Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
File: CQKHJW4l-jQNOvungOrGDVVq3sA.mft (raw, json)
Hash identifier: yPuvczWlKNcQqfxZRaRagbKn/AO7n3UoEGCn1qLAPtQ=
Subject key identifier: 12:AA:F4:A0:12:24:3D:CB:BA:E3:AB:80:33:67:38:C0:70:22:94:D5
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 01A0CF6D451AD0E17C82B15AC120427F157B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
Manifest number: 0D88
Signing time: Wed 23 Sep 2026 18:00:39 +0000
Manifest this update: Wed 23 Sep 2026 18:00:39 +0000
Manifest next update: Thu 24 Sep 2026 18:00:39 +0000
Files and hashes: 1: 4TWnkEehYGPz8S3MxMCECSR21Hk.roa (hash: n3+/E4ft5KJ8lIw6jVs8x5Mt/ftJJPREMORWJ+SrYKM=)
2: CQKHJW4l-jQNOvungOrGDVVq3sA.crl (hash: MbBOSsvXM3PSe5vRUgc1uX0mkMnmg2NM2kmaSjzkSaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:45:1a:d0:e1:7c:82:b1:5a:c1:20:42:7f:15:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Sep 23 18:00:39 2026 GMT
Not After : Sep 24 18:00:39 2026 GMT
Subject: CN=12aaf4a012243dcbbae3ab80336738c0702294d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:a8:ec:b3:ed:a7:ef:db:32:11:c7:9f:75:
69:df:96:27:9d:80:29:3a:cb:c7:7c:08:5f:ce:dc:
fa:b2:dd:ae:e8:5a:a5:8c:56:08:81:2f:f0:f3:ac:
18:e1:b9:9b:01:ec:03:37:68:8f:4e:09:c3:00:01:
18:cc:52:20:41:1a:88:4e:22:62:45:b7:eb:e8:d5:
9e:8a:cc:49:f7:e8:2a:c4:33:c4:27:b5:35:83:30:
a5:f3:02:cc:e6:54:34:23:4c:ae:86:ee:69:2f:e4:
68:8a:2a:33:df:5e:b8:5d:0d:de:b4:32:2d:07:99:
1a:9f:2f:60:5a:f1:b5:51:c5:2e:7f:28:30:4a:c6:
94:8f:47:ef:32:03:0f:ca:bc:9d:a7:b2:94:17:c0:
da:ec:a9:4c:0a:18:de:64:1a:6f:4b:52:78:a7:cd:
d5:c4:94:c3:90:56:78:f8:5c:a1:12:85:54:6a:c3:
5b:87:9e:73:f8:37:8b:74:09:05:12:79:99:46:d0:
af:fd:83:07:dd:a7:87:90:3d:d6:8c:fe:4c:46:24:
7f:eb:f0:e4:69:63:9e:51:ba:5e:15:2e:53:85:cc:
7d:f1:0f:ee:8d:c4:35:ee:8f:37:6a:64:78:39:ea:
54:e3:24:87:4e:e2:18:12:cb:18:b9:8d:89:e7:d7:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:F4:A0:12:24:3D:CB:BA:E3:AB:80:33:67:38:C0:70:22:94:D5
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3d:4e:e0:18:b4:ed:19:59:d0:f3:d3:84:ba:19:69:2e:c6:
4a:bc:59:4b:be:71:ef:47:72:4d:c1:b1:43:46:7b:2e:6b:c4:
d8:bb:4f:99:80:ed:b4:7c:a7:11:d9:ca:0a:87:7a:25:6e:ec:
37:72:1a:25:ca:72:5d:14:fc:5f:25:ba:c4:40:26:b0:9f:57:
96:e9:73:e0:32:f7:be:18:df:37:e4:a6:39:de:a5:ea:82:1f:
58:17:5f:35:c6:ea:29:dc:e7:62:77:3c:9c:c0:65:be:2d:ac:
02:4b:75:a0:ce:02:f3:79:f6:64:55:1b:36:2e:f9:f4:e8:96:
30:b0:ff:82:fa:61:6d:c0:cd:1b:b3:41:4f:18:7a:fa:72:5c:
06:86:7c:c9:a6:92:38:37:7e:af:50:07:66:6a:cb:d8:33:61:
15:92:bc:75:fb:25:6f:57:20:44:fe:6f:df:41:24:a9:4c:5e:
a6:28:f5:f1:68:81:8d:61:9a:f3:cb:fb:e8:b3:dd:28:19:49:
fd:1b:74:42:1d:ea:82:fc:57:0b:13:6e:25:10:1e:a1:60:3e:
a0:5a:fc:2b:78:b1:48:ef:46:af:bf:b5:f2:9f:dc:30:40:7f:
d1:80:e8:cb:5a:32:d3:97:ca:1a:96:00:b9:85:ec:7f:f9:40:
ef:ec:e0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbUUa0OF8grFawSBCfxV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDI4NzI1NmUyNWZhMzQwZDNhZmJhNzgwZWFjNjBkNTU2
YWRlYzAwHhcNMjYwOTIzMTgwMDM5WhcNMjYwOTI0MTgwMDM5WjAzMTEwLwYDVQQD
EygxMmFhZjRhMDEyMjQzZGNiYmFlM2FiODAzMzY3MzhjMDcwMjI5NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrKo7LPtp+/bMhHHn3Vp35YnnYAp
OsvHfAhfztz6st2u6FqljFYIgS/w86wY4bmbAewDN2iPTgnDAAEYzFIgQRqITiJi
Rbfr6NWeisxJ9+gqxDPEJ7U1gzCl8wLM5lQ0I0yuhu5pL+Roiioz3164XQ3etDIt
B5kany9gWvG1UcUufygwSsaUj0fvMgMPyrydp7KUF8Da7KlMChjeZBpvS1J4p83V
xJTDkFZ4+FyhEoVUasNbh55z+DeLdAkFEnmZRtCv/YMH3aeHkD3WjP5MRiR/6/Dk
aWOeUbpeFS5Thcx98Q/ujcQ17o83amR4OepU4ySHTuIYEssYuY2J59fe3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKq9KASJD3LuuOrgDNnOMBwIpTVMB8GA1UdIwQY
MBaAFAkChyVuJfo0DTr7p4Dqxg1Vat7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWIt
NzdiMjFjMDRiYzdkLzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81YjBmZjUtODRjMy00OWJiLTlmYWItNzdiMjFjMDRiYzdk
LzEvQ1FLSEpXNGwtalFOT3Z1bmdPckdEVlZxM3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez1O4Bi0
7RlZ0PPThLoZaS7GSrxZS75x70dyTcGxQ0Z7LmvE2LtPmYDttHynEdnKCod6JW7s
N3IaJcpyXRT8XyW6xEAmsJ9Xlulz4DL3vhjfN+SmOd6l6oIfWBdfNcbqKdznYnc8
nMBlvi2sAkt1oM4C83n2ZFUbNi759OiWMLD/gvphbcDNG7NBTxh6+nJcBoZ8yaaS
ODd+r1AHZmrL2DNhFZK8dfslb1cgRP5v30EkqUxepij18WiBjWGa88v76LPdKBlJ
/Rt0Qh3qgvxXCxNuJRAeoWA+oFr8K3ixSO9Gr7+18p/cMEB/0YDoy1oy05fKGpYA
uYXsf/lA7+zgZA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:09 2026 by rpki-client