
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: auFbvIlpXIo7Q0Athpi3MqKZvpxywxaQ9iyND0a08Ug=
Subject key identifier: 6B:5A:BB:DC:E1:C6:50:84:AA:AD:44:84:DB:50:FE:B9:39:53:48:53
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 01A13E9454AAFD2BF953F61511A1A456A255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 14A0
Signing time: Thu 15 Oct 2026 08:01:10 +0000
Manifest this update: Thu 15 Oct 2026 08:01:10 +0000
Manifest next update: Fri 16 Oct 2026 08:01:10 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: r48+coP0r0pc3kawN0iWHOo/wPBA6CSbf2RJGMK7G6U=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:54:aa:fd:2b:f9:53:f6:15:11:a1:a4:56:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Oct 15 08:01:10 2026 GMT
Not After : Oct 16 08:01:10 2026 GMT
Subject: CN=6b5abbdce1c65084aaad4484db50feb939534853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:54:e8:ed:45:2f:b8:ad:0b:f1:6b:69:04:
af:d0:cf:d4:ee:c9:f5:ab:57:20:35:4d:bf:5f:2b:
4e:28:e1:13:ed:cb:de:7f:37:6a:ab:16:85:c2:4a:
82:a1:39:39:37:9c:3a:9a:49:20:c6:ef:81:a6:23:
96:71:69:51:f1:a4:89:c8:88:23:e9:a0:df:b3:f1:
b0:3e:d3:17:71:00:70:0b:aa:14:20:19:67:04:c3:
d6:ea:dc:93:36:e0:ab:2c:e5:17:c0:e9:11:b4:c8:
d0:1a:15:be:df:44:3c:69:d2:77:98:4b:15:fa:25:
51:70:a8:90:8c:25:24:e6:c4:e9:6e:e9:c1:a8:80:
d8:94:6f:a1:5f:d0:bb:77:c7:04:6e:59:ef:c7:ad:
17:7e:61:34:98:86:c4:3c:ed:4d:ce:47:91:8c:91:
1d:6b:fe:99:84:9d:25:6f:b0:cf:8c:be:f1:24:8f:
45:6f:9a:f7:62:b7:e7:69:4f:e8:58:3d:29:27:d8:
59:a4:53:42:8b:d9:87:96:e2:c2:a6:87:32:b8:66:
df:c2:e5:40:24:61:56:b9:e4:25:42:e7:89:48:f8:
3e:7e:eb:ff:c5:c5:92:b5:1b:0a:25:06:36:b5:e4:
f2:b9:9a:d3:22:64:33:68:3b:2b:01:e6:ba:f5:cb:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5A:BB:DC:E1:C6:50:84:AA:AD:44:84:DB:50:FE:B9:39:53:48:53
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:22:ba:ee:0a:b1:52:90:7d:da:51:ba:9c:03:43:11:bf:2d:
de:f5:09:cf:a9:65:94:64:60:3e:29:f9:ab:8f:c7:66:0a:23:
a6:de:63:e1:79:f7:81:34:1f:76:e1:06:d9:28:07:b5:7f:25:
31:60:09:dd:91:b1:4e:8b:dd:72:e9:9d:f8:1c:2f:4b:72:38:
00:5b:74:93:cd:0a:8b:69:41:1e:5c:42:1a:42:55:47:8b:d6:
36:7d:6e:ae:b4:a6:84:95:a9:20:3c:27:4d:4e:3e:39:cb:72:
fd:5d:c7:04:d5:8f:cd:52:0f:13:3d:af:13:02:69:1a:cf:3c:
18:08:d5:d8:eb:42:a0:b1:b2:d3:79:30:a4:5d:ac:81:90:56:
f4:5c:19:02:6c:be:0f:23:fa:85:63:e4:b4:24:be:e3:33:41:
65:77:4d:81:c7:63:8f:f6:45:4a:1f:2c:11:f4:41:2a:f0:2b:
9d:29:b5:c8:00:6b:ee:79:cd:80:29:19:63:06:58:7d:a7:d1:
95:94:0e:b4:47:90:36:29:bb:03:cd:6c:e6:ce:f0:05:42:5c:
34:3a:0e:0d:e8:fb:4a:58:61:32:6f:d2:98:46:a0:9c:ad:4a:
05:a1:bc:fc:97:82:5d:a3:8a:e8:0e:c9:28:df:7c:9e:8d:c5:
90:99:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:00 2026 by rpki-client