Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: PW7qyidaqAQehIAbsCyNqwfoSWzV/DT0aNkdIYXQipk=
Subject key identifier: C9:07:6D:26:86:1D:9B:E1:0C:2D:34:F5:F1:7C:07:39:6D:86:8F:DB
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019D3A1CDBDE902B6E071045B894FE0B1647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 1226
Signing time: Sun 29 Mar 2026 15:01:02 +0000
Manifest this update: Sun 29 Mar 2026 15:01:02 +0000
Manifest next update: Mon 30 Mar 2026 15:01:02 +0000
Files and hashes: 1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: 8ZenYLiMY9c558Epa268cKhOTMhZScHeoNfQ1T9JmLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:db:de:90:2b:6e:07:10:45:b8:94:fe:0b:16:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Mar 29 15:01:02 2026 GMT
Not After : Mar 30 15:01:02 2026 GMT
Subject: CN=c9076d26861d9be10c2d34f5f17c07396d868fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:00:32:33:13:de:3c:bc:8f:d5:d1:dc:e1:
12:3b:80:80:41:60:69:e3:b1:c7:45:be:2b:12:76:
7a:63:db:97:9c:03:8b:55:f0:58:43:91:5e:20:2c:
5e:a1:3d:44:12:0f:0e:99:45:8c:84:9d:2b:24:01:
44:3a:3b:cb:51:04:08:bd:28:eb:e8:03:ed:ff:68:
a9:02:b8:ef:8e:fc:e5:ef:75:43:18:13:a0:be:12:
37:07:7d:a5:ea:54:11:25:42:c9:ff:a2:fb:fe:f3:
b8:b8:11:b4:01:21:43:e5:d7:fe:e9:c9:80:a9:aa:
ed:1f:e9:5d:98:50:9a:6a:ec:90:b0:ea:b4:d2:d7:
79:52:57:b4:6d:88:1a:63:ad:6e:e1:a9:00:6b:bf:
37:a1:ae:a4:2a:eb:d7:41:e0:d5:5d:8f:bb:de:1f:
c3:34:a8:65:05:9f:76:67:72:35:2d:85:dd:87:97:
a5:35:52:38:7c:26:67:5a:67:05:17:a8:a0:ec:2b:
c0:04:fc:bc:ff:1c:23:cf:70:8d:2c:bf:bc:5e:eb:
cc:e8:ca:95:c8:98:c2:6d:c9:a5:39:d7:50:5c:7d:
8f:93:a9:2f:99:19:2c:5a:2e:22:78:10:95:93:b3:
45:65:34:eb:c9:53:e9:8f:9b:c0:28:6c:03:4b:bb:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:6D:26:86:1D:9B:E1:0C:2D:34:F5:F1:7C:07:39:6D:86:8F:DB
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:94:ef:12:c0:63:ea:eb:e7:5c:8c:ec:a7:db:60:e3:17:f5:
67:79:7a:20:96:ac:d4:9b:2d:bd:92:81:96:8c:c7:08:9c:67:
d7:a6:e3:27:0e:91:8b:f5:29:ce:46:dd:e6:34:87:2b:e3:bd:
0e:5d:80:43:47:64:25:a5:a4:ad:3e:a5:f3:bd:f8:8a:cb:64:
a2:b2:8c:69:d9:98:9b:9a:88:a4:fa:7a:ca:3e:99:1a:a5:5e:
1e:7d:e1:8d:53:e2:de:55:6f:79:3f:20:31:33:f9:df:2e:50:
1f:91:75:8d:f0:0b:24:42:22:29:7d:f9:7f:78:ad:ae:9e:db:
0f:c0:76:62:e4:60:3d:f6:fb:a0:17:9a:76:a7:b6:8b:45:7e:
38:74:a1:3e:0c:42:9c:87:68:b2:ad:58:86:8b:4c:32:db:65:
4b:69:21:51:e0:ba:5c:59:60:38:1f:09:a8:65:a3:5b:d1:88:
56:e0:f1:63:30:26:19:a8:06:9c:81:42:11:2b:f4:48:f7:05:
0b:d3:cd:10:81:53:34:7c:86:95:80:ab:d0:c3:2e:3e:af:42:
e1:78:ea:76:6f:ce:b6:c7:f7:2f:59:8c:5f:7f:c8:19:b9:89:
b1:3e:ba:b4:0d:09:a8:a2:bd:7d:db:b7:0f:01:54:92:3b:20:
c1:df:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:29 2026 by rpki-client