Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: LiuH9gDp3zpqE4TwtnMD4SdKPruwwBjfARx8chi//p0=
Subject key identifier: 90:98:8C:E1:32:12:2E:05:98:2C:7D:10:79:75:16:26:7F:E4:AC:16
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019FAD1A7CA0294194D2BD008DCB48D5FF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0943
Signing time: Wed 29 Jul 2026 09:00:21 +0000
Manifest this update: Wed 29 Jul 2026 09:00:21 +0000
Manifest next update: Thu 30 Jul 2026 09:00:21 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: AnHWIcmCTgGN5NwbsCY9o6ANI+wITI4L/6KzteUh+pc=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:7c:a0:29:41:94:d2:bd:00:8d:cb:48:d5:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Jul 29 09:00:21 2026 GMT
Not After : Jul 30 09:00:21 2026 GMT
Subject: CN=90988ce132122e05982c7d10797516267fe4ac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:aa:69:94:85:80:c6:a4:c4:5a:3c:22:28:
fa:f2:c9:8f:c8:f3:a7:7b:41:62:83:37:5f:2b:b7:
f1:33:f5:64:64:0a:29:8e:e3:fe:a1:60:e4:a8:18:
28:c4:f4:72:07:ec:9b:7a:d3:db:a2:e6:d9:a4:00:
1d:b2:fb:44:e8:86:39:34:54:f1:b0:f8:7c:6f:e6:
ef:7e:e9:46:32:3e:ca:1c:2a:a1:89:ad:a3:98:f9:
37:fb:93:98:d3:ca:04:c0:48:07:7e:68:33:0c:72:
76:36:58:18:95:3d:4f:b8:6d:77:3f:7b:80:9c:e8:
7b:87:da:b1:3a:7c:ab:31:ab:75:e5:3c:fb:9a:92:
88:29:ad:ea:74:bb:bb:cd:65:7f:6c:49:68:c2:f0:
22:72:c2:a3:82:ac:06:65:bb:f9:3a:cb:f6:2f:6a:
08:c9:03:8c:1a:86:fb:2c:91:7d:c9:c5:0e:aa:82:
1f:bd:fe:70:9b:80:1c:66:c4:8d:b3:9f:7c:ab:0e:
b7:4d:c2:13:0b:61:5b:89:f3:52:47:3a:ae:e6:75:
28:73:17:fe:b2:10:3d:e2:e7:b9:5d:f6:5b:31:f9:
1b:27:50:07:36:85:9b:31:1e:c8:6d:c9:3a:02:f8:
27:b3:10:b7:a8:30:3c:71:a6:83:ab:51:dc:3f:7e:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:8C:E1:32:12:2E:05:98:2C:7D:10:79:75:16:26:7F:E4:AC:16
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6e:ba:37:2f:d5:20:c1:08:48:f7:0f:98:16:cb:7b:07:3b:
8b:45:8b:20:5c:eb:b8:e3:9a:87:f5:09:a6:fc:79:d5:cf:ea:
d0:47:16:9b:17:d4:79:5c:3f:d1:1d:f6:a3:e0:3f:1c:18:45:
b3:54:91:22:70:01:62:da:ab:30:e0:66:08:fc:82:8e:28:b3:
7c:05:4e:1a:2d:9d:95:5f:3d:93:2b:3f:55:07:be:35:70:0a:
e7:1f:cf:83:6e:f4:ec:b4:06:0a:44:40:78:9e:16:ab:b9:90:
e8:50:78:5e:ed:9b:94:1c:93:50:5f:d8:3e:42:97:21:b9:6c:
43:7b:a4:7f:88:c6:72:0c:7d:b6:b2:d9:15:38:14:ba:16:6b:
f0:c3:b0:8b:06:43:86:f9:ec:fc:e5:32:ee:37:98:5c:06:2e:
31:6d:20:c9:0f:64:53:53:02:6b:31:59:13:53:db:48:76:dc:
30:60:7d:70:8a:a7:51:a5:ac:a9:3a:6a:79:df:9a:8a:49:11:
31:7e:58:f0:4b:fb:4b:11:93:d8:69:34:39:87:97:43:00:c0:
e0:00:45:ca:31:7e:7f:f4:a4:22:52:1b:25:d5:e7:03:d7:4c:
cf:bc:37:b6:f7:00:01:0b:a0:6a:49:bc:a1:d4:41:8b:b6:ed:
9d:b0:76:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGnygKUGU0r0AjctI1f8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh
MWRmNzIwHhcNMjYwNzI5MDkwMDIxWhcNMjYwNzMwMDkwMDIxWjAzMTEwLwYDVQQD
Eyg5MDk4OGNlMTMyMTIyZTA1OTgyYzdkMTA3OTc1MTYyNjdmZTRhYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOuqaZSFgMakxFo8Iij68smPyPOn
e0FigzdfK7fxM/VkZAopjuP+oWDkqBgoxPRyB+ybetPboubZpAAdsvtE6IY5NFTx
sPh8b+bvfulGMj7KHCqhia2jmPk3+5OY08oEwEgHfmgzDHJ2NlgYlT1PuG13P3uA
nOh7h9qxOnyrMat15Tz7mpKIKa3qdLu7zWV/bElowvAicsKjgqwGZbv5Osv2L2oI
yQOMGob7LJF9ycUOqoIfvf5wm4AcZsSNs598qw63TcITC2FbifNSRzqu5nUocxf+
shA94ue5XfZbMfkbJ1AHNoWbMR7Ibck6AvgnsxC3qDA8caaDq1HcP345owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCYjOEyEi4FmCx9EHl1FiZ/5KwWMB8GA1UdIwQY
MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct
OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1
LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJm66Ny/V
IMEISPcPmBbLewc7i0WLIFzruOOah/UJpvx51c/q0EcWmxfUeVw/0R32o+A/HBhF
s1SRInABYtqrMOBmCPyCjiizfAVOGi2dlV89kys/VQe+NXAK5x/Pg2707LQGCkRA
eJ4Wq7mQ6FB4Xu2blByTUF/YPkKXIblsQ3ukf4jGcgx9trLZFTgUuhZr8MOwiwZD
hvns/OUy7jeYXAYuMW0gyQ9kU1MCazFZE1PbSHbcMGB9cIqnUaWsqTpqed+aikkR
MX5Y8Ev7SxGT2Gk0OYeXQwDA4ABFyjF+f/SkIlIbJdXnA9dMz7w3tvcAAQugakm8
odRBi7btnbB2+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 17:01:50 2026 by rpki-client