Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: fu1LRtkCuIJ5GcFXGCGwyd0lF6QgMvJ0Lz5qT5s8B8Y=
Subject key identifier: 11:AE:A4:33:72:AA:B2:47:4F:D8:FF:21:51:CF:B7:29:49:2E:4D:86
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019D98188883B1595E7DDAC3A933154D4487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 082F
Signing time: Thu 16 Apr 2026 21:00:37 +0000
Manifest this update: Thu 16 Apr 2026 21:00:37 +0000
Manifest next update: Fri 17 Apr 2026 21:00:37 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: ISbA6pbRGIfXcr+IQ7tihP4rxtJAeenPdcleMJeTbzs=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:88:83:b1:59:5e:7d:da:c3:a9:33:15:4d:44:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Apr 16 21:00:37 2026 GMT
Not After : Apr 17 21:00:37 2026 GMT
Subject: CN=11aea43372aab2474fd8ff2151cfb729492e4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:4e:2d:80:68:0d:aa:83:9b:43:22:76:c2:
78:36:d2:f7:64:b1:5a:1a:a9:79:77:30:30:94:c4:
0c:ab:94:11:b0:a6:b1:34:79:37:61:61:81:e8:53:
f0:1f:1f:8c:86:ba:c4:c9:78:4d:04:1c:21:fd:61:
61:d8:54:e5:4d:69:af:8b:2c:67:9a:7b:06:0e:64:
b4:ae:aa:5c:92:82:38:22:d7:c1:12:81:1a:19:df:
83:12:d1:4b:f4:60:8e:a5:be:af:22:3a:7f:9a:7e:
cf:a2:d0:98:5e:54:71:ca:94:1c:a3:1e:a1:c8:32:
ce:3f:89:5e:6f:50:8e:70:72:bc:d2:cd:87:30:54:
da:1e:eb:9d:d6:68:06:bc:e5:de:4d:d7:cb:79:4f:
16:46:ef:fd:75:26:f8:a7:60:1c:98:a0:5a:da:f2:
3d:c7:0a:ac:bd:8f:8a:62:c3:91:0d:ce:1a:dc:b4:
73:36:5a:50:8f:8b:c4:31:a5:c1:7b:2e:7f:62:c8:
4e:6f:c1:92:57:fb:5a:51:f0:3e:47:be:07:1c:25:
5c:99:14:58:7a:5c:3b:55:e3:38:80:93:b2:56:13:
a8:b3:0b:db:4a:b9:f7:ad:75:03:5b:a1:54:a0:33:
34:bf:b9:49:5a:17:ba:27:b0:f0:7b:8e:eb:ff:75:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AE:A4:33:72:AA:B2:47:4F:D8:FF:21:51:CF:B7:29:49:2E:4D:86
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:68:78:b5:0b:eb:53:fa:03:da:80:35:92:4e:6f:a9:ca:f0:
98:08:26:9b:87:a9:2c:e5:67:90:16:82:67:73:42:2a:cd:51:
d7:20:c2:ce:ac:97:32:4f:88:d2:f8:92:87:a7:31:d8:c4:a5:
d8:4e:f4:70:2c:f5:e0:09:0d:5e:18:53:3c:d2:6f:9c:52:71:
d8:ad:09:22:b6:68:cb:d1:7d:03:02:39:0d:0b:b7:3c:b7:92:
b9:da:fe:47:1e:be:d0:96:b0:cc:bf:ce:47:6c:89:77:4a:bc:
49:70:49:64:79:1e:31:7f:f8:69:6f:b6:cf:90:8b:b2:99:b7:
c3:66:88:65:d9:4e:43:e7:3a:23:1c:fb:ed:4e:dd:34:4f:ac:
ce:27:46:f8:be:08:e9:2e:77:56:fa:15:f5:15:be:3f:17:98:
b3:2e:48:80:2e:50:e3:e2:5f:12:e5:e9:96:08:83:e3:35:c9:
95:c3:79:f8:80:d4:d2:2e:7a:23:ad:ed:7c:31:bb:7f:3f:b7:
8d:35:c1:6d:54:41:8e:29:59:c7:99:12:ee:7d:d2:f1:6b:95:
1d:f4:2f:70:0e:d3:55:2c:5b:96:50:3b:a2:0b:fb:cd:af:7d:
6f:c9:84:7b:10:3a:c1:3c:6b:09:b7:92:48:fb:b7:9a:af:27:
81:40:a4:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGIiDsVlefdrDqTMVTUSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh
MWRmNzIwHhcNMjYwNDE2MjEwMDM3WhcNMjYwNDE3MjEwMDM3WjAzMTEwLwYDVQQD
EygxMWFlYTQzMzcyYWFiMjQ3NGZkOGZmMjE1MWNmYjcyOTQ5MmU0ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/xOLYBoDaqDm0MidsJ4NtL3ZLFa
Gql5dzAwlMQMq5QRsKaxNHk3YWGB6FPwHx+MhrrEyXhNBBwh/WFh2FTlTWmviyxn
mnsGDmS0rqpckoI4ItfBEoEaGd+DEtFL9GCOpb6vIjp/mn7PotCYXlRxypQcox6h
yDLOP4leb1COcHK80s2HMFTaHuud1mgGvOXeTdfLeU8WRu/9dSb4p2AcmKBa2vI9
xwqsvY+KYsORDc4a3LRzNlpQj4vEMaXBey5/YshOb8GSV/taUfA+R74HHCVcmRRY
elw7VeM4gJOyVhOoswvbSrn3rXUDW6FUoDM0v7lJWhe6J7Dwe47r/3UXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGupDNyqrJHT9j/IVHPtylJLk2GMB8GA1UdIwQY
MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct
OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1
LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2h4tQvr
U/oD2oA1kk5vqcrwmAgmm4epLOVnkBaCZ3NCKs1R1yDCzqyXMk+I0viSh6cx2MSl
2E70cCz14AkNXhhTPNJvnFJx2K0JIrZoy9F9AwI5DQu3PLeSudr+Rx6+0JawzL/O
R2yJd0q8SXBJZHkeMX/4aW+2z5CLspm3w2aIZdlOQ+c6Ixz77U7dNE+szidG+L4I
6S53VvoV9RW+PxeYsy5IgC5Q4+JfEuXplgiD4zXJlcN5+IDU0i56I63tfDG7fz+3
jTXBbVRBjilZx5kS7n3S8WuVHfQvcA7TVSxbllA7ogv7za99b8mEexA6wTxrCbeS
SPu3mq8ngUCk0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:50 2026 by rpki-client