Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: 3Y1uHvY3xU850dnzSthm/2BCV+Va6xMYazfUAQVzfxc=
Subject key identifier: 01:9B:95:C8:30:30:14:61:B0:63:86:0C:55:1B:64:41:03:D7:AA:29
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 019D277236DA13332E0215D98DD79345FDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 01FC
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: LB897dXLBM36a7U6SkP9ZIBRp0U.roa (hash: syt+8t+IbVJ3QRitmZH6LwQ2EF86AutEdjHbzKfuLYY=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: DBOkexFnFFJipXIMQ0mlKlVeB8n63xKI45zK+yrUvzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:36:da:13:33:2e:02:15:d9:8d:d7:93:45:fd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=019b95c830301461b063860c551b644103d7aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a4:bf:eb:f6:1e:f8:cb:58:3d:a0:21:38:a3:
d6:35:5a:74:c0:8a:05:c5:58:05:3e:c1:e9:a1:ba:
d1:87:1b:de:52:16:16:f6:6f:0c:87:e1:06:d1:2d:
fd:34:19:e3:4f:3f:ff:90:d7:83:fe:54:cd:51:25:
6f:eb:d8:38:cb:6a:24:7c:6b:9a:b8:5e:b4:d4:40:
b5:50:2f:f6:34:3b:a8:9f:37:52:7b:fc:49:b5:c5:
56:41:54:c2:54:da:c1:ed:72:a8:97:ba:2b:7f:a0:
af:7a:6c:3f:65:54:fb:9b:91:d3:4d:f6:e8:1d:42:
df:46:c6:23:47:23:31:5c:fb:44:a3:24:9f:4d:a0:
d2:7b:f3:fc:79:7c:3d:7c:91:02:dc:f0:61:8a:3f:
e4:d8:56:f2:39:ed:4d:23:04:07:7c:c9:6d:e9:0b:
1a:5f:2d:61:32:0b:ac:38:1a:f7:c9:fc:8b:81:b4:
cc:f7:cb:45:03:fa:dd:3a:43:f2:30:9c:44:e1:d7:
c1:66:81:38:d6:44:1a:a6:cd:52:05:94:aa:e5:8a:
bc:d9:8a:6f:72:9c:67:48:c2:0e:27:4e:83:35:ab:
ce:93:99:ea:3f:c6:59:96:25:f5:ed:3c:55:4d:82:
48:c4:e5:22:8e:cc:a3:3d:3a:b3:18:d7:2b:ba:e9:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:95:C8:30:30:14:61:B0:63:86:0C:55:1B:64:41:03:D7:AA:29
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:50:ed:56:de:c9:56:e3:5e:38:cb:26:80:be:97:ea:98:
a9:73:d8:d0:4f:38:09:3d:5c:5c:80:55:68:b5:00:e0:f7:04:
c6:b7:42:7f:47:76:5f:e3:c7:45:85:10:c4:fe:82:1c:3c:df:
52:69:25:cb:54:38:26:7e:00:15:d9:ee:b4:6a:d3:79:fd:d6:
28:c2:4b:f4:ae:c1:15:3a:36:74:f1:8e:2e:40:c1:eb:e8:e1:
8b:d8:88:45:e4:01:9b:56:05:f0:69:7a:0d:6e:8a:2d:df:33:
ad:b9:5b:ec:6a:fb:78:31:58:16:98:dc:a0:68:63:ae:f1:32:
68:24:a1:54:0d:00:fa:ab:c4:7e:47:27:cb:b8:a7:e8:76:c5:
fe:df:db:c0:07:d1:17:03:a2:0a:3e:35:90:0a:0c:43:12:14:
15:18:9d:38:9f:0d:df:fe:2b:f6:ba:ca:b6:bc:ab:43:4e:00:
74:a7:b4:84:5d:c6:5c:05:f3:ca:78:62:9f:6f:75:bd:ca:94:
88:3a:06:0f:71:26:e8:be:a4:43:04:54:74:1f:6a:2c:0d:da:
c5:0c:e0:1c:7f:06:e5:a6:13:cf:33:68:2c:32:7f:4c:4e:03:
87:96:b8:cb:2a:4d:8e:c4:bf:07:4b:ad:9b:ff:d7:94:94:f6:
6c:60:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:03 2026 by rpki-client