Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: HOKANl6BNPtK0fk+x/iWXdgxHZ76QN6kA2Hdm3JIRtU=
Subject key identifier: 07:DF:AA:2D:8B:FD:04:9E:69:C7:65:4C:0E:06:31:A7:E4:65:A2:2A
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 019D2B170986DB927D6C0C4AA177B63AFC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 171C
Signing time: Thu 26 Mar 2026 17:00:23 +0000
Manifest this update: Thu 26 Mar 2026 17:00:23 +0000
Manifest next update: Fri 27 Mar 2026 17:00:23 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: DnzuFVsttSLzVX+7gau0QPBmh4vO+gFoCRJa9MLy/A4=)
2: LZNFvi7mOcE8_ZVpouUz24tkyec.roa (hash: myArwp5tc/UREP9zG30cuUNHwS3mcS4sT+tZg6aQLPk=)
3: hNzhPP9pxALzDAYAW7772yEyzhU.roa (hash: /Xqet/XbE9Wo4u69G7j/VaFFK4CgNgTJo6NeuY7Jwlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:09:86:db:92:7d:6c:0c:4a:a1:77:b6:3a:fc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Mar 26 17:00:23 2026 GMT
Not After : Mar 27 17:00:23 2026 GMT
Subject: CN=07dfaa2d8bfd049e69c7654c0e0631a7e465a22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:f0:1a:71:5e:2e:8d:ae:0f:82:e8:e6:61:
1f:2e:38:2b:bb:e4:8d:34:ab:3d:1f:1d:7b:d9:1b:
59:c3:1a:9a:be:b5:d0:aa:2a:2b:66:8a:d1:82:e9:
d3:ec:61:8f:39:6e:9e:34:f4:f7:60:ce:00:3f:6e:
07:c9:d0:1b:7e:49:8f:52:c4:b9:07:95:18:13:c1:
1d:dd:ca:06:c1:27:8d:f7:27:d7:6d:48:15:41:03:
c8:61:aa:16:85:5b:53:87:01:26:ed:ce:c4:f4:8d:
eb:41:34:a2:32:5d:32:0d:21:be:39:17:b9:86:c7:
19:c4:30:ef:6c:13:48:84:5f:cb:96:89:13:05:6a:
8f:b8:d7:f9:c6:e4:00:42:29:6e:43:52:e5:89:1b:
43:96:e4:47:0f:5d:e7:b2:00:ba:4e:a6:a6:52:c1:
c6:cd:56:75:f6:af:1a:0b:18:74:11:4b:8e:35:74:
f6:d5:63:0c:73:bc:83:93:5f:6a:d4:4d:4f:4f:0b:
da:c4:98:65:e4:8c:0f:c5:43:33:de:05:b4:95:1f:
6e:34:de:a2:78:f2:97:9f:a5:54:13:a7:40:d4:38:
ac:57:80:04:28:0e:4a:fc:5d:13:d6:96:09:ed:d5:
b3:9e:cc:ff:dd:8c:95:cb:79:59:25:8e:24:a5:c8:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:AA:2D:8B:FD:04:9E:69:C7:65:4C:0E:06:31:A7:E4:65:A2:2A
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:60:c3:77:9c:7c:76:89:1a:56:2e:ab:0d:b9:71:77:3a:
e1:2e:6d:20:95:5a:c4:8d:4c:04:92:8e:c0:87:71:82:b7:6d:
13:89:c1:59:d6:2e:7e:bc:a5:d0:80:1c:a8:c8:e3:1c:4c:d3:
d0:02:38:73:a9:f3:6b:73:0d:9d:a3:2e:45:09:1e:fb:b9:30:
94:9e:5a:32:4b:d7:f2:48:3e:f2:83:fc:b8:09:bf:a9:6e:07:
1a:3a:fc:66:37:c0:d8:3e:ca:d8:78:f7:d8:9b:0e:ee:88:bb:
77:c7:84:40:81:27:a4:9b:9c:61:e3:f5:4a:3d:f6:b1:53:0c:
7a:67:4f:d9:49:06:25:95:a6:1c:32:ab:59:c8:4c:8d:17:c8:
1f:4a:87:42:6c:3b:5e:35:f4:21:4d:f5:db:ab:de:59:b5:f5:
83:7b:44:d5:7a:5b:14:a8:79:09:05:10:79:93:35:07:49:ce:
72:c4:a3:ae:f5:e6:b9:4f:67:bd:49:a6:6b:95:b2:7f:01:2a:
83:27:15:22:79:fb:d7:0f:74:2e:0a:26:9d:f6:3c:c9:eb:5f:
5c:c0:a7:ab:16:ae:27:16:60:f4:29:00:0f:0a:9a:55:ed:75:
39:27:1c:04:7d:76:34:4b:42:c2:44:b1:58:d0:57:4a:3d:e2:
7c:88:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:23 2026 by rpki-client