Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: +OiFrgaSdyB9DRxhkILBu19mwrYjQDaPENLweFU06pU=
Subject key identifier: FF:42:BB:29:4F:71:C3:56:B5:51:E5:F3:98:0B:6B:76:D7:E7:47:43
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019E1D912ED226272EC53244DE98144FE4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 10A0
Signing time: Tue 12 May 2026 19:01:54 +0000
Manifest this update: Tue 12 May 2026 19:01:54 +0000
Manifest next update: Wed 13 May 2026 19:01:54 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: ilEwkTRES7lF3RDLRvShCC+tkiJx5IGo252jUuUR3NE=)
2: YtniEFg8kjPPW1GupRixGIZcTZw.roa (hash: kE3KePA1ZXt9tPgxQYG+9riIhGGimv2LBW4VQyOyrso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:2e:d2:26:27:2e:c5:32:44:de:98:14:4f:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: May 12 19:01:54 2026 GMT
Not After : May 13 19:01:54 2026 GMT
Subject: CN=ff42bb294f71c356b551e5f3980b6b76d7e74743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:af:19:95:c6:c0:13:8b:db:16:d4:1d:95:
14:f8:1f:29:d5:63:2b:67:dc:c6:a0:7f:ce:2c:d3:
4c:03:b5:2f:05:55:10:ec:bf:3d:97:db:f5:06:6a:
af:09:f5:ac:25:ea:bf:66:01:ad:3b:7a:f7:d1:a8:
7d:bb:33:e9:05:2b:94:77:04:fb:37:f0:80:0b:e2:
e7:c9:7e:15:0d:dc:b1:02:44:8b:3a:4f:1a:8c:92:
94:3c:25:b8:3f:67:dc:fb:09:7c:b9:5a:74:ee:81:
13:ba:f5:37:b6:2c:bf:e3:25:e1:4b:f5:1a:db:06:
c4:cc:f5:24:9c:fa:55:19:8b:78:63:27:d9:b4:00:
94:cb:3e:e1:61:68:15:f4:be:59:52:16:4f:11:3c:
23:88:5b:42:62:dc:ac:ed:38:84:cc:72:6a:31:6a:
58:84:b5:ea:0c:97:09:f0:8b:eb:35:c9:87:42:05:
98:d2:71:8a:1b:58:89:52:6c:c3:1c:ce:69:8b:b3:
c5:b0:1a:70:65:6c:64:66:f8:47:8b:37:da:7b:8c:
2b:68:60:c4:d3:b6:1e:dd:be:c8:d7:f7:32:7f:0f:
7c:53:0b:58:08:bb:ed:70:12:99:e3:91:5e:0d:5e:
26:f1:18:ea:86:8d:60:94:71:89:fb:10:79:78:c5:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:BB:29:4F:71:C3:56:B5:51:E5:F3:98:0B:6B:76:D7:E7:47:43
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:a6:d3:b2:ad:01:fe:6d:94:df:c5:4e:b5:ec:27:40:ad:
e3:ab:37:5e:16:46:b5:b1:3c:fc:81:9b:56:18:d1:e5:76:a0:
3f:cf:17:cf:03:ef:7d:46:46:9b:10:f7:98:47:cc:79:01:03:
66:1c:da:cb:e9:56:6e:e2:e1:0e:7b:1f:6a:14:40:50:e6:b0:
03:04:4f:e7:d3:88:44:56:43:02:ee:20:2f:da:da:4d:4b:40:
04:09:53:54:75:43:61:6f:e8:c5:95:2d:c0:e4:95:c8:f5:fa:
3d:bc:28:33:6d:6a:61:28:27:ce:f2:3f:52:97:b4:b5:e5:f7:
8c:26:fc:c4:89:03:c6:dd:e3:98:3a:0a:82:ca:2d:e4:3c:47:
7a:c2:aa:f2:a7:e0:00:4d:f7:2f:cf:1d:61:47:46:03:1d:d1:
ef:bd:6a:91:e2:aa:8f:83:d3:f5:af:5d:40:fd:ec:53:8f:96:
b7:2b:e7:bd:e1:70:48:1b:31:d9:df:7f:45:05:6b:19:ed:05:
96:75:21:81:31:34:c4:82:39:9a:3d:60:ea:50:c2:64:08:a7:
84:8f:29:55:c0:a9:91:4a:5e:15:3d:79:87:f0:5a:cc:e9:93:
0f:b7:df:dd:aa:c3:86:ee:77:c5:5d:12:33:b3:6e:96:f1:83:
ea:ae:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:43 2026 by rpki-client