Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: Z5gPLLtb8NHBza2x3/ss7CCU/HYRban5lE1n7MsGwyE=
Subject key identifier: 21:36:53:CE:B8:89:1F:15:86:C4:62:92:E3:02:CA:27:C7:97:07:E2
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 01A100FEB61A7638E04DBEF89F69B07F3FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 09F3
Signing time: Sat 03 Oct 2026 09:00:55 +0000
Manifest this update: Sat 03 Oct 2026 09:00:55 +0000
Manifest next update: Sun 04 Oct 2026 09:00:55 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: empA0NjRH1kwWl+OR5Gu/aCitlbyLgEfPJG9czdwXEM=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:fe:b6:1a:76:38:e0:4d:be:f8:9f:69:b0:7f:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Oct 3 09:00:55 2026 GMT
Not After : Oct 4 09:00:55 2026 GMT
Subject: CN=213653ceb8891f1586c46292e302ca27c79707e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:e2:76:89:37:c0:f0:21:a8:8e:48:61:39:
51:b1:1d:d1:b1:1b:8e:25:1a:e4:29:fa:41:62:57:
d8:7c:f5:0b:db:f2:a9:a2:76:4c:8e:81:83:b8:b3:
81:26:65:cf:36:31:4f:fe:cf:9d:17:00:d1:14:26:
61:fd:d2:c8:17:b6:a6:3a:d6:e5:42:79:8d:6b:0b:
94:e1:ef:84:38:2b:90:4e:bd:b9:5d:95:e5:77:29:
88:c6:91:88:76:8b:91:cc:64:df:ab:33:ed:c2:e3:
03:41:06:f6:28:22:d8:2d:2b:06:36:e9:86:a7:8e:
10:a4:a1:75:fc:bf:49:8e:ad:29:79:6f:e5:31:35:
53:05:fc:2d:ed:57:9b:f1:8f:b1:7f:25:31:3d:7f:
2a:f2:a8:d3:56:ae:6d:d4:39:68:a2:76:c4:19:fa:
74:94:bf:19:94:9a:a0:42:83:42:56:f6:c5:f0:af:
92:0e:32:24:5d:74:50:a1:ba:04:2e:52:ac:17:4f:
28:b1:35:4b:b2:1f:f5:6f:32:58:69:08:31:a0:07:
76:6c:19:a3:dd:8d:ce:5b:16:85:74:e8:27:c4:7e:
fa:5b:62:0e:bf:ea:63:59:2d:65:01:12:54:c5:5a:
a8:51:98:d3:5f:f8:d4:59:46:8f:42:d0:22:72:bb:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:53:CE:B8:89:1F:15:86:C4:62:92:E3:02:CA:27:C7:97:07:E2
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:85:38:81:40:9a:1a:b9:0f:5c:12:b0:76:d4:b5:6d:b2:
6c:0e:a8:e3:cf:02:8d:1c:97:68:74:9f:d5:71:d0:4c:1c:23:
7b:72:c3:1f:71:2f:0f:5f:c5:6c:e2:42:66:a5:61:9b:bc:7a:
39:3e:1e:e4:33:54:d7:94:3f:3d:fa:f2:c4:2b:3a:1a:25:3c:
c7:f8:c5:85:84:16:da:17:72:a6:50:9c:78:a9:de:7a:a9:08:
d3:e4:00:be:a8:c6:52:c0:b4:1f:55:d3:03:56:96:ba:25:ea:
ff:c6:7b:dc:a7:10:d6:44:2b:2b:6e:bf:04:52:80:b9:cd:2e:
7f:cc:0e:26:aa:ad:61:f1:6d:37:2d:2f:53:bf:af:4e:32:8a:
e2:ba:34:dc:f5:be:ee:f1:60:0c:8f:9f:1c:ed:80:f3:94:54:
ae:87:f9:95:d3:5b:c4:c9:a2:79:6a:b6:eb:c3:88:f9:04:e9:
51:b6:9d:1d:32:1c:24:88:e6:a9:73:93:d3:36:9a:1d:a8:06:
d6:f3:f8:0c:40:24:9c:ab:4d:f9:4a:7e:ae:82:42:b1:af:a6:
ed:5f:96:13:f7:bd:9c:f4:0f:20:88:ba:05:42:15:7a:93:b5:
a7:29:85:64:f5:29:93:2f:d1:80:e5:19:67:bb:e8:89:6f:a9:
1c:58:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:45:03 2026 by rpki-client