Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: fbmvK6kojwuIsr1BJ2/dchLj65ZOt+4Q5NxiLGKwhRw=
Subject key identifier: ED:41:EF:E1:D1:61:E6:88:03:96:7B:19:91:48:BB:A6:72:4E:6F:DF
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019E2ADE02CFA5DA0A3A020E6B96CD552D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 087B
Signing time: Fri 15 May 2026 09:00:53 +0000
Manifest this update: Fri 15 May 2026 09:00:53 +0000
Manifest next update: Sat 16 May 2026 09:00:53 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: 2M2aduaSRwLTmvQGLkGQCc9HX3yY+FKZUZA1pceE0N0=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:de:02:cf:a5:da:0a:3a:02:0e:6b:96:cd:55:2d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: May 15 09:00:53 2026 GMT
Not After : May 16 09:00:53 2026 GMT
Subject: CN=ed41efe1d161e68803967b199148bba6724e6fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:a1:c4:b5:98:4f:3d:e6:72:6c:0d:c0:be:
30:5b:71:72:94:bc:96:e7:7e:89:5d:f2:e6:53:1e:
dd:28:6d:a2:ff:de:c9:50:a9:e4:07:f4:0b:b4:f4:
18:8b:ab:27:2c:b1:61:07:da:5d:d5:c5:27:14:f9:
ea:cb:54:ea:38:d1:92:7a:88:0e:ec:08:4f:45:e8:
fd:24:9c:1b:62:e5:28:c6:50:aa:c8:dd:77:df:31:
a3:ee:24:af:86:a6:c2:a8:e6:a7:14:5d:d0:a4:44:
5f:17:f1:43:df:8e:a9:f3:5d:17:3a:e8:4e:f7:07:
61:83:6b:6e:fe:da:f2:dc:45:e2:cd:6e:a2:c0:c9:
c7:f3:77:cb:35:7d:a3:c4:c5:e1:9d:1b:01:1d:14:
e1:38:fe:1f:dc:0e:a6:ec:92:f5:bc:51:14:0b:8e:
90:bd:a6:6b:ba:43:63:34:0e:8b:7a:62:d5:c6:eb:
4f:b1:ad:b8:be:9a:ec:43:48:ac:36:40:10:da:60:
de:89:42:66:dd:3a:47:51:d1:80:6e:32:bb:38:ca:
86:24:8d:67:8e:d3:77:48:ee:ca:c8:70:02:e4:2f:
4c:cc:ae:30:df:d0:74:2d:eb:e5:fc:8f:bd:35:65:
fc:c6:45:b9:c8:86:71:27:40:ec:c9:b4:2e:01:76:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:EF:E1:D1:61:E6:88:03:96:7B:19:91:48:BB:A6:72:4E:6F:DF
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:3f:70:83:07:24:eb:b0:23:4c:11:e8:43:14:c8:59:1e:
e8:1e:9c:9b:3e:eb:dd:e6:f6:cb:b2:2b:fc:b3:32:c0:0c:54:
ae:ce:74:35:fa:9c:e3:81:26:94:45:da:c5:62:46:05:8f:31:
34:ff:38:f9:6c:a0:9d:74:a8:82:43:50:cb:a6:cf:19:81:70:
a9:e4:0d:3f:ec:0f:67:80:35:95:50:00:96:c8:e5:44:ed:2f:
77:21:93:22:42:29:13:b8:4c:a1:09:53:d7:cb:14:a1:3f:ab:
c1:04:8d:56:f6:e0:95:5d:e8:8e:a0:d3:a6:bc:d3:a0:f5:e0:
b2:dc:cb:7c:1f:04:f6:f1:4a:91:3c:f2:dd:35:e8:bf:ab:8d:
4b:51:e8:a0:53:35:eb:56:ec:8e:55:d4:8f:ad:a6:d5:f2:11:
4b:c5:93:93:a9:e8:98:2d:6d:3f:c6:f2:c6:da:47:55:60:d4:
08:99:72:3a:0d:c1:11:2c:f6:ca:32:8d:a6:ae:ae:cf:4d:49:
53:e3:80:be:14:fb:84:76:5d:5a:ee:96:d6:78:3d:0d:f1:80:
f9:32:36:f2:3e:d3:d7:68:ed:8e:f3:79:3c:98:54:a7:84:77:
56:e4:49:56:bc:13:92:48:f3:85:56:3c:18:6d:ec:3a:95:f7:
09:4f:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:28:21 2026 by rpki-client