Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: 1dYsqBy2jcOT9MPMbNY2ILuUNJGl3e3d2Ot7DoVw+j8=
Subject key identifier: CB:2A:CB:51:0F:E1:A4:B6:FB:6A:D0:32:57:12:9D:86:44:63:62:C2
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 01A129FACC9060B6AC37453A8A9A0998193F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 12BA
Signing time: Sun 11 Oct 2026 08:01:04 +0000
Manifest this update: Sun 11 Oct 2026 08:01:04 +0000
Manifest next update: Mon 12 Oct 2026 08:01:04 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: wLV2ng0rvcd6K+nXosTLgam/4dZq5D+HGCB356VwgEQ=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:cc:90:60:b6:ac:37:45:3a:8a:9a:09:98:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Oct 11 08:01:04 2026 GMT
Not After : Oct 12 08:01:04 2026 GMT
Subject: CN=cb2acb510fe1a4b6fb6ad03257129d86446362c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:b4:c6:80:bd:bb:33:f6:33:9e:4c:6a:96:
4e:41:a8:7d:54:a4:cf:8e:e3:c2:03:00:e6:ce:c4:
21:f4:e6:90:69:44:eb:29:d6:18:be:c9:6d:cf:e0:
2e:7d:92:0c:a8:70:4c:ea:25:9c:75:6d:4b:ea:fc:
aa:10:1c:f1:64:95:db:4a:82:b3:80:74:54:e4:81:
14:55:7e:0b:8e:2d:ba:ce:55:f7:37:d7:3a:e2:4d:
f3:93:de:c4:29:14:20:0d:8a:bd:77:a2:3a:fe:a9:
3a:78:bc:f0:1c:55:c1:da:4f:71:71:20:69:62:7a:
d9:5b:21:a1:23:2b:47:74:d3:4d:44:61:98:6a:5e:
47:db:2c:5a:da:7b:a6:83:a0:f4:f9:5a:58:10:2e:
23:64:19:ab:84:32:1c:46:c6:1a:19:72:1a:52:06:
33:6c:4f:df:5a:86:86:70:53:82:f5:f7:90:6c:22:
25:6a:d2:57:98:f8:23:80:ac:55:54:e5:fb:00:87:
b9:d1:81:50:db:e0:58:b1:2d:89:29:36:f2:ec:ca:
cb:9a:d8:9c:e1:b3:4d:d8:24:63:68:8b:30:d0:3e:
83:8e:12:e3:99:19:ef:c3:ff:f4:2a:51:1a:b8:36:
48:63:79:ce:8c:26:7e:0a:64:13:9e:c0:92:6d:07:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:CB:51:0F:E1:A4:B6:FB:6A:D0:32:57:12:9D:86:44:63:62:C2
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:c2:88:f3:63:64:e8:e5:00:ed:56:d3:c6:c4:ba:ae:bd:
1a:09:92:86:4a:d0:90:8b:7f:cd:ca:a3:b1:70:c2:de:4f:92:
c9:6a:68:7d:34:c7:7f:eb:2d:e8:0d:56:7b:c6:95:dd:b1:bd:
bd:a3:7f:45:ea:30:03:5a:ce:9a:e0:a7:2f:84:fa:7a:47:94:
d6:3d:94:35:d8:ea:d3:ab:71:0b:e2:08:be:14:44:d4:30:52:
a5:5b:6e:f4:ac:a8:ad:b3:93:af:64:f0:e8:da:c8:f0:6a:7e:
11:7a:37:67:15:62:1f:a8:7f:cd:61:bf:78:a6:63:f3:7e:4a:
2f:3d:bc:fa:c8:9a:fb:66:5a:a4:3a:19:f4:0d:a1:1f:f2:29:
26:56:56:9d:60:d3:49:2b:40:bd:92:a4:f9:b8:cd:d1:86:ab:
e3:26:bd:c9:21:92:d0:63:0a:f1:69:60:c3:40:51:02:21:ec:
90:f8:4a:be:3a:33:e3:a5:53:fd:b4:bb:9f:d2:6e:c4:c7:6b:
9f:4b:82:9c:2f:3f:66:4e:24:c8:c5:73:e2:2d:27:a2:f3:8e:
66:4e:32:9f:8b:7e:ea:e4:a2:51:e6:69:0d:81:38:17:7f:dc:
9a:23:96:4b:2f:08:fd:8c:5c:ae:c8:00:21:51:c9:ad:34:a1:
36:87:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:30:11 2026 by rpki-client