Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: oAE5N6A8r++dCoS4dc3FshGFI1KUjffvoztofC9fAGg=
Subject key identifier: B3:59:D2:99:6C:F0:2A:60:D8:4B:CC:CE:2A:3D:FD:19:11:CE:31:F9
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 01A08AFA51C9407254147B38F84EF25571F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 1717
Signing time: Thu 10 Sep 2026 11:00:55 +0000
Manifest this update: Thu 10 Sep 2026 11:00:55 +0000
Manifest next update: Fri 11 Sep 2026 11:00:55 +0000
Files and hashes: 1: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (hash: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs=)
2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: Vgi0tr9nAgLFPF0eHo8KHn8EXD2mF24MSaL4pXL6JPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:51:c9:40:72:54:14:7b:38:f8:4e:f2:55:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Sep 10 11:00:55 2026 GMT
Not After : Sep 11 11:00:55 2026 GMT
Subject: CN=b359d2996cf02a60d84bccce2a3dfd1911ce31f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:4f:56:44:11:a3:b3:64:83:43:55:de:71:
c0:bf:cf:fa:a9:8f:c0:94:36:62:9f:6c:d9:63:5f:
6f:c8:2b:51:dd:a2:c0:ab:75:49:d6:a1:95:fe:dc:
ba:80:2e:8e:69:18:37:cf:6d:90:62:58:b3:de:35:
36:ef:94:16:b9:39:a0:65:94:5a:61:8d:1e:db:37:
38:71:59:28:24:9e:3c:9d:8b:25:f9:9f:17:82:5e:
8d:b0:ae:c1:1c:94:07:3c:f3:ad:04:ce:c7:ca:ed:
36:70:ea:ed:f3:1c:2f:28:83:ee:4b:72:09:14:be:
10:59:89:08:e8:5c:3a:cf:cd:97:f7:8c:c5:6f:de:
30:47:6a:12:82:78:71:2a:95:f5:51:e8:fe:35:6f:
43:c8:69:f0:62:16:b0:d4:dc:f2:72:14:56:b4:2e:
d2:1d:c8:5e:97:ed:26:8e:be:ea:4f:d9:d3:30:18:
01:37:45:50:69:3b:0a:5b:e9:17:fd:4d:42:49:ee:
37:0c:0a:9b:02:37:98:42:cb:9c:8c:f1:c9:5d:07:
5e:61:e5:c3:cf:74:59:fb:01:24:3b:2f:72:84:14:
a5:1c:37:4e:e8:fe:19:00:f4:e0:0a:8d:1d:92:9d:
da:2b:6f:f0:db:53:4e:6e:a7:de:f9:2f:3b:82:db:
e7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:59:D2:99:6C:F0:2A:60:D8:4B:CC:CE:2A:3D:FD:19:11:CE:31:F9
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d8:96:cf:8c:2c:13:11:1c:3d:b4:ff:df:56:8f:3b:6b:89:
23:a8:1e:f7:eb:37:f6:38:46:4e:5b:4e:4a:1f:b6:8e:2e:af:
6f:4e:f8:93:4a:35:79:f8:ab:65:c1:34:57:6c:8f:e2:70:c8:
a8:17:76:71:da:02:00:8c:a6:65:bc:e5:21:09:bd:b6:42:ec:
32:4e:bd:a7:b3:67:95:30:0b:de:76:ee:33:42:6e:ac:27:38:
4c:c1:ec:5a:d9:e8:af:c2:aa:51:62:0a:8e:ce:0c:cd:79:98:
d3:0d:f6:4a:c2:5e:8d:e4:8a:38:b0:cb:40:29:be:00:28:90:
4d:a8:ad:1a:e7:7f:1b:ba:87:c7:f9:e4:53:ec:3e:2c:bd:ae:
45:b6:93:7a:93:fb:d3:0a:3c:2f:4f:db:58:1e:80:31:f9:7e:
af:0b:f2:ed:40:54:ca:9d:69:39:aa:86:af:b3:90:e5:20:c5:
cb:69:f8:ed:4d:25:cb:b8:cd:c6:54:5e:b1:72:dd:70:bf:8d:
d1:bd:82:d9:2d:4f:13:d8:fd:b6:f3:eb:c2:83:25:2d:92:f8:
f8:1b:8a:7e:0c:f6:63:68:31:88:94:2e:88:eb:e8:7a:db:9f:
d9:98:af:0e:7b:c7:ef:84:b4:34:2c:b3:a4:00:b0:d4:52:59:
5d:f2:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:59:57 2026 by rpki-client