Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: ABBt63XTnVstPmSFKeGxGMU9t3vm65uLzkuke4u9vzU=
Subject key identifier: 19:A3:81:A9:D5:F6:E0:DA:5B:AD:05:B2:1E:C5:9C:77:EB:00:27:F4
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019DCF07E3C53924E33AC0B9721D14CE3299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 0701
Signing time: Mon 27 Apr 2026 13:01:33 +0000
Manifest this update: Mon 27 Apr 2026 13:01:33 +0000
Manifest next update: Tue 28 Apr 2026 13:01:33 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: Lgc9QlJ40Q5ds1zMnC8t8PauHAwhqj97cxR8Gaxexko=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:e3:c5:39:24:e3:3a:c0:b9:72:1d:14:ce:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Apr 27 13:01:33 2026 GMT
Not After : Apr 28 13:01:33 2026 GMT
Subject: CN=19a381a9d5f6e0da5bad05b21ec59c77eb0027f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:e6:a9:9f:43:83:fd:d8:69:ae:ee:d3:c6:
6c:14:81:c2:f3:1d:4d:f8:aa:c3:88:10:65:54:6d:
0d:b7:cc:fa:02:53:40:7b:f6:64:a7:77:de:04:58:
2c:f5:71:48:15:de:75:fa:c2:3f:f7:58:af:6a:b0:
ff:b7:4c:e7:1c:c0:71:39:ea:82:c7:f0:a2:8f:51:
cb:40:2d:33:c9:15:2d:29:f8:70:f0:b9:0e:3a:cb:
22:6f:cc:32:05:df:31:0e:7d:99:96:5f:4a:79:d1:
d9:da:dd:72:9f:00:df:66:00:a2:9b:93:00:aa:d2:
53:af:ab:b7:9c:4c:ee:a1:8f:9b:a5:69:7d:84:ff:
07:ee:83:a6:d6:21:21:3b:86:03:95:db:68:95:9f:
49:02:08:d1:c2:15:3f:b7:e3:c1:53:1e:ca:83:ca:
82:1a:f1:9d:aa:fe:ab:b8:73:4f:34:ef:b6:f0:3d:
4a:45:1b:64:97:03:4d:9e:61:ea:92:5e:d3:bf:75:
b8:b0:79:17:7f:7e:87:ac:11:bb:27:f4:2e:a6:44:
6c:73:aa:c4:14:0c:da:73:15:b6:e1:00:0b:1b:41:
0c:ea:6d:25:34:bd:16:46:65:ea:6d:b6:a4:41:d7:
22:fb:05:93:11:d9:c5:a1:94:ed:d2:e1:65:85:e7:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:81:A9:D5:F6:E0:DA:5B:AD:05:B2:1E:C5:9C:77:EB:00:27:F4
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:a2:37:f3:f8:9e:30:67:05:34:24:f3:18:8a:c1:3b:67:
f6:29:93:ae:09:a9:94:c9:20:77:46:52:9e:b3:21:a8:d5:13:
c9:f4:10:1f:be:0b:38:47:18:d6:0f:8a:21:34:1e:8c:d3:32:
b5:91:c9:81:15:60:d8:29:6e:76:98:bd:e1:c2:ff:99:88:6c:
10:7c:b7:43:ae:f9:21:97:86:ba:1b:1f:50:92:e1:98:bf:2e:
6f:17:23:db:d9:77:a3:7d:03:19:16:9c:43:84:79:9c:b2:c7:
15:16:08:bb:4c:46:61:ff:c7:85:bb:3f:a4:7b:0b:6a:31:8d:
18:55:62:ab:97:02:1a:07:42:c9:96:c0:be:f1:bb:33:de:92:
c1:38:e0:42:62:0a:cd:20:0a:b1:5b:98:cd:3b:67:79:1d:2e:
a8:4e:0d:a9:1e:bc:82:45:ec:20:53:7e:c9:86:57:d5:27:b9:
17:80:01:1c:21:8f:4f:48:33:14:b6:69:eb:68:ba:87:20:fa:
9e:95:70:62:d1:5a:79:6a:5d:9f:3e:5f:e4:5d:19:30:5f:6d:
5b:0d:45:f8:d6:de:c1:76:7f:02:0e:b1:dc:77:42:fb:60:02:
03:47:7f:01:ad:51:0d:c0:f5:a7:b1:70:25:52:ea:1c:c1:83:
cc:69:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:39 2026 by rpki-client