Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: 5JzxmMe1Dfc3zV5tJCbEU/+UOYl4FuDKJeQidASLDXo=
Subject key identifier: DA:95:F5:57:55:8B:00:55:7D:2D:75:6C:F1:13:9C:61:9F:19:88:45
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019E1D231A81E764A356564AF0BCC5CB3583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 1301
Signing time: Tue 12 May 2026 17:01:40 +0000
Manifest this update: Tue 12 May 2026 17:01:40 +0000
Manifest next update: Wed 13 May 2026 17:01:40 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: 8/CsQegjXJSndA/V5ib2fOTmG2vQ4kUZvd/KqS0FJMA=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:1a:81:e7:64:a3:56:56:4a:f0:bc:c5:cb:35:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: May 12 17:01:40 2026 GMT
Not After : May 13 17:01:40 2026 GMT
Subject: CN=da95f557558b00557d2d756cf1139c619f198845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:da:44:c7:8c:1c:84:8c:4b:c4:3f:92:54:
ea:fe:c2:4d:09:0c:65:19:a4:93:cf:ee:12:64:63:
1a:ce:b4:0f:05:b8:17:4f:0c:42:e9:39:3e:f2:b8:
c8:ca:e9:c9:cc:e8:bc:b6:4c:6e:c1:7b:df:b0:5e:
d4:a7:9e:46:9a:b3:3c:67:69:8b:14:86:b3:88:31:
bc:e3:19:f8:e3:1c:4b:d9:7c:bb:e0:2e:73:ee:ed:
11:b0:da:48:f9:e2:d4:de:53:ec:29:48:b3:a8:26:
40:c1:d8:43:9a:47:3d:0f:a1:37:ad:09:80:76:a2:
fe:43:a4:82:4a:ba:fe:d9:60:04:45:e2:e7:0d:0b:
6e:cb:6f:50:66:f6:c8:e4:1e:6f:10:d1:72:15:b6:
83:90:cc:23:eb:63:d3:b7:06:03:97:82:d0:71:48:
8e:95:4d:a9:d3:f1:76:e7:42:18:2e:5f:dd:8a:aa:
bb:77:ce:47:45:5d:d8:7e:3e:56:3e:0b:78:08:83:
e6:b3:29:d6:43:c0:f1:58:07:c6:e2:75:01:ff:e7:
53:ad:72:24:cc:85:e2:9f:84:09:74:d0:2d:fc:08:
d1:54:ff:4e:bc:83:bf:d5:df:5f:5b:23:8f:af:a6:
df:fa:70:a5:a2:a6:9a:ee:65:86:02:fa:45:83:4e:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:F5:57:55:8B:00:55:7D:2D:75:6C:F1:13:9C:61:9F:19:88:45
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9e:47:35:1c:86:eb:e9:8c:ce:07:7b:0c:e9:15:fa:ec:66:
a2:76:46:5b:53:ac:90:c3:7e:d5:55:fd:45:5e:5c:cf:74:16:
43:f5:25:f5:7f:00:db:ad:8a:85:a4:9a:42:42:8d:67:09:76:
02:ea:cb:c1:be:e9:89:fc:f7:24:9f:13:1f:28:f0:ea:1d:ae:
3d:03:3f:85:43:f0:8d:39:98:c4:bd:32:66:64:18:0c:ae:34:
39:36:85:d2:8f:ba:f1:55:a4:5c:75:03:47:bd:44:6c:63:9b:
6c:42:5f:cf:80:29:1f:f2:96:99:6d:8c:37:a7:36:cf:cb:c6:
f0:d7:df:57:6f:f1:06:0d:9e:30:28:70:53:eb:b5:41:5a:fb:
65:53:84:56:ca:37:fd:87:54:62:90:5a:b6:d6:42:3d:93:19:
96:3a:65:34:c7:4d:4c:80:e7:1e:ed:7f:15:3a:92:e2:1b:12:
10:bd:45:f4:7d:1e:1e:6a:f5:dd:5d:35:3e:72:ac:0a:8b:0c:
e7:eb:f2:2f:d5:89:c9:c6:ce:50:b4:75:4d:ed:4a:9b:f4:05:
18:19:28:10:a9:9b:40:45:94:a1:91:1c:6f:42:f9:21:af:fb:
fb:95:d0:88:5f:ea:63:d8:b3:3c:67:d6:b7:31:06:73:fd:46:
6c:fe:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:50 2026 by rpki-client