Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: /qROTQpJ//4wzAXQlLARkQZ+szCIgz/Ob6Eq45C7jNM=
Subject key identifier: BA:92:3C:8C:AD:E6:8F:44:58:36:E2:20:FF:0D:2F:9C:29:57:DE:A8
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019D3977B7C89B629661F0B9203CE6E9E286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 07FE
Signing time: Sun 29 Mar 2026 12:00:40 +0000
Manifest this update: Sun 29 Mar 2026 12:00:40 +0000
Manifest next update: Mon 30 Mar 2026 12:00:40 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: m1DwCVW3Qa2xyb4WVJIT0mYxtdW7iak4SJ+3Un9N2O8=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b7:c8:9b:62:96:61:f0:b9:20:3c:e6:e9:e2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Mar 29 12:00:40 2026 GMT
Not After : Mar 30 12:00:40 2026 GMT
Subject: CN=ba923c8cade68f445836e220ff0d2f9c2957dea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:b1:17:3e:90:09:45:97:f7:00:85:4e:47:
c1:c1:4e:2a:96:cb:c3:bc:4d:02:f7:53:78:50:10:
78:f3:05:40:55:80:08:86:eb:e4:9c:72:e1:47:2a:
de:b8:72:4b:48:33:ea:ca:a7:b9:41:7a:8f:ab:45:
c9:a8:6e:62:97:a3:f9:34:b0:22:9d:48:47:87:c1:
ac:36:62:c0:94:aa:01:13:33:49:4a:cb:09:a7:c0:
f2:11:33:41:e0:a3:db:46:02:56:b1:dd:e8:7d:80:
fd:94:1c:33:a9:4f:95:18:ff:94:dd:95:68:71:2b:
0b:45:de:9b:a6:e4:e1:27:8d:19:57:15:79:b2:7a:
79:fd:aa:96:c9:ab:39:74:f7:62:3b:e9:a3:cc:ba:
18:72:2e:15:65:ab:ea:70:b4:47:e7:dd:13:13:7e:
7f:7b:1c:ca:03:04:bc:a3:b2:cb:27:c4:3a:39:94:
dd:9f:7e:b3:f9:69:41:ad:8f:5b:86:a3:e1:8d:51:
d2:94:13:89:5f:ed:39:62:b4:ad:30:75:70:5b:cc:
2e:e0:06:f0:b2:1e:fb:dc:ae:65:9e:c5:43:97:fd:
4c:42:f6:e9:13:49:6f:4b:70:54:d0:e7:f3:20:7c:
d6:11:cc:ab:73:31:a5:00:a6:28:e5:b6:21:c5:14:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:3C:8C:AD:E6:8F:44:58:36:E2:20:FF:0D:2F:9C:29:57:DE:A8
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:6d:d9:4f:11:a9:dc:d9:84:72:06:87:e3:e5:12:77:d7:
1f:0d:6a:cc:a1:f4:39:ae:8c:e0:b3:65:d6:00:c9:19:49:ee:
f3:9a:3c:f7:22:6e:ee:2e:20:85:fb:5d:c2:db:80:85:ce:36:
5d:f1:9a:f6:b1:85:72:7b:09:29:7e:43:11:2b:2d:24:01:3b:
f6:dd:6c:53:e3:46:e5:c9:67:16:9e:51:60:39:ba:dd:79:3d:
b5:97:52:f3:36:76:76:0a:f5:16:6f:4a:a8:47:93:3f:8a:e4:
1a:02:2f:c0:e2:c7:18:43:74:8c:e1:bd:65:de:41:54:17:f4:
e2:84:1f:f9:62:6e:17:d6:02:e6:e5:b3:f2:33:6a:86:3d:3b:
d2:0a:8c:b1:3b:9e:1c:d2:86:aa:38:b2:c6:6b:56:33:b2:88:
18:d8:b8:d3:f3:63:84:5b:d6:db:e1:ab:c5:12:9f:e7:2b:a4:
04:ed:29:e0:33:bd:28:5c:43:71:32:4c:08:a0:aa:0a:2c:36:
d0:c3:21:93:72:70:fb:01:2f:7f:87:dc:25:fa:7a:04:10:b1:
a9:d3:7f:10:73:f4:57:5c:41:68:43:cf:4a:c4:89:a1:0d:92:
88:72:85:83:d1:3b:2b:3d:cc:6a:10:70:73:d1:f8:20:e5:1a:
9a:d9:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:07 2026 by rpki-client