Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: sn/to384U8McFUawZpQ5RI066+Ogjvlm0/40K0TjjIM=
Subject key identifier: CC:AF:DC:72:0B:4B:E7:FC:30:63:C4:A2:C4:03:8C:AC:E9:5B:9B:1B
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019D27DF5103EB8599328F9B25086AC8AFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: KZoD2iwiqUr9dyKHClRwtquR7wLmRUAxIHaQO5iHFDo=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:51:03:eb:85:99:32:8f:9b:25:08:6a:c8:af:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=ccafdc720b4be7fc3063c4a2c4038cace95b9b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:99:9f:07:8b:88:1a:80:d6:ac:0a:a1:6e:
65:38:bc:bc:56:d2:8b:7a:88:70:62:d0:29:e1:da:
ef:2f:d7:6c:dd:4e:a8:12:50:5e:20:06:55:c4:a7:
b9:36:3d:64:8c:43:ec:67:ff:b7:ce:cd:b0:f7:e6:
b2:69:b3:36:6a:6f:c0:21:4b:2e:19:91:13:1c:a1:
e6:19:09:12:2c:6a:02:e5:78:f1:f4:45:34:72:86:
54:5d:eb:f1:08:f5:23:eb:90:85:50:8e:ad:a2:58:
9f:1d:17:79:e1:9a:b0:98:b3:96:99:60:75:34:1c:
f2:6b:c9:4d:05:69:bc:a1:5f:ec:37:b9:36:d4:26:
7d:a3:11:71:ce:e2:ee:63:56:16:15:ee:05:51:6c:
80:9a:8d:0a:01:61:d1:61:c6:b0:6a:53:16:12:b3:
2b:23:0f:a0:19:fb:26:21:8a:d9:73:26:56:b4:3d:
37:55:6c:df:0f:d8:2b:37:38:49:84:dd:6f:e5:01:
9a:6b:bc:32:a1:a1:45:c5:94:35:5a:3b:7a:30:51:
d2:4c:9a:73:64:8b:b1:24:6a:2f:b9:36:91:9b:76:
98:c4:35:d6:5a:6a:84:cf:04:c4:29:e9:b6:f9:ef:
b1:6d:e7:0d:6f:86:c1:12:dd:15:01:bd:73:e8:c0:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:DC:72:0B:4B:E7:FC:30:63:C4:A2:C4:03:8C:AC:E9:5B:9B:1B
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:51:4f:cd:91:c9:f3:65:84:e7:47:12:82:56:c9:a2:ba:75:
f1:95:d3:a8:e4:2d:6f:fc:b8:f9:07:1c:12:da:f8:88:8a:96:
f0:d3:38:14:23:ab:f0:0e:2a:56:96:73:ab:f8:d3:10:14:9f:
51:da:c1:18:e7:1b:36:ca:bd:03:d9:f9:f4:ea:e6:8a:db:fc:
a9:64:b3:5d:90:8e:eb:3f:25:bf:49:10:17:bd:22:dc:da:a2:
0e:1c:31:73:d4:87:f7:56:5e:c3:6e:be:6b:63:88:8d:8b:12:
f6:94:9b:6e:18:3c:b5:b0:44:8f:ef:04:c1:ed:c7:32:86:3c:
9f:3f:ad:5f:e6:9c:e2:b0:61:6d:a7:f7:12:8c:72:cb:8b:57:
89:fc:05:9e:0b:4c:07:d9:89:d5:a5:89:b5:23:79:7a:81:99:
a6:6e:8c:2c:49:8e:48:ef:95:b1:e1:81:a0:7f:59:7c:6d:0f:
32:cd:74:de:d4:c6:16:49:a3:b2:d4:a8:bc:e1:4d:98:33:88:
fc:d5:5a:24:e3:b5:be:41:0b:39:40:a4:ac:2a:f1:52:6f:5c:
b0:56:30:10:8d:5f:5c:9d:c0:fc:f8:89:e0:fe:af:2e:33:70:
8a:49:73:18:bf:db:da:c4:d1:c9:e1:95:84:bd:e4:3f:ee:a2:
45:48:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:27 2026 by rpki-client