Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: dmRYojFpfvuZVZW2ZUqFtwQ///fMrmsgqlZbqxuKkTU=
Subject key identifier: 4D:3A:EC:49:A3:0E:87:8C:41:60:2B:14:A4:CB:05:35:91:D5:58:F6
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 019D39AEEAE5C718915AF5A1FB2F95ED506B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 1578
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: HfzJOTS0GwhSSQk9nxJl+1flc1i7kQeWpL7GGKyccnc=)
2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ea:e5:c7:18:91:5a:f5:a1:fb:2f:95:ed:50:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=4d3aec49a30e878c41602b14a4cb053591d558f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:b4:7c:0a:18:39:ba:84:25:46:e0:c1:0f:
16:33:58:b9:80:7c:ff:a8:0b:11:a6:73:74:5d:bf:
52:3a:f5:e7:e6:15:52:88:99:3e:83:54:53:03:36:
b9:be:72:59:11:55:5c:55:8f:45:2a:5b:0e:32:bd:
bb:4e:8c:e8:1f:c3:9f:6a:14:0b:a0:ea:0d:10:ad:
ff:04:f5:c2:e8:4a:ab:e9:d9:09:27:d0:f0:6d:8a:
75:21:84:5f:97:6d:8f:7d:44:32:4a:f7:c7:74:8e:
c0:7e:bd:b0:4a:fc:85:83:8d:8e:56:0b:f8:c9:c5:
d1:e2:b2:36:d0:7d:86:56:08:f8:6f:49:ac:91:86:
0e:e8:68:57:8c:fc:d9:77:73:9f:e1:9b:68:f3:ec:
7d:5e:54:46:cd:5d:4a:a3:cd:0e:fe:c2:64:90:07:
65:9b:e1:43:88:b3:43:1d:6f:64:ff:87:aa:c6:b9:
91:b5:a4:7b:fb:d2:6a:7e:6e:9c:5b:71:08:6a:f3:
b5:d2:00:a8:60:60:81:5b:b9:79:cc:f7:d8:44:c5:
3c:69:92:04:78:25:c6:0c:cd:55:80:a1:4f:b8:2a:
b6:50:91:64:89:04:e0:a6:72:b0:10:8d:82:d5:20:
86:f4:4b:f9:88:14:34:98:51:0a:80:2e:c3:d7:d6:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:EC:49:A3:0E:87:8C:41:60:2B:14:A4:CB:05:35:91:D5:58:F6
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b6:8f:d2:56:1e:b7:0f:ff:89:81:e2:04:ec:fa:47:0e:fe:
7f:1b:9b:66:12:91:83:f5:28:e0:c6:10:89:a6:0f:d6:ed:a2:
a0:3f:5e:21:20:59:3e:33:14:43:73:7f:6c:60:8d:64:e3:d3:
39:bc:37:b6:49:49:ea:9d:88:5a:a3:41:88:cb:b5:83:e8:b8:
20:22:25:81:c8:67:73:ae:13:79:a0:ea:0e:fc:4c:9c:27:8f:
b9:59:5c:d8:df:8b:4d:69:19:57:45:6f:0e:d2:8d:fc:0d:64:
a9:b8:44:3c:0a:de:ac:fb:3f:bc:4f:36:20:60:d3:bc:54:ef:
9b:86:e3:c2:78:71:97:2b:f8:97:32:35:47:ab:c6:83:6a:ad:
d7:bb:64:cf:68:a0:40:ae:af:10:f9:27:10:8e:f4:3a:37:79:
70:ac:ad:2e:60:e6:86:66:37:98:15:1f:26:0e:13:9d:64:c6:
fe:9c:27:7c:0b:8a:ed:41:34:43:ef:de:82:dd:5f:71:4a:fd:
cb:0c:b6:b6:36:55:c2:4a:82:62:0d:7c:fd:12:07:4e:23:05:
fe:0b:46:5f:62:fb:da:54:33:af:db:6d:58:4f:5e:0c:f6:46:
90:be:90:b2:ac:71:26:29:76:e3:f6:71:c7:8c:f8:4e:63:1d:
e5:77:b1:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rurlxxiRWvWh+y+V7VBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYWEwMmY0NWI5NzkzMGM3YTQ2ZDBlZjE4YTkxYzBhYWY4
OTkyZjIwHhcNMjYwMzI5MTMwMDU3WhcNMjYwMzMwMTMwMDU3WjAzMTEwLwYDVQQD
Eyg0ZDNhZWM0OWEzMGU4NzhjNDE2MDJiMTRhNGNiMDUzNTkxZDU1OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lq0fAoYObqEJUbgwQ8WM1i5gHz/
qAsRpnN0Xb9SOvXn5hVSiJk+g1RTAza5vnJZEVVcVY9FKlsOMr27TozoH8OfahQL
oOoNEK3/BPXC6Eqr6dkJJ9DwbYp1IYRfl22PfUQySvfHdI7Afr2wSvyFg42OVgv4
ycXR4rI20H2GVgj4b0mskYYO6GhXjPzZd3Of4Zto8+x9XlRGzV1Ko80O/sJkkAdl
m+FDiLNDHW9k/4eqxrmRtaR7+9Jqfm6cW3EIavO10gCoYGCBW7l5zPfYRMU8aZIE
eCXGDM1VgKFPuCq2UJFkiQTgpnKwEI2C1SCG9Ev5iBQ0mFEKgC7D19ZumwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE067EmjDoeMQWArFKTLBTWR1Vj2MB8GA1UdIwQY
MBaAFHKqAvRbl5MMekbQ7xipHAqviZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjct
ZDc5YjBlYzc4ZTk3LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjctZDc5YjBlYzc4ZTk3
LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbaP0lYe
tw//iYHiBOz6Rw7+fxubZhKRg/Uo4MYQiaYP1u2ioD9eISBZPjMUQ3N/bGCNZOPT
Obw3tklJ6p2IWqNBiMu1g+i4ICIlgchnc64TeaDqDvxMnCePuVlc2N+LTWkZV0Vv
DtKN/A1kqbhEPArerPs/vE82IGDTvFTvm4bjwnhxlyv4lzI1R6vGg2qt17tkz2ig
QK6vEPknEI70Ojd5cKytLmDmhmY3mBUfJg4TnWTG/pwnfAuK7UE0Q+/egt1fcUr9
ywy2tjZVwkqCYg18/RIHTiMF/gtGX2L72lQzr9ttWE9eDPZGkL6QsqxxJil24/Zx
x4z4TmMd5XexWA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:00 2026 by rpki-client