Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: ofJFfZtrxbinBB2XiZD3KXNV1RXgUfn2cWd2b7VBPD4=
Subject key identifier: CF:22:DE:0A:40:01:A1:C6:F9:45:EC:85:2D:8E:C5:C8:2C:25:EF:B9
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019D9BBE34947B73A51476A230459A8A8F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 12BE
Signing time: Fri 17 Apr 2026 14:00:26 +0000
Manifest this update: Fri 17 Apr 2026 14:00:26 +0000
Manifest next update: Sat 18 Apr 2026 14:00:26 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: 9emH6JAFKroHXzQWWlcTADNNaXpzKu6zwaUTfEKAP70=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:34:94:7b:73:a5:14:76:a2:30:45:9a:8a:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Apr 17 14:00:26 2026 GMT
Not After : Apr 18 14:00:26 2026 GMT
Subject: CN=cf22de0a4001a1c6f945ec852d8ec5c82c25efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:a1:67:c3:fe:d7:ae:1f:ee:3a:37:98:2c:
82:16:ba:d7:d2:e0:65:2e:3f:41:98:62:42:29:11:
9a:ca:73:53:4d:75:29:88:55:23:6a:7b:ea:4f:f7:
43:69:aa:de:3c:f9:00:f5:ee:45:4a:58:a6:4a:da:
b3:89:40:60:a9:f4:60:56:08:19:0c:aa:7b:d8:d7:
2e:f8:b6:90:1b:d3:d0:c5:5a:79:7e:9e:10:e0:71:
5e:81:40:b6:74:a8:34:e4:27:f2:68:d0:b7:0f:59:
ff:9f:6d:7c:60:f9:51:3c:ec:5e:aa:73:6b:aa:a8:
b7:4e:73:92:c0:6c:37:79:41:e4:e1:a1:70:3f:84:
2b:9d:a2:02:23:aa:45:c4:23:ec:da:5b:65:91:67:
ca:20:58:1e:d4:53:f8:e9:a8:24:81:55:e0:bc:06:
b9:d7:3f:96:a6:b7:6f:ff:36:ce:bd:47:15:9f:7e:
fc:f9:d5:85:4e:a1:5d:1a:a1:82:3d:eb:5e:ee:4a:
d9:3e:a8:14:9e:2b:c9:0c:cb:52:07:f6:72:d8:57:
1f:1f:43:c7:d1:9d:1a:57:f0:9e:cb:53:07:d9:0d:
47:02:8e:c4:b8:a2:39:77:2b:61:18:c2:b4:2b:76:
6e:73:22:c7:3d:27:ce:8e:a7:4b:d0:9e:ee:f3:6d:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:DE:0A:40:01:A1:C6:F9:45:EC:85:2D:8E:C5:C8:2C:25:EF:B9
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:11:ee:c7:a2:aa:00:62:e2:fd:71:fc:9c:d3:7e:09:56:
a2:de:d4:56:7b:4a:d7:87:b8:6d:e3:51:b2:5e:38:30:d8:12:
6e:ef:66:16:3f:fe:9c:2a:fe:9a:26:dd:8b:42:fd:28:e3:3a:
6e:5f:e1:01:6c:b7:02:f3:0d:56:d7:d5:2d:54:d2:20:e7:eb:
fd:61:14:f1:10:22:01:05:2a:a1:bf:f7:02:4e:78:00:52:41:
cb:0a:da:94:97:c4:48:8d:11:d8:43:82:fa:be:4a:20:82:b2:
32:c0:b0:2c:75:a7:6e:91:99:45:6e:bb:a2:86:32:18:e7:8a:
3b:5d:ba:7a:2c:7e:30:f0:ec:c1:3a:5a:3e:2e:a2:92:4b:24:
a1:74:38:9d:6b:f8:56:1b:98:40:07:8b:20:cd:9a:46:6b:a9:
10:c1:e7:84:31:43:31:82:c9:83:63:db:f6:21:31:98:ad:d1:
45:ce:ef:64:01:c1:e4:2a:0f:56:63:c3:01:98:32:ad:d1:d7:
1f:8f:96:54:73:04:d4:80:85:a0:0a:c5:d3:79:1e:48:fb:b2:
00:92:d1:89:52:df:c3:74:ed:1d:fb:0d:1f:66:82:be:b8:bb:
05:a9:c0:ba:b8:3c:1e:2a:5e:a6:ae:11:30:39:45:bd:0b:ae:
02:ca:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:18 2026 by rpki-client