Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: osOshyomsSn/0Yi+b07PrqEIsV7nn4eIX4DJ8K3y6R4=
Subject key identifier: E5:4F:C7:86:B2:94:58:4E:B4:42:BA:C5:FA:4C:22:41:42:B1:F9:9E
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 01A0E02A4B303BBE73C76AE5BC6E446F0A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 12A1
Signing time: Sun 27 Sep 2026 00:01:03 +0000
Manifest this update: Sun 27 Sep 2026 00:01:03 +0000
Manifest next update: Mon 28 Sep 2026 00:01:03 +0000
Files and hashes: 1: 0ecvWTrLL0Pddp71Vvy7lLkXT_A.roa (hash: DZOa9ZDn/FKrkuCgU7pBzq4pMoiw59/I1Ej+MzOAN9s=)
2: M3_g9fgfhsjEU8I8kmRzcfCe_Yk.roa (hash: qojM6iwqI4nVOVu975ajhGlgZfmWqge9SdcqtpuQ+yo=)
3: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: lGaVUNPEGs9MZPL6GKRvMbVtXPLVtbdmF3r4zGD3isw=)
4: m3t-0Hv26IwOGuurlSyOeHqwSIE.roa (hash: a2kbBzW7rvDNZYE6hJOHPO0qraK0Q8B1MIkCERSYzD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:4b:30:3b:be:73:c7:6a:e5:bc:6e:44:6f:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Sep 27 00:01:03 2026 GMT
Not After : Sep 28 00:01:03 2026 GMT
Subject: CN=e54fc786b294584eb442bac5fa4c224142b1f99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:1c:87:26:fd:82:7f:b3:b5:95:12:ef:2a:
51:93:60:d0:b0:15:67:ae:ed:b5:af:08:2e:87:1b:
a0:91:ae:83:eb:eb:c8:62:43:a9:87:c1:3f:e2:67:
03:6e:82:9f:9f:28:00:db:ab:48:64:56:cf:2b:0d:
93:4d:5d:a7:72:bd:70:15:31:f8:0e:d6:f4:8d:a3:
2a:22:cf:d1:a5:9e:8d:c0:a1:1d:b8:85:7a:50:9b:
c5:eb:e6:fb:4a:ad:ef:2b:2f:d6:93:0c:1e:58:bc:
62:2e:ce:18:57:ea:d3:76:84:bb:57:37:99:f2:3c:
da:02:60:f2:fe:c8:be:5d:f9:7a:fe:7a:a1:bc:e2:
54:55:12:4b:50:73:d7:33:87:c8:ad:a8:17:52:c1:
e4:bf:e2:4c:63:63:15:34:05:ca:23:c3:00:83:1b:
50:82:fd:72:cb:4d:f7:25:64:3a:54:ec:f7:ce:a0:
e5:ff:0b:1b:e8:f0:52:28:b9:70:34:69:84:02:0e:
88:6c:93:46:b4:30:f3:0a:ef:e6:1b:fe:5d:ac:19:
87:22:0a:64:b7:6d:76:56:7f:a9:e9:38:58:8f:1a:
0a:8a:6e:a4:45:27:9b:61:08:65:19:5a:19:e4:ae:
ce:42:30:54:d8:bc:46:6c:85:44:80:fb:71:59:73:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:C7:86:B2:94:58:4E:B4:42:BA:C5:FA:4C:22:41:42:B1:F9:9E
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:cb:1f:bf:5f:ba:3c:6a:97:10:73:43:77:bb:e5:17:8c:
c2:99:a7:b0:d5:ee:ab:a7:e5:61:61:4e:d6:e2:5f:3d:6c:84:
be:c5:65:e9:33:15:fd:71:5f:2f:80:0c:c6:9b:b3:fb:00:88:
e7:10:80:69:2d:e3:99:29:10:54:c4:bc:77:b4:86:c4:ff:30:
fb:cd:31:6f:25:29:69:a4:f7:16:e1:88:f9:a9:74:d3:c6:8f:
7b:6f:c3:37:cd:34:00:dd:8d:28:80:6e:4c:71:bd:5f:2b:d5:
74:42:1c:fe:13:2d:43:87:ca:1b:e9:55:2a:38:3d:14:e1:1c:
85:5d:8d:a0:89:ad:06:e3:bd:df:ce:73:f8:c9:45:2b:d4:3b:
bf:ca:ed:63:0b:aa:27:db:fa:76:38:3f:23:59:2d:d6:28:15:
78:1f:2e:39:a7:b8:94:f3:35:98:e4:58:56:44:86:1b:05:97:
d8:03:9e:02:d3:05:b3:59:6a:6f:cd:a2:45:0a:ad:60:b2:71:
67:f4:37:14:6d:fc:19:67:28:f9:be:18:11:3e:b6:d5:a9:b7:
56:6d:2a:f3:90:1b:b9:cb:44:e1:5f:c6:f9:7a:09:cd:df:53:
36:8e:0f:17:57:ee:60:b8:a8:db:78:b6:3f:be:fa:cf:4c:43:
f0:26:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:11 2026 by rpki-client