
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: /Tti6xj9y8OjMWu4zxkr6jSabeNt8yqzM59+7ByxsiQ=
Subject key identifier: FD:A0:38:A4:57:82:6F:95:DC:0C:8E:BF:8E:89:91:63:8E:A9:CC:A4
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019F0962A221F9EF6C9FCBA068A20C0A1593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 11A0
Signing time: Sat 27 Jun 2026 14:01:26 +0000
Manifest this update: Sat 27 Jun 2026 14:01:26 +0000
Manifest next update: Sun 28 Jun 2026 14:01:26 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: ROekksXxR4uOta2vIMa/3nKvKrxOm03ULEPhRKh6m+I=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:62:a2:21:f9:ef:6c:9f:cb:a0:68:a2:0c:0a:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jun 27 14:01:26 2026 GMT
Not After : Jun 28 14:01:26 2026 GMT
Subject: CN=fda038a457826f95dc0c8ebf8e8991638ea9cca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:f6:aa:4e:4b:e9:77:7c:f1:2d:3b:71:26:
c9:3d:d6:f4:0a:f5:99:14:de:3d:99:d9:73:ae:6f:
67:ce:3e:e9:ce:41:37:58:65:8b:79:eb:6b:67:d2:
2f:2b:a4:4a:01:b1:1e:22:20:2d:93:49:5b:aa:d1:
e5:06:ec:5d:2b:f5:42:ed:d6:bf:40:de:03:08:0e:
63:91:2a:0f:5f:1b:0c:6c:b4:9a:4a:b4:65:a3:c6:
91:51:c9:33:26:03:0f:61:0f:70:da:b2:67:89:e2:
9a:4b:d2:70:5d:3e:8d:e7:82:e9:68:ec:e2:81:38:
8e:62:08:aa:70:07:23:42:d7:88:a6:93:a0:61:89:
ec:6e:d2:fb:4d:4c:8e:aa:53:2d:69:ca:49:5c:ad:
b5:c5:ad:9a:c0:0c:3f:c0:ab:8f:10:86:dc:ed:6c:
6e:45:3a:0e:6a:cc:a2:b3:38:01:91:74:09:f4:86:
2e:af:b2:1c:2a:6b:1d:61:68:d2:ce:8b:5e:0a:e3:
5e:72:f4:31:f3:ba:37:80:73:df:6b:be:1b:1d:f3:
a0:dc:c5:ce:89:ff:ef:dc:f0:d3:d3:a3:1f:d4:68:
72:b2:e6:a3:58:17:95:2f:d4:1a:b3:07:da:88:f6:
ef:60:51:d8:e5:fa:7e:86:b1:9c:61:c7:6f:aa:9a:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:38:A4:57:82:6F:95:DC:0C:8E:BF:8E:89:91:63:8E:A9:CC:A4
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:05:9a:a8:64:fc:c1:84:e1:d9:63:89:0b:5a:59:bb:b6:d0:
3b:cf:0c:19:ad:12:09:40:b7:74:92:9c:b8:dc:ea:d1:b8:6a:
28:24:17:fd:28:07:14:7d:71:2b:10:e3:04:6a:d1:f0:5a:39:
96:73:6b:88:d2:b3:8b:77:8f:ce:7d:f3:cd:82:79:13:7f:6a:
4b:52:fd:6f:a3:18:26:95:f4:b9:ba:90:a2:1b:18:26:67:a6:
3a:a1:13:b7:b8:5d:aa:88:56:77:fb:fe:b5:f1:34:6b:0a:f9:
65:f5:ba:ec:a6:3d:89:30:69:8b:81:05:62:5a:e7:4b:4c:89:
78:e6:79:8c:8b:f7:91:31:bb:da:a5:e6:ce:92:a1:d4:30:8a:
85:66:10:39:32:6e:4f:fd:de:f3:7e:e1:db:b6:0f:b4:36:28:
39:3a:78:4f:04:0a:c4:5c:f9:be:51:ce:7e:69:6c:8b:9f:16:
79:3c:bd:cd:87:ba:ec:ab:fe:f7:a5:e7:9a:d1:80:7d:a0:59:
6e:eb:07:5e:6b:f7:9e:4c:ae:ee:26:c4:1b:be:06:b2:f9:da:
7b:91:4a:8a:a4:b1:30:03:ae:f4:a3:41:66:a2:1a:95:c7:c8:
d0:ce:d0:ed:f4:ef:09:39:6f:f3:5c:8b:91:3d:75:de:9b:29:
45:7c:99:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8JYqIh+e9sn8ugaKIMChWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjYwNjI3MTQwMTI2WhcNMjYwNjI4MTQwMTI2WjAzMTEwLwYDVQQD
EyhmZGEwMzhhNDU3ODI2Zjk1ZGMwYzhlYmY4ZTg5OTE2MzhlYTljY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutr2qk5L6Xd88S07cSbJPdb0CvWZ
FN49mdlzrm9nzj7pzkE3WGWLeetrZ9IvK6RKAbEeIiAtk0lbqtHlBuxdK/VC7da/
QN4DCA5jkSoPXxsMbLSaSrRlo8aRUckzJgMPYQ9w2rJnieKaS9JwXT6N54LpaOzi
gTiOYgiqcAcjQteIppOgYYnsbtL7TUyOqlMtacpJXK21xa2awAw/wKuPEIbc7Wxu
RToOasyiszgBkXQJ9IYur7IcKmsdYWjSzoteCuNecvQx87o3gHPfa74bHfOg3MXO
if/v3PDT06Mf1GhysuajWBeVL9QaswfaiPbvYFHY5fp+hrGcYcdvqpoJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2gOKRXgm+V3AyOv46JkWOOqcykMB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQWaqGT8
wYTh2WOJC1pZu7bQO88MGa0SCUC3dJKcuNzq0bhqKCQX/SgHFH1xKxDjBGrR8Fo5
lnNriNKzi3ePzn3zzYJ5E39qS1L9b6MYJpX0ubqQohsYJmemOqETt7hdqohWd/v+
tfE0awr5ZfW67KY9iTBpi4EFYlrnS0yJeOZ5jIv3kTG72qXmzpKh1DCKhWYQOTJu
T/3e837h27YPtDYoOTp4TwQKxFz5vlHOfmlsi58WeTy9zYe67Kv+96XnmtGAfaBZ
busHXmv3nkyu7ibEG74Gsvnae5FKiqSxMAOu9KNBZqIalcfI0M7Q7fTvCTlv81yL
kT113pspRXyZow==
-----END CERTIFICATE-----
Generated at Sat Jun 27 22:48:22 2026 by rpki-client