Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: ZQAMTqGofudzKCOC5CEhCQQUumRDxESgbuKDRSBljlc=
Subject key identifier: FF:80:B8:44:B8:8A:C5:28:0D:DC:5B:BA:A2:E2:CC:F6:72:8C:BA:28
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 019D284DD3B6809EE94E48EAE83345321AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 156F
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: usbi4XlBK8r+6c8C+GtGdUsxXpIr8XBc3mmzHZTvnds=)
2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d3:b6:80:9e:e9:4e:48:ea:e8:33:45:32:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=ff80b844b88ac5280ddc5bbaa2e2ccf6728cba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:c0:4f:ea:7d:9d:7d:36:24:4d:b1:5a:e5:
97:a1:c7:c8:e9:f6:b5:43:b8:e0:ee:0d:2d:af:fc:
53:c0:80:00:ba:c0:5c:c5:a5:82:02:73:11:48:8d:
1a:64:2e:9e:02:be:a7:c8:7e:ad:c6:14:2f:f5:7c:
ef:9d:08:a2:ad:e6:01:22:8b:91:ff:a5:2c:79:b6:
a3:2c:9b:5b:79:97:25:1f:86:55:86:45:db:64:8f:
ce:d2:93:c4:77:66:49:d6:ea:1b:e3:db:9f:92:9d:
56:ad:e4:cd:0a:40:16:5b:01:e9:27:78:44:32:a1:
7c:e1:88:a4:a3:93:64:0d:04:f2:b9:49:a8:1c:bd:
41:c4:e1:69:d0:76:f5:62:e4:a1:0c:5d:be:c9:7d:
9c:90:f2:92:2d:8d:99:5a:48:bb:b5:08:b1:54:3b:
35:ce:24:43:5f:52:00:8d:f1:e2:0f:6f:63:f8:dc:
7b:04:40:81:21:f3:14:b7:18:b0:4a:1a:6f:7f:bb:
a9:72:e7:ef:a9:f2:d7:36:c9:15:22:dc:1f:bc:77:
72:e4:a8:fb:6a:c7:3d:74:a2:2e:fb:c1:fe:1d:f0:
07:ae:20:32:a2:e1:ce:e0:3e:7e:72:e7:54:74:2b:
da:2b:3f:8a:ef:76:58:d2:8f:f0:fe:e2:0b:00:14:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:B8:44:B8:8A:C5:28:0D:DC:5B:BA:A2:E2:CC:F6:72:8C:BA:28
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bd:3d:53:d9:c4:7b:5a:59:eb:27:3d:48:03:8c:de:23:a5:
03:c0:12:06:4e:ef:22:3b:77:b8:9d:55:8d:5f:40:52:56:44:
88:56:f6:0c:f3:27:90:5f:fb:ae:60:84:a5:f6:5e:d4:e9:da:
c7:df:98:2f:51:89:c9:81:61:dc:d2:89:0d:45:32:3e:aa:93:
da:b7:31:c9:89:90:f6:01:37:7c:6c:0d:dd:23:f5:b3:3a:75:
db:ed:fd:80:24:bb:84:27:cb:31:1d:b5:2b:58:08:42:97:ab:
eb:ee:e5:e2:52:9f:a9:18:2f:63:ec:7f:e6:5d:d5:71:2a:02:
f9:a1:53:b4:39:7c:ce:47:cb:ce:4b:86:a7:2b:70:92:db:1a:
00:0d:11:b1:9a:47:d1:e4:97:bd:60:e3:82:6e:51:55:8b:41:
cd:73:92:4b:fd:4e:be:63:89:1a:31:97:32:ef:61:b5:c0:0f:
c6:63:b3:f7:b3:e8:2a:c4:2a:6e:bf:df:3d:67:c2:2d:1f:16:
fb:e8:4c:1a:4c:03:8c:e8:f4:94:c6:24:a9:9e:3c:de:db:4f:
a7:4c:12:23:cd:e3:00:67:c9:2b:d5:cb:e0:f6:96:d4:9e:15:
40:f3:e0:3d:9f:53:81:bf:3a:e9:49:6f:0e:91:b7:7a:e5:b3:
f8:43:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:55 2026 by rpki-client