Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 7VkPLloWE3VT7bf75OxdBujjyYWRYZOZVo+eKmNvwmg=
Subject key identifier: 8C:5D:52:67:0B:7E:52:2A:19:42:B4:D1:F3:9B:A9:6E:61:9A:1B:2C
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019E1E34DED53F754FD72771A5BC7BB4F75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 072A
Signing time: Tue 12 May 2026 22:00:41 +0000
Manifest this update: Tue 12 May 2026 22:00:41 +0000
Manifest next update: Wed 13 May 2026 22:00:41 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: qbyueNgRqJb6VBdoMIN1vF3ZhGGA7imm9QLnUsUpo3I=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:de:d5:3f:75:4f:d7:27:71:a5:bc:7b:b4:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: May 12 22:00:41 2026 GMT
Not After : May 13 22:00:41 2026 GMT
Subject: CN=8c5d52670b7e522a1942b4d1f39ba96e619a1b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:40:0e:1b:20:db:46:32:fe:24:36:02:eb:
90:30:ab:bd:3d:49:2b:9e:b5:4d:73:32:38:12:35:
59:ef:b6:28:3e:8e:e6:fa:e1:ba:18:47:10:8c:a9:
44:af:68:92:d3:5c:0d:e0:58:97:b9:12:e8:ff:4a:
aa:db:65:98:f0:a1:7a:54:59:cb:dd:48:54:b9:44:
5b:dc:61:d0:76:3d:8a:9d:15:df:6c:4d:ce:76:83:
bb:a7:33:4a:ce:4e:d6:13:b0:f6:33:87:68:9b:89:
a2:a0:02:66:f4:cc:42:ad:25:84:cf:14:d1:c7:7c:
d8:82:6f:18:44:80:ed:ff:15:19:8b:a5:7c:16:5c:
6d:62:3c:3c:16:90:28:b8:3f:e4:1c:ac:2c:ef:1b:
d3:d0:9b:07:e0:e4:12:42:5d:f1:12:76:db:ac:45:
97:72:dd:b6:27:8a:54:04:39:f7:a8:42:21:9a:5c:
c6:d5:77:ff:54:c9:63:28:c7:1e:84:ce:ef:16:db:
44:cb:ce:32:13:e0:c3:8b:c9:8c:a5:ad:4b:cd:4e:
d3:ec:e4:df:5e:be:90:b7:43:1c:a7:d9:dd:68:7a:
8f:2b:e4:e0:34:a7:7f:3f:2f:91:80:5f:f0:a7:4b:
54:b3:23:95:fd:40:69:84:75:4a:36:66:94:a4:24:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:52:67:0B:7E:52:2A:19:42:B4:D1:F3:9B:A9:6E:61:9A:1B:2C
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:88:5b:bf:2e:8c:14:55:7d:f5:13:7f:45:f5:ff:6b:54:
33:0e:e5:1e:c0:27:cf:bf:10:48:1c:95:ee:12:08:b7:29:1e:
c0:1a:d0:87:07:99:dd:7d:2f:cd:ff:ac:68:51:3b:33:56:f8:
eb:62:ba:3f:b7:b2:cd:5e:d7:7a:c2:24:fa:8e:3e:e6:a6:a7:
98:4b:f0:59:8d:01:a0:40:7f:28:ae:e1:9c:61:97:43:03:c6:
9f:4d:8c:54:b8:62:18:47:49:3c:6e:20:7d:63:b9:2e:6f:e7:
7a:64:a7:40:c2:44:03:ef:8f:f8:e0:49:ba:5b:7d:fe:c8:14:
7b:e7:c6:19:c9:a2:5e:fb:17:c7:3d:1c:5e:23:d6:60:9c:10:
e4:14:4f:e1:f5:17:75:24:6a:f5:cc:92:35:8d:43:02:83:ac:
b1:f4:b3:da:8e:dc:90:d9:b9:37:28:c0:f3:d1:fa:06:5b:6e:
07:e9:4b:d3:a6:fa:97:37:f9:13:fc:b0:42:f3:43:f9:54:68:
7c:19:ad:94:38:36:89:37:c5:a8:34:8a:24:83:8b:40:f1:b3:
d1:49:6b:1b:44:e4:b3:ea:4b:c0:db:de:0e:13:92:05:6d:f3:
b3:4c:84:ec:db:0f:b6:e0:82:ba:8a:40:be:06:9a:23:c3:a4:
e9:20:0d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNN7VP3VP1ydxpbx7tPdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw
ZTZjZDgwHhcNMjYwNTEyMjIwMDQxWhcNMjYwNTEzMjIwMDQxWjAzMTEwLwYDVQQD
Eyg4YzVkNTI2NzBiN2U1MjJhMTk0MmI0ZDFmMzliYTk2ZTYxOWExYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoytADhsg20Yy/iQ2AuuQMKu9PUkr
nrVNczI4EjVZ77YoPo7m+uG6GEcQjKlEr2iS01wN4FiXuRLo/0qq22WY8KF6VFnL
3UhUuURb3GHQdj2KnRXfbE3OdoO7pzNKzk7WE7D2M4dom4mioAJm9MxCrSWEzxTR
x3zYgm8YRIDt/xUZi6V8FlxtYjw8FpAouD/kHKws7xvT0JsH4OQSQl3xEnbbrEWX
ct22J4pUBDn3qEIhmlzG1Xf/VMljKMcehM7vFttEy84yE+DDi8mMpa1LzU7T7OTf
Xr6Qt0Mcp9ndaHqPK+TgNKd/Py+RgF/wp0tUsyOV/UBphHVKNmaUpCQ/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxdUmcLflIqGUK00fObqW5hmhssMB8GA1UdIwQY
MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt
ZDIyNTAzMmQxODU4LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4
LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFWIW78u
jBRVffUTf0X1/2tUMw7lHsAnz78QSByV7hIItykewBrQhweZ3X0vzf+saFE7M1b4
62K6P7eyzV7XesIk+o4+5qanmEvwWY0BoEB/KK7hnGGXQwPGn02MVLhiGEdJPG4g
fWO5Lm/nemSnQMJEA++P+OBJult9/sgUe+fGGcmiXvsXxz0cXiPWYJwQ5BRP4fUX
dSRq9cySNY1DAoOssfSz2o7ckNm5NyjA89H6BltuB+lL06b6lzf5E/ywQvND+VRo
fBmtlDg2iTfFqDSKJIOLQPGz0UlrG0Tks+pLwNveDhOSBW3zs0yE7NsPtuCCuopA
vgaaI8Ok6SAN7A==
-----END CERTIFICATE-----
Generated at Wed May 13 04:33:36 2026 by rpki-client