Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: SScVTIpyMmyy0bP3bABuJ1F8dlTNSmy+/vgyEoRlxuY=
Subject key identifier: B2:3B:A0:FC:B2:53:19:9F:1D:26:7A:24:FB:E2:3D:56:D7:90:2F:1C
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 019CE5C9729543EF47F6B3CBD67AA7012D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 01DA
Signing time: Fri 13 Mar 2026 06:01:50 +0000
Manifest this update: Fri 13 Mar 2026 06:01:50 +0000
Manifest next update: Sat 14 Mar 2026 06:01:50 +0000
Files and hashes: 1: LB897dXLBM36a7U6SkP9ZIBRp0U.roa (hash: syt+8t+IbVJ3QRitmZH6LwQ2EF86AutEdjHbzKfuLYY=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: 6O2ipGAnSuV3lB+7iRdR33hvB+HcrqplE5qrH4WvEJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:72:95:43:ef:47:f6:b3:cb:d6:7a:a7:01:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: Mar 13 06:01:50 2026 GMT
Not After : Mar 14 06:01:50 2026 GMT
Subject: CN=b23ba0fcb253199f1d267a24fbe23d56d7902f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:f5:12:bf:1d:59:9b:e4:f9:e6:05:b0:4c:
77:3e:8a:7b:e9:14:a6:5f:10:b5:ab:23:da:11:03:
42:82:d1:e6:cc:39:f8:08:7f:c4:70:41:8f:f3:1f:
27:94:50:0a:bc:3a:a5:79:9b:e8:de:b2:7d:11:6f:
a3:64:91:0a:58:02:f6:5d:33:62:90:7c:11:b1:6f:
dc:78:95:b2:5b:b9:14:24:8e:06:e5:a0:c3:5a:9f:
76:a5:b3:c4:ad:50:99:2c:71:3e:74:33:7e:02:3c:
52:cb:4c:b7:75:c8:bc:60:b2:e3:f3:80:f3:bc:95:
1d:9c:88:8e:26:2a:66:2b:44:11:f9:51:ea:da:6e:
e9:52:e3:ab:7d:6a:d6:d8:1f:5b:b3:ef:e8:1a:18:
d2:5e:13:7f:a1:1b:9d:3f:34:74:02:dc:f5:d7:46:
0f:26:f8:91:b6:ed:c2:c9:f1:46:ed:a8:66:6d:c8:
0c:81:59:a3:8c:65:82:c9:47:f6:f7:ea:ce:8e:c0:
71:2c:96:49:ec:d6:9d:7f:8a:3e:ef:b7:4b:ef:8f:
a6:17:a9:a0:be:b8:84:22:a1:89:a3:5d:a3:2d:4a:
11:da:35:2e:05:38:47:1e:fe:45:bf:e2:c2:67:9a:
b6:c8:d8:2e:7a:1a:30:5f:48:b3:18:d2:0c:42:f4:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3B:A0:FC:B2:53:19:9F:1D:26:7A:24:FB:E2:3D:56:D7:90:2F:1C
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:58:82:eb:3a:26:2b:dc:57:bd:80:7f:db:8b:48:cd:ed:
b5:30:af:ed:c9:44:d0:4c:86:32:a3:70:84:b7:ba:18:c6:f5:
26:3a:5a:40:e5:02:c7:80:02:7b:e5:cc:d9:7c:7b:26:c5:6e:
b6:59:50:1c:7a:0e:27:73:c1:bf:43:1d:5d:cf:a2:4d:69:8b:
9f:c1:a8:71:01:75:dd:b8:7c:48:f6:8d:2c:d2:40:37:25:d2:
69:b5:1a:5f:a1:8e:cb:ab:b9:ab:79:ca:06:ef:3a:3c:da:a2:
15:3f:06:0c:43:ef:b6:5e:b6:4f:f0:3a:97:3d:4b:d9:76:0a:
ad:e1:7f:8c:26:dc:5a:1e:bf:a9:7f:4d:40:3d:5a:8e:52:a8:
36:60:f1:91:02:0c:94:c8:df:b1:86:c6:5b:11:25:5a:4f:89:
bb:74:89:65:77:cb:c2:32:dd:8d:22:29:e1:5c:74:5d:fa:d5:
ea:8a:f9:6b:e8:e1:e2:1f:1e:da:d6:ce:18:be:cb:5a:8c:b2:
ab:df:22:3e:9e:9c:17:29:16:1f:8b:b3:fa:68:74:78:be:d3:
4d:0d:d4:4d:0b:c3:97:dc:4d:aa:08:c3:4c:a6:de:95:1c:58:
c3:21:57:3c:31:75:d3:87:d4:c4:4f:3c:cd:f4:ef:5b:43:8e:
55:43:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:03 2026 by rpki-client