Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: VCxz+ddiGJwmrgCHv6t5CfxEe2+z0Y4Fg0K7idPKvBo=
Subject key identifier: A2:04:6C:4C:08:5A:F4:71:86:D7:C6:9B:65:A3:22:91:2B:02:03:0B
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019DEF6E416F90341F08B1E20D0084DE793F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 110E
Signing time: Sun 03 May 2026 20:01:13 +0000
Manifest this update: Sun 03 May 2026 20:01:13 +0000
Manifest next update: Mon 04 May 2026 20:01:13 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: qESyHvM+wBdB2UKCygmO3vCPV5UlN/ez3P7V8fy0M7o=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ef:6e:41:6f:90:34:1f:08:b1:e2:0d:00:84:de:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: May 3 20:01:13 2026 GMT
Not After : May 4 20:01:13 2026 GMT
Subject: CN=a2046c4c085af47186d7c69b65a322912b02030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:68:fd:eb:1f:05:03:d5:33:89:f9:f2:b4:
12:49:8a:a2:d2:4b:94:81:b6:1c:b8:be:dc:67:87:
f9:29:a1:eb:91:6d:18:8c:76:e3:89:55:a8:93:dc:
e5:9a:a8:01:a4:28:fd:71:c7:f8:c1:b8:1b:e4:ac:
31:2d:81:ec:29:a4:77:c1:43:2b:20:7a:cc:63:3e:
7a:d5:0d:33:44:00:0d:06:26:60:22:f1:33:0a:bd:
ec:39:c6:e1:1e:ed:fe:99:b1:92:25:4f:3c:e8:bf:
5d:3e:eb:ec:84:82:a2:a1:16:e1:ac:87:0e:da:76:
e8:75:8c:77:ca:d4:43:a7:de:87:45:7c:6c:70:e1:
f0:c9:d7:cc:f1:04:e8:87:87:ab:37:17:cc:65:40:
15:8c:1e:d4:69:4d:20:03:dd:e5:a4:ae:7d:6b:19:
67:ef:83:4f:1d:8c:7b:83:cb:9d:70:7f:b7:46:0f:
cd:57:39:8a:17:16:0a:d6:60:91:b2:23:70:d6:6d:
23:6d:e7:42:6a:af:a0:3b:30:25:8b:f2:d1:02:ce:
f1:c4:f5:d1:85:7d:1b:64:46:1a:25:3a:ad:02:b1:
d1:d3:66:28:86:d7:5e:20:22:f0:0f:ec:b9:8b:24:
d9:d0:ca:7f:7b:0c:33:c8:86:75:0b:03:bf:87:9b:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:6C:4C:08:5A:F4:71:86:D7:C6:9B:65:A3:22:91:2B:02:03:0B
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:38:db:bb:2f:3b:b9:ec:f3:86:20:7e:68:e1:e5:15:8a:d8:
e6:24:4f:2a:7b:df:db:44:9b:b4:79:b5:18:29:e9:7d:c7:c6:
f4:f4:6b:46:e6:71:94:60:f8:33:bf:91:c6:f4:d0:31:f6:88:
e6:3b:6f:4c:e0:6a:d7:60:0e:d4:45:af:e7:83:21:3c:7d:bd:
50:88:6a:25:84:80:19:f9:28:d1:78:c5:0f:c7:ad:1b:0b:aa:
04:db:fa:8e:03:28:89:42:45:dd:a7:f1:f2:98:7a:09:fb:be:
15:c9:94:ad:08:05:d4:4e:91:cb:d4:c8:59:05:9c:0e:ee:2a:
b3:45:59:0c:31:63:fe:cc:5b:93:d6:1e:1d:b8:04:b3:ce:51:
c0:25:c3:54:a3:af:25:24:42:45:84:ff:69:7d:d4:07:e0:ed:
b6:80:a4:51:99:2f:54:66:f4:bb:2e:77:66:66:47:6c:a0:34:
39:30:d0:75:36:5a:ea:4e:25:95:3d:75:5f:06:68:42:20:9b:
a9:48:ea:a1:ce:c9:61:f5:6a:01:73:50:05:83:67:17:6c:30:
0e:d7:b2:17:b4:a8:91:f9:65:34:ba:32:b5:28:b3:5f:48:64:
e2:ef:8d:84:2f:c8:70:7f:e9:7f:55:a6:58:c9:85:c8:cc:62:
5a:34:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 00:38:17 2026 by rpki-client