Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: 2swtJod76LFS0YcQoq0+wGZHCCgg39yEV8BhWZAoiUk=
Subject key identifier: 81:FD:A3:56:3D:C0:5D:51:45:93:86:39:C3:BC:01:77:A8:F5:0E:CF
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019D37C0C6C5E453D5B96E04C0E0AC7904D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 1029
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: dSdsYus2ed7bwxChZNXYkYlV7kMvuzcoHfHSiCcsh98=)
2: YtniEFg8kjPPW1GupRixGIZcTZw.roa (hash: kE3KePA1ZXt9tPgxQYG+9riIhGGimv2LBW4VQyOyrso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c6:c5:e4:53:d5:b9:6e:04:c0:e0:ac:79:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=81fda3563dc05d5145938639c3bc0177a8f50ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:73:fb:23:cb:df:0d:ac:ba:c1:50:3a:9b:
ec:77:b6:45:a3:ff:f2:40:8b:2c:0b:14:b3:18:fa:
b0:7b:f4:f2:9d:2a:eb:5d:f5:c2:d8:18:c3:e4:72:
25:89:c2:40:9a:20:d2:09:4b:2c:a8:2a:37:00:b4:
3f:6a:e6:73:10:fb:d1:0d:3e:96:b8:50:cc:f9:0a:
a1:d2:36:c4:0a:1d:71:39:db:aa:ce:8c:b3:96:a4:
7f:9c:5c:9b:d6:13:59:90:6e:51:0f:37:a6:a7:f1:
c9:d3:66:98:02:db:e1:5e:6a:0c:b7:fd:f7:b6:6e:
75:c7:89:8c:0a:80:23:8a:46:bf:6d:79:ed:97:ce:
b0:b0:0e:12:d5:de:34:e4:4f:72:b3:f5:32:26:c0:
ef:c3:47:71:f5:02:cb:71:e9:52:c3:6a:90:a5:1b:
40:30:89:e5:d8:b4:89:91:40:05:65:d7:4a:72:ea:
7b:57:0a:29:ed:f0:a3:aa:62:0a:0b:7b:b1:ec:b6:
1e:46:75:d1:20:41:0b:fb:38:d8:95:d2:7a:1e:5f:
fc:33:cb:84:cc:b9:da:9c:54:db:1f:a9:2b:15:5e:
ef:62:0e:1e:1f:7a:d2:27:7a:31:3a:c0:26:dc:7a:
05:db:4b:4d:0e:67:b2:7f:19:6e:23:28:2f:54:a3:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:A3:56:3D:C0:5D:51:45:93:86:39:C3:BC:01:77:A8:F5:0E:CF
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:5a:4d:ef:ad:9b:b8:7a:9f:ce:cb:fa:2f:08:7e:4a:cc:
59:de:83:9d:88:0d:12:b9:d8:33:d5:ee:a7:64:0a:b3:4e:41:
85:64:c0:fe:43:37:5d:57:47:9d:68:b6:08:02:75:2b:fd:e5:
08:63:81:ad:02:2a:32:20:04:bc:f0:11:3b:db:8c:77:a3:d1:
d4:44:db:1a:8b:a3:b6:06:1d:c9:56:34:9f:3f:97:84:d1:41:
8f:05:50:4e:77:b7:c2:84:82:bd:96:36:58:0e:67:57:d4:67:
ce:a1:34:bc:55:f3:e6:d5:60:ca:3f:fd:27:50:2c:79:f6:dd:
97:02:d9:cc:49:79:b9:d1:d2:5d:13:70:ad:6c:a0:6f:b1:03:
55:6f:bf:89:d5:2c:7f:cb:5b:7f:a3:e6:94:d7:01:d8:9b:a5:
72:61:bb:e6:25:73:f8:f7:3f:77:9d:28:fc:5a:5f:23:bf:f9:
2a:ef:03:de:2a:30:75:7b:65:59:ef:f3:83:b8:ee:8a:25:b3:
aa:21:0a:fd:4d:00:0f:25:14:a2:55:58:5d:2a:63:4d:5a:07:
19:9a:76:52:5d:78:c4:5a:60:6d:fc:d9:9c:84:50:d1:bd:13:
bd:fe:4b:3b:74:7a:ec:fe:1d:71:dc:fd:1b:42:31:a2:54:2e:
73:fe:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:54 2026 by rpki-client