Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: oI8T5H2TFaFfTKJdwA6S/aIVfT4jN2901FhSb0pqJlE=
Subject key identifier: FD:D6:7C:73:C5:9F:EE:B6:48:06:1C:DB:BF:BC:63:AD:F6:D8:5D:F3
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 019CAE35CA1FC2B0EF7AF89420FE5217F235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 1517
Signing time: Mon 02 Mar 2026 11:01:26 +0000
Manifest this update: Mon 02 Mar 2026 11:01:26 +0000
Manifest next update: Tue 03 Mar 2026 11:01:26 +0000
Files and hashes: 1: VKg9BHH8VQ8OEYgSsV_wed8w2h4.roa (hash: Lbn6Fby7EdHc1UHJ59PaUZ9J82IIGLS0ZcRQWB4hGSs=)
2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: 8LoKtHXX7OZLeJp1LiTqQPvrR6Krgh5Ffwss/QPccXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ca:1f:c2:b0:ef:7a:f8:94:20:fe:52:17:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Mar 2 11:01:26 2026 GMT
Not After : Mar 3 11:01:26 2026 GMT
Subject: CN=fdd67c73c59feeb648061cdbbfbc63adf6d85df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:f6:e7:63:da:ef:e6:5f:0d:89:de:2a:b1:
21:80:f8:8f:98:77:73:a0:f7:54:bc:69:5a:1b:92:
e2:eb:8c:a6:46:cc:f0:e0:df:a7:99:42:d7:7b:4b:
14:6b:13:86:fe:e9:20:7f:13:04:2b:97:c5:ff:e6:
03:11:f3:d7:7d:78:6e:44:4f:ea:39:ec:5f:49:c2:
9a:b3:a1:f1:22:0f:f4:9a:e3:03:d5:09:cc:b2:30:
24:98:f9:3d:89:e1:e1:98:cc:52:40:1d:4d:b4:64:
3e:70:f8:43:2c:cf:59:4d:87:cd:8e:be:89:82:86:
00:81:15:d7:46:c9:0c:1b:6a:97:24:d3:52:91:8a:
60:db:45:75:7e:7f:a8:59:42:25:eb:86:bc:72:38:
35:75:c5:92:11:0a:53:e7:b7:58:2f:c9:11:4a:a3:
3c:f6:5c:d4:df:f3:e5:d7:d5:47:90:b8:76:6e:0c:
56:2e:84:e0:0b:fd:6a:6e:3b:8e:9e:ff:03:df:08:
3d:9e:72:ba:57:b1:f1:b9:7d:9d:2e:99:d8:ae:3c:
9f:a4:25:86:4a:7a:08:33:c2:b9:74:44:a8:ec:8f:
19:2e:ba:de:7b:f3:de:74:43:30:07:5a:bc:d0:66:
03:72:94:8b:99:58:f7:50:7e:01:ab:ad:ff:56:5d:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:7C:73:C5:9F:EE:B6:48:06:1C:DB:BF:BC:63:AD:F6:D8:5D:F3
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8e:3d:be:8e:93:fe:76:75:e3:cc:3b:1a:3e:42:7c:4a:fd:
52:e3:28:36:e6:a6:42:a6:1d:ec:01:ae:21:d6:89:db:a8:e2:
72:46:ac:8f:e9:64:1a:a1:9c:f9:aa:06:74:54:e9:2d:c9:11:
66:be:41:00:88:f1:4e:4e:bf:c3:f7:83:3f:75:94:9e:94:53:
92:9c:74:6f:87:e4:fb:36:94:78:00:0d:b2:3d:c3:9a:ad:ae:
13:dd:03:0d:dd:91:ef:07:23:a4:1e:59:d2:59:91:05:db:99:
07:7d:d1:c1:5a:9a:7a:05:c1:f0:4c:3d:37:10:fb:69:0e:43:
80:2e:c0:0a:06:18:65:51:b6:f3:73:3c:35:8e:a9:79:e4:58:
7f:8f:19:de:b7:88:84:d4:95:51:46:11:4c:c5:1a:d5:95:43:
23:71:95:cf:4d:ce:16:ac:d5:32:b6:54:42:ad:ed:89:5d:7c:
c8:a9:08:dc:82:9a:3b:3c:f5:d5:77:0f:e3:0c:f1:fa:02:c7:
df:b8:c7:24:1a:59:89:5a:a7:4b:bf:42:d9:36:35:2a:5f:94:
ca:66:61:a3:d6:38:9a:8e:30:de:79:cd:68:2e:cc:af:1d:5a:
f6:a7:cb:45:14:cb:b1:c1:b2:8b:aa:45:42:34:82:9e:bd:4b:
d9:8b:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:40 2026 by rpki-client