:c7:
53:79:3b:0d:d5:e9:c5:3a:fb:2d:67:7b:05:a0:47:32:1f:f7:
c1:55:fd:6a:51:89:79:d4:f4:57:f2:8f:ad:1f:9c:af:60:6f:
2d:00:fe:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx6vrj1Dccf+O+eKWN1swMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDI4NzI1NmUyNWZhMzQwZDNhZmJhNzgwZWFjNjBkNTU2
YWRlYzAwHhcNMjYwNzIzMjEwMDMyWhcNMjYwNzI0MjEwMDMyWjAzMTEwLwYDVQQD
EyhlMDM5MmI2NjhlZTg2YTQ3YTZmOTNhMDU5ZWU4ZjM1MmJlODRhZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSIhxF/DQCy76u9t7vYujXazh1Jo
thBWXqPI2Sg7Cklj89do4CCMRSbp0XSTatjab8tuqzbj7zKYvgH64YU9sfuSM69p
jzT/VKjv9serwT3Y7zD6EgHvFLymbD9q9GmdP+d0uqCvn7GDBK4OkU9pwXLxNNVQ
4H6Acoq0Hc7hpqk5ezN9tN9zU1FhvftDaRFO5aFVTvQVGEFFy7ZM2TL+8fIe7iQP
IqkGRfqaK8Y9YgX55hydPI1yxSyQhqcNHChqjDVdBFUggunMX1cyMAotMLlv917F
CgDZMCOcno0wgZTFvioV2MXzacnRU84chLds/JjbdgP67pgqVYsXiLLJAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA5K2aO6GpHpvk6BZ7o81K+hK0aMB8GA1UdIwQY
MBaAFAkChyVuJfo0DTr7p4Dqxg1Vat7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWIt
NzdiMjFjMDRiYzdkLzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWItNzdiMjFjMDRiYzdk
LzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUatJvx2
EtZCYnHyE51mySFE70paUgyT5iiCQjPpE5SofeRDgtD7L8zHxa0qyJfs+ocl83Gl
bmKl6k0GLZr5WhxR/HJytCqBtT1DSWrxjOge4TlhL25lFIzyNtIrOuORxGoPohRO
bCutkFJ88W4p1AdAh2WFoEkDBm/xuTcvE10kwhJAEREbqtS91AYRX1dPGG2S1c6r
3s9GXTm9pGwpvIgGaiVJVwKwz38M2x/ArU2IJE7tMdChxEt6d8aTwp9eUQ+SUMjq
6fZNGTf1MM0JBm5rDiQo2I/HU3k7DdXpxTr7LWd7BaBHMh/3wVX9alGJedT0V/KP
rR+cr2BvLQD+7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:33 2026 by rpki-client