
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: 48Xe3GU9R9Ga5krZqgB8r4s00KjUq7PiwGfFY+zoUu0=
Subject key identifier: 38:57:11:D9:54:74:BD:AD:E2:79:18:D7:CE:48:83:EF:F0:64:7B:9A
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 019E1D9098C10593A7E40DA8E13E753EF30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 15EE
Signing time: Tue 12 May 2026 19:01:15 +0000
Manifest this update: Tue 12 May 2026 19:01:15 +0000
Manifest next update: Wed 13 May 2026 19:01:15 +0000
Files and hashes: 1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: S8D+QUEj/HajDTpJrYu4sSkLNajw2qDk4enSQ3C0SMk=)
2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:98:c1:05:93:a7:e4:0d:a8:e1:3e:75:3e:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: May 12 19:01:15 2026 GMT
Not After : May 13 19:01:15 2026 GMT
Subject: CN=385711d95474bdade27918d7ce4883eff0647b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:32:cb:5d:79:c5:bd:3d:47:c7:44:ed:60:
96:50:0c:5a:96:ac:ec:bf:72:11:93:1f:58:51:ae:
61:94:52:1c:23:ae:c5:51:76:e5:70:0a:42:d4:98:
44:93:1f:1e:a5:69:8c:a6:1b:68:fe:1c:bd:2f:50:
13:36:1d:19:59:7c:ea:71:8e:79:f2:4d:c5:0b:9a:
56:94:4f:53:b3:7b:be:85:50:f4:94:2d:a8:d8:9f:
b7:01:36:9d:75:e7:db:d5:4f:ad:36:75:5e:c2:22:
8d:0e:8f:3b:b3:65:d9:36:d6:57:12:5c:4c:4f:02:
45:ed:7c:87:52:3a:37:ad:3a:3e:a7:bd:38:78:08:
ef:45:2f:3b:b2:91:8b:50:6b:62:b3:cd:2a:b5:82:
c6:76:55:f0:bc:cc:af:d8:88:62:66:cf:37:4e:38:
d6:1c:2b:ed:23:9e:1b:e8:71:f9:3d:54:71:f9:8e:
dd:90:e1:b3:a1:2f:9b:08:64:ad:de:f3:63:63:a4:
af:76:b9:c4:f8:f7:53:c8:e9:73:fd:d5:e2:bf:8d:
fd:12:af:70:52:f4:36:d9:8b:94:17:50:82:4e:29:
72:d0:52:c0:86:ab:3f:47:f4:82:01:c7:e2:12:00:
61:37:df:1f:38:2e:bf:15:33:c6:dc:3b:a3:48:65:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:11:D9:54:74:BD:AD:E2:79:18:D7:CE:48:83:EF:F0:64:7B:9A
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:95:f6:9d:22:73:34:d1:d1:af:4c:03:e7:17:9e:ec:b3:2c:
88:a4:d5:11:3d:07:99:bd:85:f4:39:e8:dc:72:18:d9:e8:fe:
b9:e0:c3:5d:70:15:3e:ed:68:51:f7:32:98:64:cb:3f:70:c8:
62:74:15:85:50:51:91:06:a6:75:b5:3b:8b:74:0b:16:74:98:
09:07:a2:9e:3b:cc:d6:02:d8:99:79:94:f0:a9:89:a1:9d:53:
c0:6d:4a:53:de:4a:01:7c:50:ad:51:44:c2:c8:83:82:0b:97:
ac:0e:76:1c:ab:23:63:11:e0:c4:34:97:c9:69:cb:e5:ca:bd:
a0:51:7a:0f:15:36:8c:c1:83:05:7c:bf:3d:15:30:57:47:5d:
de:12:28:21:53:5c:79:48:09:b0:40:8f:85:fb:ab:f1:01:3a:
e9:8d:75:dd:3c:94:5a:be:fb:cc:a0:86:4e:b2:64:93:1c:10:
d8:f5:1c:36:a5:2c:66:3e:94:17:91:83:b8:0d:28:31:a9:c9:
27:d3:7d:0c:70:98:bb:5d:ee:1a:a0:8f:70:a3:05:f8:8e:ce:
68:0f:bd:4c:91:2a:87:c1:6e:e2:2e:6a:de:78:53:75:6d:2a:
6c:ba:54:0e:66:b1:82:4d:b4:f0:80:8c:bb:42:e4:e8:87:28:
28:c2:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:43 2026 by rpki-client