Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: LUaYAefbWBf3nPzqWjbR+jHlBKCTeAIn9p9ScFyWaFw=
Subject key identifier: 83:EA:FA:C8:B8:D4:9A:13:E9:F2:E0:DA:C3:16:51:F4:12:C6:AC:CD
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019E1C7D9529A7F5B027DBA23608DE92B8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1799
Signing time: Tue 12 May 2026 14:00:52 +0000
Manifest this update: Tue 12 May 2026 14:00:52 +0000
Manifest next update: Wed 13 May 2026 14:00:52 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: SPaQL/4wSwExkdRppg3YIPK1DhCDyN9pOc0Sw5Q8VrE=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:95:29:a7:f5:b0:27:db:a2:36:08:de:92:b8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: May 12 14:00:52 2026 GMT
Not After : May 13 14:00:52 2026 GMT
Subject: CN=83eafac8b8d49a13e9f2e0dac31651f412c6accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:b0:1c:54:b9:a4:66:fa:2b:45:e5:76:99:
ab:43:e4:e1:e1:c5:f4:41:cb:92:f9:0a:85:7f:fb:
79:04:f3:61:94:dd:96:f6:23:2d:b5:27:a5:55:7d:
80:f6:7d:ba:9c:d4:8c:59:77:22:a9:df:97:08:8c:
3f:a9:20:42:dd:3e:bb:e5:29:19:81:3b:64:c9:27:
ae:9c:25:8f:72:e5:02:ea:5f:21:c4:df:d0:10:6a:
61:95:7c:48:92:70:1c:7f:21:66:49:85:e1:23:54:
e7:21:f2:e0:09:f2:91:75:01:90:fc:66:46:e0:18:
fc:48:47:6e:25:17:89:ce:60:68:83:bf:64:10:e2:
f7:ef:ef:04:55:05:04:f5:63:98:3c:c3:49:e3:17:
f5:e4:20:e8:86:37:b6:90:99:4f:b2:d9:ad:36:bd:
9e:08:29:3c:48:06:f5:e4:72:7e:92:6c:0c:2a:cc:
e7:ff:bb:8e:52:b8:d7:f9:08:3d:57:c7:c0:7a:89:
c5:21:90:e9:a5:fa:ed:f2:f4:dd:ed:1a:11:8e:7e:
b8:62:71:4f:68:c6:99:18:8e:b5:90:c6:a6:28:27:
20:bb:1c:5f:95:bb:03:0e:fb:4d:6e:e8:13:fc:7f:
d6:0c:7f:8f:1e:a0:0f:aa:0f:98:d6:ca:94:8d:c3:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:FA:C8:B8:D4:9A:13:E9:F2:E0:DA:C3:16:51:F4:12:C6:AC:CD
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:cb:79:93:41:f4:5c:0a:0c:82:0d:8e:61:60:d1:b1:3b:
b0:a7:cc:35:b3:b6:3c:d2:ac:22:1c:38:2f:53:87:09:0c:48:
f3:b2:65:2c:29:b0:7f:82:29:3a:47:2c:52:23:af:2f:a3:7b:
36:6a:7f:fd:3a:9c:7b:85:9b:a8:5c:cb:38:ad:68:fe:7b:ee:
31:ef:ee:87:9d:92:4f:bc:c8:a8:8f:a4:3c:d1:09:98:eb:e7:
f9:f9:71:a5:dc:e9:3a:7c:c9:a0:27:9c:fa:eb:59:9b:38:ea:
e6:95:c8:eb:47:86:85:23:1f:81:81:29:d7:5d:fc:4b:fd:42:
5b:e5:12:b8:42:6a:59:3a:bd:62:2f:e9:63:9d:7a:d6:15:15:
c1:b1:04:ff:cc:04:59:09:18:ce:79:b7:fb:12:38:ec:52:f9:
11:b6:c2:cc:46:d9:c7:d7:8e:6f:5b:3a:67:2d:6b:53:42:10:
4e:0c:60:c5:f9:84:50:b1:6f:11:e1:57:d1:87:dd:24:1e:13:
be:48:c1:9e:64:c7:79:9f:13:13:e9:04:a0:bc:bc:8d:89:44:
37:95:f8:4e:12:fb:83:7b:88:0b:96:7d:c3:c1:25:65:b2:5b:
10:87:e5:b9:90:35:f2:3d:61:ef:47:94:0c:ab:91:5e:06:20:
41:95:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:44 2026 by rpki-client