Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: 8r95m5usHabeTkYWtePwyH8yiYfYxSdp+45cOKZzOJQ=
Subject key identifier: 30:9E:B2:AB:D4:B0:8F:00:50:E4:13:30:2D:84:CA:01:AB:9E:AB:3F
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019D265ECF924BA3B29111DEFF3769763666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 1020
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: AJDdpwXhSLXayqIFOVB73Ncif2OfIMkaS4GvtgJBHvI=)
2: YtniEFg8kjPPW1GupRixGIZcTZw.roa (hash: kE3KePA1ZXt9tPgxQYG+9riIhGGimv2LBW4VQyOyrso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cf:92:4b:a3:b2:91:11:de:ff:37:69:76:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=309eb2abd4b08f0050e413302d84ca01ab9eab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:cd:71:d0:22:a1:58:7e:35:1e:b5:d7:bf:
dd:c0:8a:d2:36:25:6d:98:40:76:23:6d:2e:f4:5d:
c7:07:4a:c2:6f:1a:94:ed:53:dc:61:07:aa:6a:55:
3d:e1:81:a2:de:fb:42:81:84:64:fd:c8:7d:43:52:
8b:65:fe:3e:ea:d1:51:b7:ac:23:bb:da:d7:65:37:
fe:51:1b:fe:b4:2a:3f:b0:57:81:f5:68:31:a0:ec:
8b:0b:3d:82:f4:ed:eb:14:4e:68:bf:86:df:b5:e4:
52:2a:34:56:f6:33:a7:3a:c2:7f:d3:dd:9a:98:67:
21:f9:e3:6c:41:1c:8b:2f:e0:b6:60:3c:e2:92:9f:
4d:96:22:d3:e5:86:47:84:ed:5d:a9:5d:de:c2:c3:
a2:f3:fb:bd:24:f4:3f:61:c7:cd:da:d0:2e:4c:ee:
93:57:94:33:5e:5a:87:90:24:48:d1:d2:44:9d:b5:
21:20:90:c8:7d:0c:4d:bb:6e:c6:8b:83:0c:23:4f:
61:93:25:9a:05:3e:e7:8c:1a:a1:18:32:02:c8:e7:
27:7b:54:1c:34:ec:bc:8c:d3:1d:3f:8d:d8:78:85:
e3:d7:d0:4b:dc:87:21:0a:45:a5:1b:40:a3:1d:05:
16:60:d4:fc:12:31:b6:be:6d:41:f4:cf:bc:d9:67:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9E:B2:AB:D4:B0:8F:00:50:E4:13:30:2D:84:CA:01:AB:9E:AB:3F
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b7:77:7a:16:95:38:97:b2:ab:76:30:e1:41:73:09:69:fd:
20:81:ea:9c:07:1e:7e:8d:11:e4:8f:c4:f6:68:22:f4:e3:49:
f0:0c:ce:4b:cf:33:be:01:99:9c:1b:37:52:d9:6f:da:f2:fe:
36:e2:11:2b:48:af:3b:64:ef:34:64:23:6f:81:18:64:02:d9:
45:0a:b0:99:1c:24:e6:3f:1c:1e:1f:df:66:38:29:31:30:4f:
2c:96:f8:7a:03:1b:ac:2e:d6:f9:6a:2e:ba:8d:58:79:2f:39:
7c:02:67:05:3c:bb:39:ca:f8:30:d6:20:54:7a:7c:09:9a:96:
ac:c6:99:c5:a5:a4:77:f5:77:c6:8c:bc:39:59:7f:c4:16:06:
a4:59:4c:37:c0:70:4d:a7:39:8c:ef:c8:3a:6e:22:c2:78:e4:
e6:09:ad:a5:8b:49:29:03:4e:47:f7:f2:11:51:a1:1d:55:4d:
6b:35:d9:1c:07:07:71:ab:7f:5e:ef:59:6e:45:a2:7a:10:ab:
2e:d9:93:25:07:79:00:aa:dc:ce:73:ee:8b:41:c4:2b:f0:0c:
31:fc:21:d7:8c:37:bc:29:89:19:db:4a:94:b6:b4:42:d8:cf:
bf:0d:c7:7a:b4:16:24:54:f4:4a:c3:2e:29:33:c4:76:d6:f0:
45:a8:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:01 2026 by rpki-client