Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: hg8NireDMCWD1CjF/z3G3bq9ozquKsK3z/flyzDFQ84=
Subject key identifier: 3C:05:5C:3A:69:B8:DA:D9:A8:3C:0D:DB:13:16:E0:D4:4C:7A:D7:8C
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 01A13900213ABA080383357CBA1BC267941B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0A10
Signing time: Wed 14 Oct 2026 06:01:12 +0000
Manifest this update: Wed 14 Oct 2026 06:01:12 +0000
Manifest next update: Thu 15 Oct 2026 06:01:12 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: FanTN1hh9gJTmdd/f0pNPbCZJaHTGXwDBMaoHerMPJA=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:00:21:3a:ba:08:03:83:35:7c:ba:1b:c2:67:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Oct 14 06:01:12 2026 GMT
Not After : Oct 15 06:01:12 2026 GMT
Subject: CN=3c055c3a69b8dad9a83c0ddb1316e0d44c7ad78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:43:78:29:bc:5d:94:35:62:2c:b4:22:c4:
e3:4c:c5:d7:d6:c7:1f:0d:7c:2f:0a:1a:78:c2:31:
e1:b3:f7:69:ad:36:30:d8:f4:e3:66:e2:bf:b5:59:
01:f3:54:df:d7:70:bc:8f:c3:8e:92:60:e5:db:55:
85:bc:8a:33:7e:fc:27:a6:da:46:ac:ef:ff:8f:bf:
ca:4c:25:ce:0d:fd:56:3e:d3:f4:6d:bf:bd:f3:6c:
cb:c3:16:69:56:79:e9:76:9d:f2:ab:07:73:80:d0:
ac:21:de:17:da:78:c1:43:87:80:ec:de:54:71:ec:
92:f0:84:83:b9:08:a2:c4:9e:26:ea:05:92:ec:82:
ce:5c:e9:58:4e:74:df:a0:d0:93:92:10:fb:ff:82:
45:35:27:f0:5a:e7:b0:31:a5:b9:df:37:17:bf:70:
e3:15:42:2a:4a:39:1f:36:c4:1f:99:1e:7c:38:af:
1b:ed:e2:81:7c:f5:7f:da:e2:f0:4d:03:ce:9c:fb:
98:cb:a6:46:65:03:8e:32:8c:da:a2:ce:8f:79:03:
5e:7d:e1:55:43:b0:ea:00:74:55:3a:7c:c3:fd:a9:
ff:2d:32:c9:fb:50:e0:ea:3b:97:80:55:e6:7e:ee:
8f:1d:d2:d2:60:26:1b:5a:2c:05:96:05:eb:13:5b:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:5C:3A:69:B8:DA:D9:A8:3C:0D:DB:13:16:E0:D4:4C:7A:D7:8C
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:14:39:56:1b:57:cb:d6:58:e2:04:fe:b6:bb:60:3f:e0:
30:3a:f1:5a:dd:84:c6:ff:49:9d:ca:9c:4a:46:49:f5:3e:4b:
50:09:5c:89:05:63:b5:a6:29:e2:b5:7b:29:7a:5e:4a:75:78:
76:f7:8c:88:1e:cb:d8:80:53:e3:79:84:02:66:3c:b6:38:09:
8d:8e:e5:94:04:1d:d9:30:23:5b:16:9c:48:15:e6:b6:34:3a:
89:37:b2:a9:82:e9:cf:5c:9e:46:fb:36:81:ba:f5:fb:e5:e7:
72:6c:54:be:8f:fa:84:3e:0d:3a:63:a6:45:f5:06:8a:35:22:
57:54:70:54:bd:22:b7:22:a3:03:e3:4a:c3:a2:40:99:a3:7b:
21:f0:75:a2:70:3d:c4:2a:e5:fd:2b:50:b6:57:bf:24:47:ff:
6c:24:c6:60:ee:e1:61:c9:f1:10:98:f8:91:f9:67:5d:5c:2b:
ad:cf:f8:08:df:d9:72:3e:50:54:de:03:84:da:cc:f4:2b:4e:
7f:87:af:43:29:06:cc:95:64:37:41:ca:4f:4e:79:f5:c2:6a:
a4:db:c0:af:43:5d:ed:e1:ab:51:bf:bb:a4:ab:ec:3d:f9:d7:
2c:e8:e6:92:53:ce:bd:69:fc:7b:bc:b8:0a:bc:b2:e7:53:ed:
06:ed:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:53:53 2026 by rpki-client