Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: /b3DoWxbdjy9aRyzlsaI1KjGuX5PhtFUq/Bbd+9SQlg=
Subject key identifier: 65:64:DF:05:2F:C9:18:E5:58:4F:CF:EC:2E:28:49:7F:AB:F9:60:65
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 019F93C8E2ABE96DE5328B35A0B305DB7E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 1697
Signing time: Fri 24 Jul 2026 11:00:43 +0000
Manifest this update: Fri 24 Jul 2026 11:00:43 +0000
Manifest next update: Sat 25 Jul 2026 11:00:43 +0000
Files and hashes: 1: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (hash: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs=)
2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: dqVdPTCzGyvXSBsA5KSnE/WoKAWpvbsiCcV2M7iEhZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e2:ab:e9:6d:e5:32:8b:35:a0:b3:05:db:7e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Jul 24 11:00:43 2026 GMT
Not After : Jul 25 11:00:43 2026 GMT
Subject: CN=6564df052fc918e5584fcfec2e28497fabf96065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:22:75:70:79:be:06:f0:a6:ab:54:b6:f0:
cc:b6:aa:b6:a1:7f:b4:88:b8:2a:9d:60:af:0a:66:
99:d6:5f:09:78:4b:ba:4b:33:d7:61:56:33:47:7d:
63:87:83:76:d2:19:42:7a:05:1d:38:9d:c1:8a:f2:
74:1d:51:cc:f5:3b:5b:d1:ff:ab:9f:02:c5:cc:18:
8c:5e:8f:d0:f9:aa:5b:1f:e5:3c:32:46:70:a3:bd:
71:a6:ee:55:48:63:b0:4a:ac:b4:c3:54:89:47:8d:
f5:50:ca:d4:bb:d2:12:d9:87:b8:e4:61:3a:b9:25:
39:f8:ef:f8:46:e8:43:52:70:14:23:39:db:6b:2c:
d3:32:37:4f:32:a1:68:da:48:bd:f5:14:b3:48:0c:
ef:42:a6:e8:60:c1:85:75:92:fa:5c:00:93:c7:81:
cc:6d:14:b1:08:05:c3:3e:ff:0c:5f:11:61:61:b6:
90:d7:5b:ba:57:d3:22:65:e6:d7:7e:16:69:00:2c:
52:6f:fc:25:32:77:ab:cd:f9:22:8e:3f:55:c8:23:
22:71:fb:f7:35:ca:b7:fe:38:36:37:77:e0:41:aa:
70:01:11:4b:e8:d7:2e:eb:77:56:8f:6b:7c:b5:94:
bf:54:63:b5:74:6a:29:77:6c:17:ac:e4:86:d1:cb:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:DF:05:2F:C9:18:E5:58:4F:CF:EC:2E:28:49:7F:AB:F9:60:65
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:3b:6b:0b:6f:3f:da:1e:13:40:74:8e:03:61:6a:f1:e9:
83:d7:2a:11:0f:e3:14:55:d0:da:61:cc:1c:84:37:74:59:a5:
c9:c5:8e:33:f4:5f:c3:17:8a:6c:0c:4a:3b:0b:17:e2:eb:b1:
28:af:09:ef:02:c8:27:ab:fb:85:67:ff:35:64:66:3f:32:6f:
55:b9:16:92:11:f4:9f:90:25:9f:33:3a:f6:8f:df:0b:17:28:
2b:d3:ff:f3:49:36:30:ae:f0:3b:e5:34:85:4a:a5:70:1a:da:
15:67:69:86:2a:66:44:2a:2f:3b:55:de:fb:a4:11:7e:4d:1c:
51:6a:ad:66:aa:f5:e2:cc:29:cf:ba:e8:95:68:df:5f:5f:1c:
a1:6f:a9:cc:22:3b:7d:f1:c2:aa:eb:55:da:0e:09:d1:07:2a:
89:a0:c0:ad:fd:ce:20:3b:97:85:9e:3e:00:97:00:1d:fb:ed:
ce:8e:06:e9:d8:06:64:80:51:7e:e2:2c:87:91:b5:9f:07:c4:
eb:85:3d:45:13:34:46:d2:32:eb:6d:fb:40:70:21:93:47:6f:
3a:ef:9b:a0:55:ad:c9:49:a5:45:ad:ac:67:9c:b6:a3:0f:cd:
63:7e:b2:b9:dc:ca:b1:6d:cd:5b:94:9f:c2:4c:d4:77:22:11:
1b:e0:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:35 2026 by rpki-client