Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: TFUL17lLtKjiq2R67i7O66EYIYLbaaTMVxfVuYZrVuo=
Subject key identifier: F1:79:00:4C:88:79:D6:EC:1C:86:AF:F4:19:F3:CD:40:A7:F1:4E:F0
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019E1F483BB8A5E91E507C1E33C55A2841A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0875
Signing time: Wed 13 May 2026 03:01:27 +0000
Manifest this update: Wed 13 May 2026 03:01:27 +0000
Manifest next update: Thu 14 May 2026 03:01:27 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: jbuDORI+YfeXnfTtFsmWRPP2p+0Dr/vtZBRsUBE3cFs=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:3b:b8:a5:e9:1e:50:7c:1e:33:c5:5a:28:41:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: May 13 03:01:27 2026 GMT
Not After : May 14 03:01:27 2026 GMT
Subject: CN=f179004c8879d6ec1c86aff419f3cd40a7f14ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:97:93:1d:61:bd:aa:70:48:97:d8:dd:11:
97:f7:bb:f3:80:68:95:eb:68:70:73:58:35:19:10:
ca:1d:9f:31:c3:ac:89:de:25:5e:5f:93:2c:1a:f6:
0e:8a:14:2d:15:97:b1:a9:1f:72:ad:5a:d8:d1:25:
11:d9:4b:29:23:18:4c:30:0f:cd:85:92:a9:05:43:
77:3d:1a:19:25:2e:f1:3f:6c:0d:2f:ee:35:c3:81:
73:2f:c1:cb:6e:8a:df:ab:28:46:7e:13:36:09:e1:
96:9a:fe:68:bd:d7:a1:6b:22:ca:4e:06:2a:e0:7e:
5f:4c:08:b4:60:41:ee:f5:42:7b:9e:b1:52:80:18:
6d:6e:b3:0c:ab:dc:e4:f8:d5:73:93:25:65:96:5e:
68:e4:99:d5:75:f4:2c:25:55:77:21:a2:56:b7:19:
ed:3f:99:92:5d:00:bc:49:d8:16:f9:0a:3e:47:3d:
32:e0:52:bd:a9:b1:33:5d:d2:b5:ac:cf:fc:da:fb:
f3:02:d9:17:a5:74:fe:41:86:a2:e6:3d:12:54:5b:
9a:48:20:d9:e6:69:f2:36:5c:32:33:70:a9:33:81:
b7:5e:0c:70:6c:63:e2:7d:cb:3d:a7:af:c9:7b:22:
79:98:1d:dc:ec:b8:0b:f8:11:77:48:be:99:af:c3:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:00:4C:88:79:D6:EC:1C:86:AF:F4:19:F3:CD:40:A7:F1:4E:F0
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:24:7e:8b:68:ee:8d:5d:3a:a3:b1:21:e7:15:3c:81:68:a8:
fa:23:d6:2c:38:6e:1b:62:28:70:02:f9:86:c6:cd:ea:7c:36:
6a:93:63:87:d4:1f:58:9c:a7:38:38:2e:c5:c3:3b:59:45:cb:
fa:4f:0e:33:e5:9d:07:33:8c:29:9d:df:8a:fe:34:96:26:a9:
a0:31:66:00:bf:fd:8c:1a:fd:3b:c5:d7:b6:98:3c:b0:9c:68:
dd:32:33:6d:ab:26:72:ab:47:c0:48:07:62:55:5c:d2:60:fe:
13:f7:ad:fe:3e:9a:65:6e:87:ac:6b:a1:dc:40:1e:de:f5:5a:
d5:35:60:4b:07:ed:79:9f:4e:97:2e:7c:36:03:4d:83:51:4d:
e2:8c:b1:51:f5:b5:56:1e:66:50:36:c9:d9:df:92:e3:cf:4b:
7d:81:db:84:0d:0a:a5:a0:26:d6:a2:d1:be:82:40:53:ba:3f:
a6:f3:22:82:fe:88:b7:3a:e7:1c:2b:a0:ac:0b:64:2b:10:82:
96:22:28:f6:56:3b:89:27:5e:4c:b2:aa:3a:48:50:22:94:1f:
bd:ab:6f:f8:7d:6b:e1:18:59:67:49:4f:98:db:fa:93:4d:7c:
26:c0:39:4f:f4:69:c4:9d:4a:51:6c:0d:ef:1c:b2:ad:5b:d1:
a7:fe:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:38 2026 by rpki-client