Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: EHFVaQM+sW6d3wKKf2Fgf6leIF5vLGVedITA0SzNcs0=
Subject key identifier: EC:66:25:1D:74:92:4A:63:A6:0A:93:CF:ED:68:CF:52:2D:34:40:39
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 01A0D5023D89375BEA5F0C3D930622306915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 128E
Signing time: Thu 24 Sep 2026 20:01:28 +0000
Manifest this update: Thu 24 Sep 2026 20:01:28 +0000
Manifest next update: Fri 25 Sep 2026 20:01:28 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 1Pg9C8HbOj+pHkU0R3UdFMyeQghizTPSZCzT5thMMxw=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:3d:89:37:5b:ea:5f:0c:3d:93:06:22:30:69:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Sep 24 20:01:28 2026 GMT
Not After : Sep 25 20:01:28 2026 GMT
Subject: CN=ec66251d74924a63a60a93cfed68cf522d344039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:88:0a:13:8f:25:bf:b5:6b:bc:b9:d4:58:
00:30:22:90:04:c2:cb:74:6d:df:3d:e4:56:f3:ce:
55:fa:a2:80:a0:6c:68:be:3d:49:82:89:85:d9:77:
14:c3:0a:3d:39:89:2c:16:d3:76:92:2f:e2:24:40:
d6:7f:89:97:36:5b:59:60:a3:db:21:a7:ad:45:26:
00:1b:5a:92:10:f9:42:0e:19:e0:7a:bd:fb:58:05:
6a:bb:35:4b:6e:a5:2c:6f:03:e4:ae:37:96:66:23:
87:52:ca:1d:45:a6:bb:10:8d:20:90:19:7e:ea:ec:
3a:95:00:54:74:53:ea:a0:d8:9b:42:87:a5:9a:73:
f7:13:47:d6:0d:8a:6f:a5:9b:5b:5a:7a:cf:b9:6a:
c4:ca:22:a0:ae:36:55:ee:37:ab:dd:42:83:9b:5b:
2c:cd:46:e5:de:15:f6:42:63:14:10:72:5e:74:b7:
ba:bd:61:b1:55:e6:a3:cc:31:cc:19:73:56:ea:b2:
3c:4b:3d:33:cb:df:44:a5:74:38:6c:38:fa:f5:86:
b4:dd:86:7f:1f:d6:d6:f4:25:ef:c5:d5:aa:2f:d1:
2b:05:d9:43:ae:ea:53:59:a3:2e:c3:22:ca:ea:b4:
f6:cd:08:23:de:fa:7e:f1:df:42:14:e3:6c:29:30:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:25:1D:74:92:4A:63:A6:0A:93:CF:ED:68:CF:52:2D:34:40:39
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:5d:86:bc:9d:98:57:07:7a:41:ab:11:b7:60:b1:c8:d0:
88:18:48:aa:fe:13:34:9d:b6:2f:95:a1:61:86:93:31:c4:55:
34:12:fe:71:be:eb:af:03:6e:e3:83:05:a6:98:95:73:a9:9f:
b3:e3:6e:68:25:7b:89:07:2a:90:bb:78:09:50:17:15:cd:70:
41:79:6b:3e:13:3a:0c:e9:b2:d7:6d:0f:53:ed:43:14:ea:39:
26:3f:e7:5a:a6:b9:05:34:28:e7:53:a7:28:76:a6:5c:83:f8:
26:c7:09:9f:6c:3e:c6:23:45:1f:9d:17:be:0d:f8:05:b6:7e:
fb:50:7d:cf:77:ae:ff:62:d3:ca:a8:19:0d:e4:8e:87:0b:2d:
50:64:52:df:a1:fb:a7:d0:68:36:c8:85:2c:f6:9d:51:b6:20:
bb:7d:02:65:a0:b0:02:56:3c:91:1e:dc:e4:af:59:14:f7:f2:
4c:c9:85:96:c0:b6:dc:7f:2a:15:57:e0:05:b4:ea:22:4e:e7:
f1:2c:52:e6:b9:db:92:e6:bd:6f:1e:c3:43:ec:f2:37:9a:f8:
2d:56:54:c5:98:10:42:10:15:6e:89:55:1e:71:d8:50:df:29:
36:06:db:6c:57:68:fa:4a:40:33:e8:35:55:67:0a:6a:5e:55:
f3:49:ab:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAj2JN1vqXww9kwYiMGkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjYwOTI0MjAwMTI4WhcNMjYwOTI1MjAwMTI4WjAzMTEwLwYDVQQD
EyhlYzY2MjUxZDc0OTI0YTYzYTYwYTkzY2ZlZDY4Y2Y1MjJkMzQ0MDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2caIChOPJb+1a7y51FgAMCKQBMLL
dG3fPeRW885V+qKAoGxovj1JgomF2XcUwwo9OYksFtN2ki/iJEDWf4mXNltZYKPb
IaetRSYAG1qSEPlCDhnger37WAVquzVLbqUsbwPkrjeWZiOHUsodRaa7EI0gkBl+
6uw6lQBUdFPqoNibQoelmnP3E0fWDYpvpZtbWnrPuWrEyiKgrjZV7jer3UKDm1ss
zUbl3hX2QmMUEHJedLe6vWGxVeajzDHMGXNW6rI8Sz0zy99EpXQ4bDj69Ya03YZ/
H9bW9CXvxdWqL9ErBdlDrupTWaMuwyLK6rT2zQgj3vp+8d9CFONsKTCXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxmJR10kkpjpgqTz+1oz1ItNEA5MB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHJdhryd
mFcHekGrEbdgscjQiBhIqv4TNJ22L5WhYYaTMcRVNBL+cb7rrwNu44MFppiVc6mf
s+NuaCV7iQcqkLt4CVAXFc1wQXlrPhM6DOmy120PU+1DFOo5Jj/nWqa5BTQo51On
KHamXIP4JscJn2w+xiNFH50Xvg34BbZ++1B9z3eu/2LTyqgZDeSOhwstUGRS36H7
p9BoNsiFLPadUbYgu30CZaCwAlY8kR7c5K9ZFPfyTMmFlsC23H8qFVfgBbTqIk7n
8SxS5rnbkua9bx7DQ+zyN5r4LVZUxZgQQhAVbolVHnHYUN8pNgbbbFdo+kpAM+g1
VWcKal5V80mruQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:49:28 2026 by rpki-client