Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: p1fnOViu2GvY4Rk5/MuYV+jgTO44dz0tt2SmXDwCf68=
Subject key identifier: A9:A4:5D:88:4C:6B:87:90:75:B2:EB:0B:39:FC:4B:67:F2:18:C2:EC
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 019D39417F4030A8DDC1CC4F3244F6A1FDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 155F
Signing time: Sun 29 Mar 2026 11:01:26 +0000
Manifest this update: Sun 29 Mar 2026 11:01:26 +0000
Manifest next update: Mon 30 Mar 2026 11:01:26 +0000
Files and hashes: 1: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (hash: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs=)
2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: QI2PsNTpbZDK8vOxeTtr/UkxBkHv404oMl247H0AZQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7f:40:30:a8:dd:c1:cc:4f:32:44:f6:a1:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Mar 29 11:01:26 2026 GMT
Not After : Mar 30 11:01:26 2026 GMT
Subject: CN=a9a45d884c6b879075b2eb0b39fc4b67f218c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:f0:10:8d:72:77:ac:0e:6e:67:8c:53:fd:
16:38:ee:a6:e2:8e:af:56:94:e8:6e:af:36:3f:3a:
5c:5b:8c:23:a6:bc:0e:58:aa:de:d3:56:c1:c3:d2:
65:0f:59:e4:dc:5a:ac:d6:03:17:48:7e:a9:77:ec:
c4:9a:55:8d:ab:00:8b:61:1e:5c:c8:7f:b7:ba:2e:
40:d2:89:0e:8e:b1:28:a6:74:37:8b:fe:75:ec:78:
0d:38:a7:0c:df:81:6d:19:81:52:f8:e0:92:6b:19:
33:75:e3:a2:dc:bc:64:48:8c:ca:65:e0:f8:04:d0:
18:5a:c5:48:b0:6a:0f:a7:02:8e:d3:ab:ea:1a:6e:
70:34:19:73:02:4a:5f:09:0a:90:44:4b:ae:1d:64:
17:be:52:ea:f5:20:39:9e:1e:2e:c9:38:c5:4a:d9:
d5:9f:70:48:24:b9:5f:8c:9c:e5:b5:a4:1c:72:5b:
62:dd:aa:02:88:fc:35:3f:0d:3e:8c:20:21:d7:73:
d6:4e:10:5c:4b:01:eb:a6:7b:9f:4d:cb:3b:49:eb:
9c:c7:f8:c4:72:10:35:8b:a6:f5:4d:42:d9:69:da:
a8:d2:50:3a:45:21:16:d5:f2:02:7c:94:25:90:ee:
a4:54:05:de:ad:0d:28:25:50:75:34:84:b5:57:db:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:5D:88:4C:6B:87:90:75:B2:EB:0B:39:FC:4B:67:F2:18:C2:EC
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a5:90:79:e6:c8:4e:6d:cb:43:b2:b1:91:cc:f1:55:3b:46:
a6:b3:c7:0d:5b:d5:ff:13:bb:52:f2:99:5e:b3:81:28:27:ff:
8b:c5:70:9d:82:ff:83:7d:dd:6d:c0:3f:72:fc:5b:30:25:94:
7f:d0:95:b7:a2:0f:3f:63:c1:4a:66:e8:9e:c4:91:92:fa:c3:
26:7e:4e:4f:09:ea:dd:c9:a3:64:1e:cc:68:a4:dc:db:b8:44:
01:94:de:39:92:73:f9:ce:d1:8e:6a:fe:4e:3f:76:43:b9:bc:
66:b6:58:52:86:8e:2b:cf:c6:2e:21:1c:26:66:b8:b2:f2:83:
bd:1e:71:f8:c8:a1:7c:d0:b0:61:03:38:dd:62:05:d3:6b:7a:
da:25:b5:e4:04:65:c1:6f:62:d4:27:11:1e:de:d1:55:08:c6:
dd:b3:5d:4e:87:d4:9e:d6:ff:54:5b:df:38:d9:03:d2:63:25:
b0:98:11:1c:ad:5e:e5:c6:4c:9e:8d:d8:98:c0:b7:50:93:c3:
20:1e:86:a1:30:0e:bb:1b:42:89:ef:89:0d:79:b2:0c:45:98:
69:cc:d1:e5:02:f7:3f:60:bb:a2:ed:a3:e2:f5:e5:07:7e:39:
60:2f:16:90:af:be:ff:e9:ff:3c:78:35:7f:a0:f6:78:9d:f5:
36:ad:d8:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QX9AMKjdwcxPMkT2of3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDcxYzg1YTM0ODI5NThmODdmMDMyYjY0NjMxOThjN2Zk
OWViMDcwHhcNMjYwMzI5MTEwMTI2WhcNMjYwMzMwMTEwMTI2WjAzMTEwLwYDVQQD
EyhhOWE0NWQ4ODRjNmI4NzkwNzViMmViMGIzOWZjNGI2N2YyMThjMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wnwEI1yd6wObmeMU/0WOO6m4o6v
VpTobq82PzpcW4wjprwOWKre01bBw9JlD1nk3Fqs1gMXSH6pd+zEmlWNqwCLYR5c
yH+3ui5A0okOjrEopnQ3i/517HgNOKcM34FtGYFS+OCSaxkzdeOi3LxkSIzKZeD4
BNAYWsVIsGoPpwKO06vqGm5wNBlzAkpfCQqQREuuHWQXvlLq9SA5nh4uyTjFStnV
n3BIJLlfjJzltaQcclti3aoCiPw1Pw0+jCAh13PWThBcSwHrpnufTcs7Seucx/jE
chA1i6b1TULZadqo0lA6RSEW1fICfJQlkO6kVAXerQ0oJVB1NIS1V9vO3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmkXYhMa4eQdbLrCzn8S2fyGMLsMB8GA1UdIwQY
MBaAFHEHHIWjSClY+H8DK2RjGYx/2esHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEt
YWVmZDgwODcyNTMyLzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEtYWVmZDgwODcyNTMy
LzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKWQeebI
Tm3LQ7KxkczxVTtGprPHDVvV/xO7UvKZXrOBKCf/i8VwnYL/g33dbcA/cvxbMCWU
f9CVt6IPP2PBSmbonsSRkvrDJn5OTwnq3cmjZB7MaKTc27hEAZTeOZJz+c7Rjmr+
Tj92Q7m8ZrZYUoaOK8/GLiEcJma4svKDvR5x+MihfNCwYQM43WIF02t62iW15ARl
wW9i1CcRHt7RVQjG3bNdTofUntb/VFvfONkD0mMlsJgRHK1e5cZMno3YmMC3UJPD
IB6GoTAOuxtCie+JDXmyDEWYaczR5QL3P2C7ou2j4vXlB345YC8WkK++/+n/PHg1
f6D2eJ31Nq3YCw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:32 2026 by rpki-client