Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: 7izaJGA5C+Km7PzIGIzKvECxQsYor7uaitf5J68L6EU=
Subject key identifier: 79:28:C2:97:44:25:55:50:66:CB:40:99:26:21:44:26:70:FE:05:0D
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 019E1EA4099BD3880AD177D9DFC4C65A828F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 027C
Signing time: Wed 13 May 2026 00:02:07 +0000
Manifest this update: Wed 13 May 2026 00:02:07 +0000
Manifest next update: Thu 14 May 2026 00:02:07 +0000
Files and hashes: 1: LB897dXLBM36a7U6SkP9ZIBRp0U.roa (hash: syt+8t+IbVJ3QRitmZH6LwQ2EF86AutEdjHbzKfuLYY=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: 6yk7Hq0qCDr7UJAGV88UY1rY+OgieJRM0ytdBrQEIYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a4:09:9b:d3:88:0a:d1:77:d9:df:c4:c6:5a:82:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: May 13 00:02:07 2026 GMT
Not After : May 14 00:02:07 2026 GMT
Subject: CN=7928c2974425555066cb40992621442670fe050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:97:e0:51:74:c6:8c:b8:fc:af:1f:2b:80:
bf:b4:d3:c5:5b:6e:cf:31:2f:fc:bb:4d:43:ff:6b:
e1:63:3e:e2:fe:47:c0:28:31:aa:e8:41:ed:e3:3c:
b0:85:c1:97:8b:be:9a:c0:e2:a8:58:ee:6a:50:80:
f9:bf:0a:6d:68:5d:3b:8a:51:11:b3:e9:2f:5f:5b:
ae:04:5f:91:8e:ea:de:b7:e8:19:60:e0:a9:00:53:
35:20:9d:3f:d8:1d:5c:8c:2b:18:5e:0b:46:c5:05:
c7:cc:70:35:e7:2c:ca:37:66:a9:4f:99:f6:2a:fe:
91:8f:85:72:18:cc:89:fd:b4:60:fb:cb:2e:76:59:
4e:06:97:6e:54:8b:00:63:1c:a2:d1:7f:c9:85:ad:
2b:bb:46:c4:85:d4:c4:9b:e9:70:5d:8f:5c:75:8d:
3f:47:47:aa:bd:6c:69:10:c7:d9:5b:52:5c:61:24:
8b:cc:d1:97:67:6b:37:cb:5f:6c:e6:9c:97:fc:d8:
39:f4:78:c3:55:37:14:b8:73:09:5b:a2:6d:86:a4:
7f:ae:31:ea:9e:5e:50:a2:e0:81:ff:9c:f6:5c:7b:
74:c4:7f:17:ba:da:6c:ba:b2:96:9e:d4:81:0b:cb:
af:cb:a8:00:dc:a8:a9:2c:3e:42:77:f3:08:bd:eb:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:C2:97:44:25:55:50:66:CB:40:99:26:21:44:26:70:FE:05:0D
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3a:fb:39:0e:d4:92:fe:62:36:26:50:96:63:c4:e2:4c:41:
53:11:4a:4e:f9:46:32:61:3e:99:3e:d8:d6:9c:df:78:c7:83:
a5:70:c4:8b:e7:4c:91:8b:82:41:54:1d:49:7b:9f:78:d4:6b:
98:bc:a9:a4:d2:30:c9:3f:f9:dc:29:4d:2b:22:2d:72:c1:f8:
a0:b0:57:46:a4:73:2c:1b:d0:8f:bb:17:dd:99:f0:9a:d1:87:
11:c4:29:c3:b1:54:fa:f4:f0:56:fa:3d:09:74:c7:47:36:f6:
7c:42:74:98:a8:92:86:ee:22:dd:29:04:5e:d2:38:44:21:65:
97:ca:16:56:59:c1:76:77:1f:54:f3:5b:50:ce:90:f6:d1:7e:
91:73:02:cc:91:bd:38:71:43:80:ec:64:5f:1f:be:67:f1:03:
d8:7f:8c:38:13:d1:9c:d4:68:34:70:48:7b:3c:9d:2f:e4:dc:
84:83:e4:6c:dc:d5:3f:77:36:c0:1e:3b:08:63:32:3c:c4:3e:
f9:61:0c:ce:8a:26:96:1b:62:f9:d5:a0:de:87:6b:9b:eb:af:
a0:8d:c9:1d:ac:10:41:a0:18:a0:cf:23:b5:35:d1:9a:7b:54:
a0:84:80:3e:de:f2:dd:f4:b6:4e:c6:3b:a1:84:94:d9:71:32:
c9:fc:d0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4epAmb04gK0XfZ38TGWoKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYWE1Mzc1NzQzNTBmMjZhNmYzNmI0M2RjMzAzYjllMzM5
ZTdlZWMwHhcNMjYwNTEzMDAwMjA3WhcNMjYwNTE0MDAwMjA3WjAzMTEwLwYDVQQD
Eyg3OTI4YzI5NzQ0MjU1NTUwNjZjYjQwOTkyNjIxNDQyNjcwZmUwNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5SX4FF0xoy4/K8fK4C/tNPFW27P
MS/8u01D/2vhYz7i/kfAKDGq6EHt4zywhcGXi76awOKoWO5qUID5vwptaF07ilER
s+kvX1uuBF+Rjuret+gZYOCpAFM1IJ0/2B1cjCsYXgtGxQXHzHA15yzKN2apT5n2
Kv6Rj4VyGMyJ/bRg+8sudllOBpduVIsAYxyi0X/Jha0ru0bEhdTEm+lwXY9cdY0/
R0eqvWxpEMfZW1JcYSSLzNGXZ2s3y19s5pyX/Ng59HjDVTcUuHMJW6JthqR/rjHq
nl5QouCB/5z2XHt0xH8XutpsurKWntSBC8uvy6gA3KipLD5Cd/MIvetNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkowpdEJVVQZstAmSYhRCZw/gUNMB8GA1UdIwQY
MBaAFHKqU3V0NQ8mpvNrQ9wwO54znn7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FwVGRYUTFEeWFtODJ0RDNEQTduak9lZnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wZjQzODMtNzI2Yy00YWI4LTliMjUt
OTZmZDAyYmNlNzY0LzEvY3FwVGRYUTFEeWFtODJ0RDNEQTduak9lZnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wZjQzODMtNzI2Yy00YWI4LTliMjUtOTZmZDAyYmNlNzY0
LzEvY3FwVGRYUTFEeWFtODJ0RDNEQTduak9lZnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojr7OQ7U
kv5iNiZQlmPE4kxBUxFKTvlGMmE+mT7Y1pzfeMeDpXDEi+dMkYuCQVQdSXufeNRr
mLyppNIwyT/53ClNKyItcsH4oLBXRqRzLBvQj7sX3ZnwmtGHEcQpw7FU+vTwVvo9
CXTHRzb2fEJ0mKiShu4i3SkEXtI4RCFll8oWVlnBdncfVPNbUM6Q9tF+kXMCzJG9
OHFDgOxkXx++Z/ED2H+MOBPRnNRoNHBIezydL+TchIPkbNzVP3c2wB47CGMyPMQ+
+WEMzoomlhti+dWg3odrm+uvoI3JHawQQaAYoM8jtTXRmntUoISAPt7y3fS2TsY7
oYSU2XEyyfzQEA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:53:03 2026 by rpki-client