Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: dZAa2dsIkvkF4K9Eyz1jMwcNck1TbN8KBZi9B7JYUF0=
Subject key identifier: 06:89:21:2F:FC:CF:A9:FA:8F:88:A7:F6:F1:4B:05:02:38:99:FF:70
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 019DCF0804C61A67D6E884D23C0C8E761021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 110A
Signing time: Mon 27 Apr 2026 13:01:42 +0000
Manifest this update: Mon 27 Apr 2026 13:01:42 +0000
Manifest next update: Tue 28 Apr 2026 13:01:42 +0000
Files and hashes: 1: GJZ08awpOoNB6clybSFIlWAEf8Q.roa (hash: bct/tJ8QJyODSADTgG0qWd7+sICPVXpB5wcV0ma6y2E=)
2: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: LYKfDr3aR7K6joGtkHitbilop5tdRGvPWnxOjYSY78w=)
3: d3JMHGp5wYoDs9KnGiISKqGz_Xw.roa (hash: L2bYkRPxIfdroO/ek/GYaqfRDly3hzf3FYx29kpKNk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:08:04:c6:1a:67:d6:e8:84:d2:3c:0c:8e:76:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Apr 27 13:01:42 2026 GMT
Not After : Apr 28 13:01:42 2026 GMT
Subject: CN=0689212ffccfa9fa8f88a7f6f14b05023899ff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:fb:c7:a8:a6:e0:0c:72:8b:b2:c1:93:0f:
16:76:69:5e:cd:14:5d:45:34:65:83:86:8e:ad:2a:
fe:b8:75:d1:bc:47:89:b5:35:15:20:9b:6e:08:a0:
ea:dc:a1:ba:d2:4c:63:f5:bf:dc:18:48:00:7a:01:
38:ef:ae:40:da:6d:d8:ef:3b:49:51:a6:97:b2:43:
93:a5:b6:11:57:9c:03:7c:61:6b:a0:c5:f4:75:8f:
da:77:d8:ff:d3:70:77:c0:89:4b:8b:51:4f:7e:1a:
88:2b:70:f5:d0:37:da:46:53:e3:c8:26:6d:a8:bc:
38:2d:9f:c4:17:85:fd:ea:c5:4b:e3:8d:68:fc:a4:
63:b3:bf:c2:1a:73:5a:be:58:b7:de:47:89:da:bb:
62:a3:46:fb:d6:f1:dd:fb:8c:6f:c7:1e:a2:4c:77:
d9:13:ec:0b:8d:0e:e0:1a:06:39:d3:7f:40:c0:3c:
e8:a0:a0:a4:03:48:1e:08:7f:97:d9:ba:07:c5:b1:
60:84:67:67:4a:60:33:86:0f:0f:e4:9e:d7:c3:6a:
0f:5f:d8:bb:c1:83:ad:9a:8b:ca:23:ff:b0:31:f3:
8b:b0:f9:57:9d:53:5e:21:a4:c7:c5:3b:23:5f:80:
6e:96:d1:e6:3f:93:d9:6f:cc:fe:3e:df:77:58:fa:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:21:2F:FC:CF:A9:FA:8F:88:A7:F6:F1:4B:05:02:38:99:FF:70
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c9:90:31:48:56:95:1f:93:20:b4:f5:94:96:c3:07:f7:79:
22:27:44:e7:d0:d8:ff:13:07:8e:ea:ba:b2:39:51:3c:cb:f8:
c9:7b:29:c7:fe:f1:9d:39:6a:b8:d3:a2:ed:d8:20:cf:74:ab:
42:a0:c8:b3:46:65:00:1b:c7:56:b5:a9:e3:26:bf:30:b3:17:
8e:ce:6c:79:cf:c9:51:a1:5d:9d:9a:bf:87:b1:37:d0:1a:9e:
ea:d2:ea:68:82:c9:8d:71:e2:42:57:4d:dc:dc:d8:91:42:29:
0b:f9:4a:09:6a:7d:22:f6:fb:67:51:c7:81:c7:45:c4:aa:1a:
2b:88:57:50:be:62:b3:1a:d5:8a:9e:f0:f6:8d:44:a5:f7:41:
64:b4:72:af:65:70:6e:89:49:bb:46:de:98:05:86:2c:b0:3d:
b7:d0:9b:a7:39:b6:52:67:8a:8f:99:13:d2:c0:da:89:72:72:
e8:3f:6f:25:ca:46:e0:b1:e8:ac:b0:12:3d:96:1f:bb:ab:8a:
08:2c:a9:05:1e:6c:93:44:b5:1e:15:99:aa:5d:0a:60:ef:e9:
13:34:b0:70:f2:66:06:93:1d:68:7a:6b:d9:8c:46:98:93:eb:
0c:5d:38:b1:98:5e:6d:7c:f5:41:fb:ea:b0:ff:34:ba:f2:8a:
0b:ce:13:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PCATGGmfW6ITSPAyOdhAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDA2OGQ1YmYxYmZmZDc5MTc0ZTM3NTAxYmZhMTdmOTE3
YjMxM2QwHhcNMjYwNDI3MTMwMTQyWhcNMjYwNDI4MTMwMTQyWjAzMTEwLwYDVQQD
EygwNjg5MjEyZmZjY2ZhOWZhOGY4OGE3ZjZmMTRiMDUwMjM4OTlmZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFD7x6im4Axyi7LBkw8WdmlezRRd
RTRlg4aOrSr+uHXRvEeJtTUVIJtuCKDq3KG60kxj9b/cGEgAegE4765A2m3Y7ztJ
UaaXskOTpbYRV5wDfGFroMX0dY/ad9j/03B3wIlLi1FPfhqIK3D10DfaRlPjyCZt
qLw4LZ/EF4X96sVL441o/KRjs7/CGnNavli33keJ2rtio0b71vHd+4xvxx6iTHfZ
E+wLjQ7gGgY5039AwDzooKCkA0geCH+X2boHxbFghGdnSmAzhg8P5J7Xw2oPX9i7
wYOtmovKI/+wMfOLsPlXnVNeIaTHxTsjX4BultHmP5PZb8z+Pt93WPr84QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaJIS/8z6n6j4in9vFLBQI4mf9wMB8GA1UdIwQY
MBaAFHEAaNW/G//XkXTjdQG/oX+RezE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDkt
ODIwNDNiOWU0ZjcxLzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDktODIwNDNiOWU0Zjcx
LzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8mQMUhW
lR+TILT1lJbDB/d5IidE59DY/xMHjuq6sjlRPMv4yXspx/7xnTlquNOi7dggz3Sr
QqDIs0ZlABvHVrWp4ya/MLMXjs5sec/JUaFdnZq/h7E30Bqe6tLqaILJjXHiQldN
3NzYkUIpC/lKCWp9Ivb7Z1HHgcdFxKoaK4hXUL5isxrVip7w9o1EpfdBZLRyr2Vw
bolJu0bemAWGLLA9t9Cbpzm2UmeKj5kT0sDaiXJy6D9vJcpG4LHorLASPZYfu6uK
CCypBR5sk0S1HhWZql0KYO/pEzSwcPJmBpMdaHpr2YxGmJPrDF04sZhebXz1Qfvq
sP80uvKKC84TeA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:25 2026 by rpki-client