Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: diIISM9lPw8J6Vpy8WAJq8YV3NjTeUVFCDZn2P1ns7A=
Subject key identifier: A3:25:07:C3:06:48:7F:AA:20:80:B9:84:67:7A:E3:04:97:6D:45:48
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019D2884BE223AF0F0782C30855D13472A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 10A7
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: OTcNfgl/rcowqFa6MKzEwygbPpDvwXZuzldW7MvrGJk=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:be:22:3a:f0:f0:78:2c:30:85:5d:13:47:2a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=a32507c306487faa2080b984677ae304976d4548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:86:4d:88:af:be:87:8f:97:6c:f0:b0:af:
2b:33:48:62:35:da:af:8a:56:98:25:7c:e3:1d:b1:
7e:ce:82:a2:82:c2:56:d1:ed:3f:37:82:c3:fb:47:
0c:db:af:ad:55:3b:6c:39:f1:46:fa:39:2f:77:97:
aa:36:e0:35:c5:b1:2e:78:36:81:24:3e:66:90:fd:
34:db:87:01:a1:5e:31:d3:91:c0:c2:83:f4:c7:0c:
a6:66:f4:ff:c1:55:ad:17:ab:0b:2e:ac:a1:d1:52:
3d:39:20:fd:6f:7e:93:f9:f4:80:99:a1:22:19:4a:
f6:fe:7f:b5:33:e1:84:2e:eb:47:7c:dc:2c:2c:0f:
78:ed:2d:0b:e7:49:57:cc:e8:26:21:55:98:df:5e:
97:9e:0c:9f:23:4e:2d:bd:26:7e:79:a2:a1:42:9b:
9d:d6:99:08:cf:ca:df:93:c0:02:50:11:c7:f7:70:
33:68:05:dd:71:8d:80:1e:c4:71:0a:2d:f3:e8:c2:
bf:76:16:e2:1a:1e:56:77:7c:eb:d4:1c:f5:70:1d:
23:12:d6:24:d5:d3:4e:41:cb:23:d3:7c:87:30:2e:
36:98:59:dd:a0:ab:98:63:52:1e:9d:ed:3b:73:14:
57:99:77:ac:df:45:34:ce:36:0d:21:30:26:0b:22:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:07:C3:06:48:7F:AA:20:80:B9:84:67:7A:E3:04:97:6D:45:48
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9b:f2:4a:e0:0b:bc:01:72:ae:a9:92:eb:e3:97:33:7d:b3:
28:e9:ff:d0:f4:c6:b9:cb:b0:19:a0:70:be:ba:79:54:8c:25:
4a:34:ee:fb:72:3f:8f:d8:6f:34:e9:5d:cd:76:68:58:ce:d6:
7e:9e:a1:3c:e5:d2:e6:0c:35:94:74:56:e6:74:c6:f4:4a:ef:
40:af:21:7a:cc:90:76:b6:2a:0f:42:e7:22:92:c4:2d:f3:9c:
88:d8:2c:d4:6e:f7:a1:48:55:e5:92:73:9f:3d:24:08:1e:58:
37:dd:85:68:a2:e7:35:37:ef:31:c9:e1:82:c6:99:19:63:c8:
9e:cb:3a:da:92:09:4c:5b:d3:c7:7c:88:76:42:7a:d2:9b:7f:
b9:fc:7a:cf:7e:10:59:ce:a7:9f:83:76:cc:39:e2:59:34:fb:
c0:c6:1b:a3:1d:eb:a4:5e:1a:b8:1b:ce:84:cc:db:0e:c7:bb:
be:e5:97:cf:50:3b:79:bf:ce:67:ce:71:c6:a5:13:80:93:59:
82:1e:83:95:96:85:be:4b:1c:e6:1f:29:9a:7d:eb:1a:3a:40:
37:a9:e5:16:4c:ac:7a:25:ac:8d:bd:d4:4d:39:c9:d4:c3:65:
82:b1:85:2e:db:24:10:60:9c:9b:7b:a3:d4:45:38:45:18:64:
bd:8f:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:12 2026 by rpki-client