Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: 3Im3pfZmu2ix/D+//lyjr8moiy6NhIeUqGPcsyY+y1Q=
Subject key identifier: 1A:1E:09:52:DD:73:20:17:55:CD:97:0F:F6:C4:77:04:5A:00:96:8B
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019F909083C7912882D273D04AA502DCECAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 11E6
Signing time: Thu 23 Jul 2026 20:00:17 +0000
Manifest this update: Thu 23 Jul 2026 20:00:17 +0000
Manifest next update: Fri 24 Jul 2026 20:00:17 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: +Mh55I6ABkWjXj3RRNTQlqQs9xIroz5fWrm+z8zG4R4=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:83:c7:91:28:82:d2:73:d0:4a:a5:02:dc:ec:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jul 23 20:00:17 2026 GMT
Not After : Jul 24 20:00:17 2026 GMT
Subject: CN=1a1e0952dd73201755cd970ff6c477045a00968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:05:bd:a0:59:27:bf:77:99:45:f6:4f:1f:
9b:86:e8:42:e4:79:50:b3:f6:b0:28:f4:fd:65:9d:
6d:30:50:fa:55:5a:90:05:ab:60:79:99:58:b8:d3:
6d:2e:36:84:13:60:00:12:c8:db:54:13:a4:fb:c8:
4d:08:b8:7f:94:49:ae:fd:30:76:82:a8:93:e4:d3:
cb:dc:a6:da:f6:9f:27:4a:23:b2:12:04:ff:de:49:
91:c8:b2:e9:40:b3:0c:72:48:b9:a4:b6:75:0a:98:
c6:bb:9f:44:91:ee:77:f4:14:a7:e9:df:94:4b:a2:
2d:8d:1e:84:c4:68:19:35:bd:bd:44:be:d2:c8:50:
a7:91:00:cd:60:81:79:e5:3c:51:13:51:ec:ea:5a:
9b:5d:a6:47:52:da:31:86:5a:c1:10:6f:44:9d:95:
ad:0b:20:92:43:cd:4d:c0:6b:11:62:ea:a1:1c:e9:
b4:bf:4a:47:1b:12:cf:ee:c7:05:4a:15:08:48:f0:
4f:d0:4a:d3:8a:32:9f:8d:94:45:05:2f:9f:26:fb:
bb:bd:64:9d:bb:09:10:7d:22:27:25:ca:81:ec:84:
3e:75:bc:bc:58:c5:80:9b:1b:90:dc:e8:0c:aa:bc:
0e:fd:48:af:4f:d4:c0:b7:7e:c5:84:d7:c0:16:2c:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1E:09:52:DD:73:20:17:55:CD:97:0F:F6:C4:77:04:5A:00:96:8B
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:32:65:ef:78:f8:6c:6f:32:14:45:5c:c2:9d:88:01:dc:
98:93:5f:8b:60:3a:bc:63:ec:c9:80:f4:d9:40:b5:72:27:49:
eb:2c:48:4f:5e:d4:3a:e5:54:9d:21:ab:15:d5:6c:24:0a:a0:
e7:f5:5b:30:36:63:5b:d2:9a:47:7c:8f:94:d1:48:c7:26:70:
ff:dd:a7:1a:4c:74:2f:f9:eb:43:9f:93:ba:11:da:cd:fc:d9:
b4:ce:b0:b3:b4:13:76:1e:25:8e:d6:12:05:8e:f0:0c:77:60:
27:15:4e:78:73:2e:88:34:5f:a2:82:9b:f3:a0:43:2e:ae:a9:
14:10:2a:67:8e:f4:6e:11:b4:7d:69:b4:bd:8b:87:98:e1:1b:
40:aa:04:c7:2a:02:54:6e:49:31:59:14:db:12:ff:6f:ad:0d:
a1:16:09:d7:2c:09:1e:22:be:35:af:3d:6e:ac:3d:b2:d4:2f:
8a:9c:ec:d5:c3:6f:c5:f8:f4:43:7c:31:3b:0f:0d:5d:96:54:
ea:28:22:b6:8b:a8:34:cf:11:2a:e6:df:c2:0b:00:ea:e1:82:
27:42:3f:21:28:2b:31:25:c0:26:a3:60:6a:04:96:74:f6:fd:
c1:1f:2e:36:cc:f3:87:ac:ce:15:cc:d5:dd:d1:b7:6b:47:d8:
b9:e3:1b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkIPHkSiC0nPQSqUC3OyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjYwNzIzMjAwMDE3WhcNMjYwNzI0MjAwMDE3WjAzMTEwLwYDVQQD
EygxYTFlMDk1MmRkNzMyMDE3NTVjZDk3MGZmNmM0NzcwNDVhMDA5NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm8FvaBZJ793mUX2Tx+bhuhC5HlQ
s/awKPT9ZZ1tMFD6VVqQBatgeZlYuNNtLjaEE2AAEsjbVBOk+8hNCLh/lEmu/TB2
gqiT5NPL3Kba9p8nSiOyEgT/3kmRyLLpQLMMcki5pLZ1CpjGu59Eke539BSn6d+U
S6ItjR6ExGgZNb29RL7SyFCnkQDNYIF55TxRE1Hs6lqbXaZHUtoxhlrBEG9EnZWt
CyCSQ81NwGsRYuqhHOm0v0pHGxLP7scFShUISPBP0ErTijKfjZRFBS+fJvu7vWSd
uwkQfSInJcqB7IQ+dby8WMWAmxuQ3OgMqrwO/UivT9TAt37FhNfAFiyO9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoeCVLdcyAXVc2XD/bEdwRaAJaLMB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg8yZe94
+GxvMhRFXMKdiAHcmJNfi2A6vGPsyYD02UC1cidJ6yxIT17UOuVUnSGrFdVsJAqg
5/VbMDZjW9KaR3yPlNFIxyZw/92nGkx0L/nrQ5+TuhHazfzZtM6ws7QTdh4ljtYS
BY7wDHdgJxVOeHMuiDRfooKb86BDLq6pFBAqZ470bhG0fWm0vYuHmOEbQKoExyoC
VG5JMVkU2xL/b60NoRYJ1ywJHiK+Na89bqw9stQvipzs1cNvxfj0Q3wxOw8NXZZU
6igitouoNM8RKubfwgsA6uGCJ0I/ISgrMSXAJqNgagSWdPb9wR8uNszzh6zOFczV
3dG3a0fYueMbrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:41 2026 by rpki-client