Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: wRtrP08HA3sjkjcS5jjV4m44vS4Ut4DLrOA+oidWofU=
Subject key identifier: 51:00:D4:3C:43:B9:D2:D9:76:BF:05:6E:1F:E5:F9:65:BC:C1:5F:21
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 01A0E99C25564821A537C160C57F40574BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 1748
Signing time: Mon 28 Sep 2026 20:01:59 +0000
Manifest this update: Mon 28 Sep 2026 20:01:59 +0000
Manifest next update: Tue 29 Sep 2026 20:01:59 +0000
Files and hashes: 1: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (hash: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs=)
2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: dSU+CsXtpPWQpxHNAkCL88ORptXwdN1/gPT12uf82Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:25:56:48:21:a5:37:c1:60:c5:7f:40:57:4b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Sep 28 20:01:59 2026 GMT
Not After : Sep 29 20:01:59 2026 GMT
Subject: CN=5100d43c43b9d2d976bf056e1fe5f965bcc15f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:82:10:c3:7e:9d:25:23:0a:cd:2b:fe:29:
4c:9e:71:72:99:73:eb:00:5c:62:59:d0:ca:80:5e:
d8:32:12:d8:7f:4f:51:30:29:90:bb:9d:b9:45:ac:
19:9e:de:49:05:4a:e6:50:ff:ae:61:28:66:7c:68:
df:b8:17:6d:1f:b2:45:98:13:7b:36:34:a5:21:c1:
d0:c8:6e:b2:be:fa:4d:00:a1:51:8a:26:27:35:a4:
f2:8c:74:2e:2d:44:70:b0:02:ac:e3:3c:08:24:93:
a6:97:40:59:86:0a:4c:66:74:06:fc:35:52:42:a9:
d2:df:8f:fe:d5:04:ec:e0:6a:dd:dd:f5:9d:94:5d:
8b:a2:19:b5:cd:d4:9f:1d:48:a3:db:df:63:45:58:
4e:b7:21:e0:46:2f:f8:96:07:5f:ea:3f:40:6b:bd:
2e:78:66:f8:a2:ba:dd:24:a9:0a:7a:22:c9:66:2b:
5c:2e:f8:6c:11:24:5e:3b:38:aa:bc:6b:6c:8f:94:
32:ae:68:cc:a6:69:f2:89:77:6c:99:c4:93:3c:88:
82:e1:32:dd:4b:88:c1:d6:39:b9:86:98:9f:95:b2:
4a:fc:21:64:1b:75:b7:68:5f:5c:22:f3:3d:65:6d:
c3:23:81:04:57:72:48:47:f7:0b:5b:9e:b3:6a:a0:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:D4:3C:43:B9:D2:D9:76:BF:05:6E:1F:E5:F9:65:BC:C1:5F:21
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7e:9e:66:6f:22:97:fa:50:a3:13:6b:e2:3f:99:5c:e9:e4:
ab:10:24:e5:35:3e:0e:2b:28:04:21:f3:72:57:01:e7:37:7c:
dc:b9:03:94:28:7e:22:c0:4b:21:53:1f:e1:4a:2e:0c:7b:40:
fb:48:c1:14:64:59:6c:f5:fe:b9:f0:7c:84:d4:1c:2d:0d:9d:
02:96:29:49:8e:bc:63:5c:64:75:58:a2:43:ba:a9:8e:13:e4:
70:e3:ca:df:9d:13:df:3b:6c:ee:da:45:9b:a0:dc:ed:33:b4:
1a:61:93:94:fd:20:d5:49:15:e3:20:2a:7f:5d:22:5f:6f:15:
25:f1:28:0f:7c:92:55:89:fb:b9:fe:8a:00:1e:e5:6f:cd:02:
30:a2:5b:df:d1:b0:d6:00:c3:cd:5d:ba:14:11:7e:9f:92:3d:
0f:ed:ba:db:7e:f7:11:56:7e:7d:d4:5f:dd:4c:6a:bd:38:16:
c0:57:5a:c8:08:10:b2:d0:de:44:a6:ce:4f:fc:a2:a7:71:dd:
84:26:19:44:2d:73:0f:05:86:47:2e:ba:59:88:d6:b5:ce:f4:
fe:b2:f5:93:dc:de:b7:7d:74:be:51:4a:82:b8:bd:8b:6a:b5:
b0:f5:44:2b:4f:aa:18:aa:9a:5f:78:9a:9c:75:86:e0:d5:90:
11:37:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:57:58 2026 by rpki-client