
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: iFIOxdrheEKQptk4oov5SKPXEcfQkZ2PcUgbdEedtTs=
Subject key identifier: 79:CF:DD:5E:3F:44:F1:41:51:82:A5:00:D3:39:97:D3:EF:24:D3:94
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019EC17F676C27F29EED24A79CA5B33E81E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 08C9
Signing time: Sat 13 Jun 2026 15:00:12 +0000
Manifest this update: Sat 13 Jun 2026 15:00:12 +0000
Manifest next update: Sun 14 Jun 2026 15:00:12 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: fdJYpExwZHBp/LumpMgf6ssC19AOwwjuzldzxKqtlNc=)
2: xth3SgaYG73nXmBzt5a_zS7YmPE.roa (hash: UPhg5p0PVUeMrIrZDkSLdMR4fuwy++NIiwWlcyibl/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:67:6c:27:f2:9e:ed:24:a7:9c:a5:b3:3e:81:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Jun 13 15:00:12 2026 GMT
Not After : Jun 14 15:00:12 2026 GMT
Subject: CN=79cfdd5e3f44f1415182a500d33997d3ef24d394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:4f:e9:88:9e:7b:96:99:3b:b9:02:35:0a:
d0:4d:41:77:ee:f6:1c:f5:e3:5c:f1:10:d8:b8:87:
63:82:75:a1:23:90:56:3e:ae:52:29:7b:9e:fe:31:
01:71:00:ca:b5:a5:32:c7:be:9e:b4:35:47:33:36:
c2:59:a1:5e:54:b3:fd:93:5e:93:3e:f9:96:a4:8a:
81:40:c9:cf:08:30:ee:4f:ee:f9:e2:31:28:9d:11:
7d:0c:03:ae:6d:9b:71:0a:3b:9b:5f:b4:88:de:78:
e2:61:ab:53:66:2a:7a:d8:11:b9:74:e9:8c:0e:1c:
18:c3:3e:aa:2f:33:3c:d3:2a:79:b0:c1:30:97:a9:
19:6b:1f:98:2c:ca:2b:f2:09:41:12:aa:bd:24:b4:
db:76:14:67:f9:2f:76:d3:7b:6c:b9:25:98:8d:28:
e5:06:78:a3:77:df:d8:5e:3c:82:23:d5:61:ed:af:
f8:ac:9b:63:39:23:87:6b:d2:a6:15:6d:da:9d:51:
c3:8d:cf:1d:ff:ea:d9:00:82:09:5e:92:79:3d:eb:
86:ba:1a:6a:f9:b1:1c:a6:ae:ba:74:8d:fa:53:a7:
52:4a:60:26:fc:7a:00:cd:e5:81:dd:77:3b:50:b6:
f9:a9:38:79:c2:eb:8a:45:55:dd:aa:b4:24:fd:76:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:DD:5E:3F:44:F1:41:51:82:A5:00:D3:39:97:D3:EF:24:D3:94
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0f:7a:55:99:95:7b:8c:e9:82:53:5d:98:c1:de:15:4c:42:
72:74:2d:93:8b:e3:cb:90:89:f8:35:67:69:9a:f3:22:49:9e:
b8:bd:e0:50:04:8d:5d:0c:f5:f6:1d:84:7d:8c:9f:5d:9c:03:
d3:c5:14:5b:79:26:f2:2f:13:89:86:91:16:87:39:c0:d5:0d:
c4:29:e3:ac:a6:4d:b7:29:99:a0:e7:c1:1b:a6:34:b6:f8:53:
ed:52:2d:fd:60:04:80:c0:6e:cd:d9:ee:ff:3d:14:de:4c:11:
db:82:73:dd:16:93:44:38:a5:35:15:5b:76:e6:7d:88:1a:97:
23:98:35:75:1a:ba:d6:32:96:a5:76:80:84:d2:03:00:31:35:
da:77:4a:b9:02:36:87:8f:8a:60:15:59:a0:7a:b4:ed:dc:07:
03:d4:cc:42:94:b4:7f:38:85:26:81:c9:19:db:f2:14:d7:76:
cf:ba:54:0e:99:09:b6:7c:04:10:67:8d:49:07:87:5b:0e:5b:
f3:33:75:00:25:81:e4:6d:e3:46:ec:92:78:77:57:b4:68:48:
1c:8e:31:f5:2a:d7:9a:63:d4:32:98:d6:bb:79:87:15:33:38:
b8:c8:be:70:20:b0:71:fe:87:e7:fd:ea:8d:1f:3c:0a:78:e2:
37:c5:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:58 2026 by rpki-client