Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: noRSGm3Zc0PxepRsRgAaoTkI1e9Z0SizYMN+UqlsgDI=
Subject key identifier: 41:F9:9B:A2:A5:91:67:A4:FE:9A:48:2F:9B:ED:43:34:16:8E:50:42
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 01A12AD6E295ED741C1E05E601C2304DE565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 12:01:28 +0000
Manifest this update: Sun 11 Oct 2026 12:01:28 +0000
Manifest next update: Mon 12 Oct 2026 12:01:28 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: yp/G4rmMhJUphasK/mSjYKXXg7l4+AmSbeWjOYcsVLc=)
2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:e2:95:ed:74:1c:1e:05:e6:01:c2:30:4d:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Oct 11 12:01:28 2026 GMT
Not After : Oct 12 12:01:28 2026 GMT
Subject: CN=41f99ba2a59167a4fe9a482f9bed4334168e5042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:74:a4:f0:c9:f1:c0:4b:98:f2:75:9a:72:
54:31:e6:a4:79:5b:db:d1:9e:5e:08:5b:ba:4f:35:
3a:58:d8:c3:69:dd:a2:aa:54:27:a7:0c:ed:3b:51:
47:40:85:ef:3b:21:a2:d9:ba:c3:37:46:d2:ae:6a:
6c:af:5d:e9:48:e2:08:c3:6e:30:a1:cb:0d:12:65:
da:56:51:43:1f:82:e6:f8:a6:cd:c9:4d:8d:03:35:
71:e9:a7:0b:fc:3f:eb:85:02:88:08:e8:1a:38:06:
c1:24:f3:07:7e:01:3d:ca:5b:7d:7c:51:c2:a4:6a:
03:a1:f7:5d:cf:2e:4b:c1:f4:14:49:1e:4d:f6:3b:
5e:24:9f:c8:ef:9b:9a:51:e5:dc:4d:cf:6d:84:83:
7d:41:9a:36:b3:7f:ad:30:05:82:7a:e3:0c:6a:b8:
08:6e:43:c4:8a:ff:99:22:c7:e4:42:a9:0b:21:12:
7e:47:2a:3e:35:d7:77:ff:d9:97:ea:b3:eb:e5:c0:
3d:ee:b5:73:39:d6:b5:94:95:d5:08:ee:df:2e:fe:
4b:e0:78:5f:7f:8f:88:1b:c7:e3:63:0b:5f:de:d0:
40:b1:40:48:a0:1a:37:18:52:7e:da:62:69:08:9a:
e5:62:a0:54:0d:0d:1d:40:ce:74:80:15:1e:45:12:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F9:9B:A2:A5:91:67:A4:FE:9A:48:2F:9B:ED:43:34:16:8E:50:42
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:47:bf:fe:8b:78:20:dc:88:8d:57:2c:91:2e:4c:77:66:ff:
54:d1:ed:d6:24:fb:5c:96:ef:c9:db:d3:af:b9:9c:b6:2b:54:
3f:1f:a1:37:14:bd:80:21:6e:3b:5a:d8:34:24:fa:e7:bf:71:
ab:ed:8e:ab:9c:0b:90:f2:95:0e:4f:3a:89:b5:4d:e5:97:66:
e2:0c:fa:af:54:3b:43:ab:d2:d7:24:de:42:82:74:c2:27:9e:
14:e0:93:87:c8:83:67:2f:83:96:ea:4a:1d:da:21:64:e4:f2:
bc:21:d6:e2:64:a7:2a:a4:73:45:34:f4:5e:4f:0b:cd:99:d7:
c8:36:c5:2f:fd:49:56:a3:e4:f6:2b:b6:26:cb:68:3c:06:f3:
45:74:ed:94:0a:73:8d:4a:31:bb:ed:d1:6b:e4:3a:58:29:c4:
18:52:9b:27:b8:db:07:a5:9c:66:59:e6:a5:c9:57:bc:65:14:
13:db:02:a9:fd:9e:ad:35:94:5c:65:28:79:da:92:22:60:c5:
a4:ab:48:a4:c3:65:52:7a:34:e6:a4:53:d3:02:ec:d0:fc:f5:
93:32:c4:c7:0d:cc:ae:2f:ee:a6:90:75:55:6f:6c:39:03:20:
a3:d4:5a:ce:11:14:4c:a4:10:9e:15:98:cb:a4:0e:cb:b3:53:
5f:22:c1:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1uKV7XQcHgXmAcIwTeVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MDgyMDRkN2NmNWJjNGFhYjM4ZmZhMzlkYTNhNjgxZWQy
MTdiZDQwHhcNMjYxMDExMTIwMTI4WhcNMjYxMDEyMTIwMTI4WjAzMTEwLwYDVQQD
Eyg0MWY5OWJhMmE1OTE2N2E0ZmU5YTQ4MmY5YmVkNDMzNDE2OGU1MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSd0pPDJ8cBLmPJ1mnJUMeakeVvb
0Z5eCFu6TzU6WNjDad2iqlQnpwztO1FHQIXvOyGi2brDN0bSrmpsr13pSOIIw24w
ocsNEmXaVlFDH4Lm+KbNyU2NAzVx6acL/D/rhQKICOgaOAbBJPMHfgE9ylt9fFHC
pGoDofddzy5LwfQUSR5N9jteJJ/I75uaUeXcTc9thIN9QZo2s3+tMAWCeuMMargI
bkPEiv+ZIsfkQqkLIRJ+Ryo+Ndd3/9mX6rPr5cA97rVzOda1lJXVCO7fLv5L4Hhf
f4+IG8fjYwtf3tBAsUBIoBo3GFJ+2mJpCJrlYqBUDQ0dQM50gBUeRRJMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH5m6KlkWek/ppIL5vtQzQWjlBCMB8GA1UdIwQY
MBaAFAkIIE189bxKqzj/o52jpoHtIXvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjIt
ODgyM2YxMTFkZjA3LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjItODgyM2YxMTFkZjA3
LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArke//ot4
INyIjVcskS5Md2b/VNHt1iT7XJbvydvTr7mctitUPx+hNxS9gCFuO1rYNCT6579x
q+2Oq5wLkPKVDk86ibVN5Zdm4gz6r1Q7Q6vS1yTeQoJ0wieeFOCTh8iDZy+DlupK
HdohZOTyvCHW4mSnKqRzRTT0Xk8LzZnXyDbFL/1JVqPk9iu2JstoPAbzRXTtlApz
jUoxu+3Ra+Q6WCnEGFKbJ7jbB6WcZlnmpclXvGUUE9sCqf2erTWUXGUoedqSImDF
pKtIpMNlUno05qRT0wLs0Pz1kzLExw3Mri/uppB1VW9sOQMgo9RazhEUTKQQnhWY
y6QOy7NTXyLBiA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:22:27 2026 by rpki-client