Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: Shso3r07EmyiGiRBODTRuFdzdsg1aYc71K5+WnW6aUI=
Subject key identifier: 86:6B:05:FA:8E:B9:AC:15:3C:ED:73:6F:41:99:C1:62:31:BC:43:B0
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019F129C14934FFFEB360E6008E7975052CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 08F3
Signing time: Mon 29 Jun 2026 09:00:46 +0000
Manifest this update: Mon 29 Jun 2026 09:00:46 +0000
Manifest next update: Tue 30 Jun 2026 09:00:46 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: vzAaKYLCGjc0wVacj0Ae1bnsSO29rExlF4ipkE2uOuQ=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:14:93:4f:ff:eb:36:0e:60:08:e7:97:50:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Jun 29 09:00:46 2026 GMT
Not After : Jun 30 09:00:46 2026 GMT
Subject: CN=866b05fa8eb9ac153ced736f4199c16231bc43b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:e0:b1:56:fd:44:b7:f3:f1:60:be:7b:52:
ce:d6:d9:a0:0e:c3:5c:e4:82:c3:a5:1a:58:ae:a7:
b3:8e:24:47:9f:0d:f4:ee:c6:5b:f9:6c:51:bf:9d:
58:0d:5c:2f:40:3e:8b:0e:76:a9:26:52:b3:9f:68:
f8:c0:dd:e0:47:1a:70:2b:67:11:c6:ac:cb:4e:dd:
3a:20:d5:39:65:15:ca:7c:df:a7:d4:c2:ae:80:24:
8e:a0:ee:10:d3:f2:e7:fa:06:62:81:3f:65:3f:44:
2e:8c:17:60:22:71:d8:f2:8c:df:7e:f5:68:ca:10:
c3:b6:11:97:e6:ab:09:3f:67:1b:16:85:3c:25:7d:
b8:40:53:16:b6:2c:70:f3:82:ed:9a:57:52:d4:3f:
cc:2b:ff:bd:b7:eb:0a:8c:8e:da:ac:81:fe:09:40:
13:9b:bd:90:32:da:d7:0f:d8:b1:ae:fe:f5:70:27:
5a:c9:26:4f:c4:ca:85:a9:c0:03:75:9a:6a:80:fa:
aa:9a:ae:21:61:24:62:cc:a5:9c:19:cf:90:88:d0:
08:0a:e7:ce:fa:25:97:85:f1:9b:16:46:3a:4a:e8:
3c:f0:d5:48:07:3a:01:29:24:a6:69:f9:1f:b7:69:
99:8f:ba:3b:5e:b5:a1:78:d3:c9:f7:9d:dd:73:8d:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:05:FA:8E:B9:AC:15:3C:ED:73:6F:41:99:C1:62:31:BC:43:B0
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cc:b4:26:87:d6:8b:32:58:e3:c4:96:49:bf:17:35:c0:ec:
fd:b2:d0:86:11:39:05:dc:d9:23:f9:48:3b:5d:5c:f4:98:65:
f0:9a:ed:7c:a3:fc:66:77:4a:13:67:21:2c:4c:ad:57:d3:01:
ae:36:7a:bd:03:4a:66:75:c4:37:ba:85:75:4e:9d:d8:97:5d:
f9:68:1b:10:a9:a2:43:c1:8a:ad:38:ed:4f:45:ed:53:6b:03:
5b:9b:e0:9f:c4:77:0d:a2:1c:18:cf:de:38:b5:b9:9d:d4:2b:
91:1f:9c:da:59:b9:65:63:55:43:b1:72:8e:9b:98:40:d9:e8:
67:6c:ad:8d:91:19:38:ba:a4:b1:2e:b6:2d:68:3b:8e:88:2d:
af:15:bd:f3:53:ea:db:4d:41:d2:ce:a2:7b:b2:3a:ae:dc:fe:
f8:1f:c4:99:e6:e8:03:8d:6e:04:cd:1b:83:b3:92:3a:bc:6a:
a2:a0:00:1d:c6:ee:05:3d:61:1e:85:32:22:a9:85:30:8e:5a:
8d:38:87:ff:2d:4c:af:bc:12:3d:9e:f8:60:99:96:c7:5e:2a:
4f:7a:a6:4e:b5:bd:ea:f6:49:1b:7a:a3:ec:29:ad:1f:ed:a1:
06:3a:00:a6:09:96:55:96:04:c0:31:1e:c5:01:6b:7c:35:94:
9e:cb:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:59:07 2026 by rpki-client