Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: IbyXFE1Azb39jOoeNEyEW8+TxlUQ3Ab3q8swyrR4rlo=
Subject key identifier: B9:7F:B1:42:53:B9:DC:4E:C9:B6:55:08:8E:64:DB:80:B8:23:C8:37
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 019CE55AE0290F06DD5E25C2BFCD6C34BB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 1091
Signing time: Fri 13 Mar 2026 04:01:03 +0000
Manifest this update: Fri 13 Mar 2026 04:01:03 +0000
Manifest next update: Sat 14 Mar 2026 04:01:03 +0000
Files and hashes: 1: GJZ08awpOoNB6clybSFIlWAEf8Q.roa (hash: bct/tJ8QJyODSADTgG0qWd7+sICPVXpB5wcV0ma6y2E=)
2: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: F0/K0yBfX9zIMKwWnq1x3dr8H3iHvSd4xY/7vTynBpM=)
3: d3JMHGp5wYoDs9KnGiISKqGz_Xw.roa (hash: L2bYkRPxIfdroO/ek/GYaqfRDly3hzf3FYx29kpKNk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:e0:29:0f:06:dd:5e:25:c2:bf:cd:6c:34:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Mar 13 04:01:03 2026 GMT
Not After : Mar 14 04:01:03 2026 GMT
Subject: CN=b97fb14253b9dc4ec9b655088e64db80b823c837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:fd:45:0a:79:34:e8:65:f7:f6:61:d7:21:
bf:4c:6d:27:84:7d:af:01:e7:e7:fb:77:92:dd:54:
78:f8:3a:b3:e2:1d:62:c6:83:39:f9:7b:1d:76:57:
c3:2e:b2:f6:ce:03:f9:c9:8a:15:8c:3b:c7:19:8a:
48:91:77:ac:7f:91:0c:79:c7:9a:39:3b:6c:71:f1:
c8:94:d4:de:d0:6f:1f:e4:fc:02:84:ab:28:82:5f:
e7:1d:0e:f3:a9:8d:67:c6:29:e0:58:60:9c:59:59:
6b:eb:47:96:25:f6:16:f7:79:b2:0c:c1:9c:52:6f:
ba:d5:8a:c7:d5:df:e8:14:a9:9f:59:a2:7a:03:93:
62:dd:6a:05:99:1a:73:13:97:2f:e1:98:7c:1e:b6:
ce:c7:50:98:ab:21:7f:f4:90:9b:39:a0:7b:ca:65:
64:5e:0b:57:e1:21:d8:4c:42:59:6f:87:5b:de:2a:
60:53:78:e6:d1:38:92:25:ee:8b:34:e7:8e:0d:ea:
4f:ca:d5:9a:b5:bc:82:c9:7e:ee:cb:2f:0c:34:c7:
ce:c3:7f:41:45:e0:be:08:36:8a:b8:63:87:33:cf:
71:dd:ce:d2:d9:ed:19:85:4f:ff:a1:56:49:b6:cb:
3b:9c:d6:6e:53:c8:36:99:54:20:f1:4d:58:c1:dd:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7F:B1:42:53:B9:DC:4E:C9:B6:55:08:8E:64:DB:80:B8:23:C8:37
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:48:91:9d:ae:45:7f:b5:9d:6c:5d:ef:9d:54:63:9d:d4:ed:
bf:e4:76:c7:d7:36:f1:d4:b5:6b:54:25:40:3a:a4:26:0b:f4:
cf:b0:18:79:ae:83:89:d0:7c:2c:ba:15:4e:c8:46:9b:6b:37:
e0:69:50:83:5f:d3:fd:1e:2e:95:17:d2:4e:8e:fd:5e:b7:b3:
9a:d8:a9:d8:74:ba:12:1a:c9:8e:30:f3:dd:ff:36:33:42:ed:
46:ba:ba:a4:92:e6:62:94:b3:23:d3:ad:8f:1e:d2:9a:c8:68:
5d:c7:b1:36:51:93:6c:bd:06:c0:73:64:c9:d5:05:58:3d:99:
9c:f2:a8:ab:6e:6d:62:5b:e4:6a:ba:91:52:1c:9b:f5:21:2b:
c7:ff:98:42:f4:67:a7:a2:f4:4c:20:f7:30:4f:03:ee:a1:e4:
24:ef:8e:34:c2:00:24:f8:79:ac:f7:14:63:f8:c0:e7:0a:67:
a0:b7:88:70:75:a3:9a:07:e5:51:17:4d:6d:c4:20:d7:20:cd:
68:73:bc:6e:34:52:a6:8c:5a:e6:4a:0e:cc:92:f1:2a:4b:b8:
15:e4:a1:78:23:75:8a:04:09:81:46:80:80:58:5d:3c:f1:2d:
a2:40:94:d3:c6:cb:a9:9a:2e:67:16:1a:86:4d:0b:75:fd:24:
c1:8d:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:33 2026 by rpki-client