Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: o2j6YXSiiuc7zNyXBpZ7eFqeQcbiRDNnHuzpdd2B+ys=
Subject key identifier: 01:1D:57:5C:AC:38:CF:F0:83:40:82:AC:69:94:F5:64:DD:A2:69:4C
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019F8FECB97750BE331C1F6DCF11B339326A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 13C1
Signing time: Thu 23 Jul 2026 17:01:23 +0000
Manifest this update: Thu 23 Jul 2026 17:01:23 +0000
Manifest next update: Fri 24 Jul 2026 17:01:23 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: vZIM2KQLo+YCMS6lKi0vO9F7jHZtI/MmvmVw/dqfgl4=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:b9:77:50:be:33:1c:1f:6d:cf:11:b3:39:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jul 23 17:01:23 2026 GMT
Not After : Jul 24 17:01:23 2026 GMT
Subject: CN=011d575cac38cff0834082ac6994f564dda2694c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:51:4b:75:5c:85:47:ce:8f:18:95:2b:6c:
2a:9c:86:98:20:f2:84:cc:f4:4a:0a:7b:08:70:dc:
13:dc:af:d0:03:5f:5f:48:ea:dc:55:13:44:64:a8:
5a:06:85:94:01:19:a3:09:d4:f3:5f:0c:b7:37:23:
24:b6:c8:4a:e5:32:0f:ed:c9:75:6a:fa:ac:0a:a6:
d3:a5:52:5f:b2:ea:53:d7:4f:c9:85:d6:9e:0d:80:
d5:de:41:6e:f9:1c:38:fa:a8:0a:68:e0:04:be:85:
dd:55:61:27:a2:7b:e7:8e:7f:39:1f:7d:f0:8d:74:
37:f2:3f:95:28:0e:07:40:91:6d:55:a9:2b:b9:db:
75:08:ca:f9:3c:c4:ea:61:80:71:2e:54:72:cf:52:
85:c2:7d:c3:67:dd:65:e4:2e:8e:c8:d4:b4:18:61:
2c:60:17:0c:8c:fc:05:77:c5:9e:60:fe:79:e2:88:
9d:ea:1a:0d:ab:27:67:c6:9b:e6:fa:b3:1b:f3:ec:
ee:35:c3:32:c7:e2:01:68:96:70:15:89:8b:2c:39:
a1:dc:61:ba:77:6f:db:73:d5:fa:78:34:73:f9:67:
6a:ee:d1:21:70:79:35:96:ff:57:8d:1b:e0:2c:8f:
09:84:87:3e:7a:4c:5a:09:e2:68:05:43:86:f7:b3:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:57:5C:AC:38:CF:F0:83:40:82:AC:69:94:F5:64:DD:A2:69:4C
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:17:c5:6f:ff:75:08:3a:0b:dc:f0:d0:b9:e8:06:84:2a:
a4:77:9a:22:15:3c:bd:40:5e:14:bb:04:ba:ed:a9:bb:a0:aa:
12:ec:4e:09:5a:73:b7:9a:a5:6b:03:61:92:dc:67:be:0d:a0:
ae:a1:b7:ed:6f:f4:0d:07:2c:d8:e4:7d:9c:02:cf:bb:8b:21:
ca:24:78:b1:33:3a:ba:8f:ad:a3:cd:b5:6a:a5:7b:66:c6:05:
87:d1:7f:a1:e6:e3:ca:c0:f3:92:11:93:ae:e4:3c:0a:a0:0d:
e6:65:6d:8a:3c:5f:75:8c:39:f6:36:a8:31:bc:d6:05:c0:f9:
95:d7:77:c3:a4:2f:29:31:49:61:fd:16:21:56:7d:7e:27:dc:
b6:a0:c7:57:a2:77:3b:f0:4a:fd:95:76:be:8e:e8:4f:03:03:
b5:26:47:2f:a2:a9:9c:47:e2:f6:db:8f:bd:fb:ed:f7:64:14:
85:d8:bc:24:99:2e:bf:3b:4a:7f:f4:20:15:34:20:c4:1f:c2:
e4:92:76:31:74:b8:46:f4:27:7f:ee:d6:43:14:e7:05:54:9d:
eb:a5:58:12:8c:52:ba:74:76:af:e3:36:26:a6:a4:7b:41:da:
7f:f2:e3:0b:84:70:2b:f8:0f:3c:31:a2:7d:bb:da:2f:58:de:
ed:d3:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:41 2026 by rpki-client