Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: LuDUmkN2l6k2TYV5OJFaoYYCxTc5MjL7SRKJ04W94Jo=
Subject key identifier: 20:09:E7:DC:48:6F:E1:46:1E:17:BC:46:66:E7:2E:44:5D:41:76:45
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019CAC46B4CFD89029DDF9D83FDE8F9201A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: aWxhJaXeV/y1OfS7ZIWcONE4LjicPYc18nQS9C6NTJw=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b4:cf:d8:90:29:dd:f9:d8:3f:de:8f:92:01:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=2009e7dc486fe1461e17bc4666e72e445d417645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:10:27:e3:42:80:b1:7b:b4:5c:f0:b3:15:
e0:fa:57:68:eb:ec:cc:9c:51:4a:65:85:67:70:c5:
5e:1f:80:c4:7c:30:11:e4:3c:4c:0c:ab:25:55:0b:
90:08:78:90:81:d4:ee:33:2c:a8:a2:c5:c2:cd:16:
09:6d:e4:cf:1a:09:80:9d:8c:88:59:a4:5a:5c:39:
3c:e5:6a:99:9d:d4:9e:a3:f4:e3:b3:a1:1c:fc:54:
05:1d:44:91:b3:2e:f6:7d:19:b3:de:2f:ba:0c:70:
1a:9b:77:fd:43:81:46:5e:31:29:84:8e:52:73:7b:
c9:b4:f2:7e:e7:6b:f2:7e:c8:4b:94:8b:65:33:17:
62:19:38:e2:d0:76:6a:bf:87:4b:46:e3:86:73:fc:
60:76:b9:76:67:10:26:71:2d:55:1f:33:f8:e1:25:
c4:3d:99:b1:87:23:75:83:e8:11:59:9d:11:67:c4:
ec:d2:51:bb:81:a4:69:76:e6:c5:31:c2:a5:f7:e1:
61:1f:fa:bf:df:14:5c:13:f6:80:55:7a:75:ac:70:
6d:ee:1a:00:7f:f0:d1:11:f1:32:3c:a9:c2:f5:88:
a8:22:30:f5:cf:8d:53:8e:14:07:d1:1e:eb:b9:d2:
04:08:a6:7c:98:00:7b:c4:68:5e:ae:b7:f2:fb:62:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:E7:DC:48:6F:E1:46:1E:17:BC:46:66:E7:2E:44:5D:41:76:45
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:b7:cc:32:53:b1:9d:eb:88:ce:c0:6a:b3:84:65:19:76:
70:ee:10:cc:49:3c:e5:59:62:f1:01:fc:e4:22:40:80:f3:2e:
ca:e2:94:9e:e8:c4:45:44:23:c0:53:ce:d4:21:f4:c9:32:8a:
37:78:dc:d2:f7:21:6b:31:ef:33:51:08:3c:51:28:aa:c1:29:
2d:61:d8:a5:22:12:2e:15:77:46:56:a2:90:2b:15:a8:b4:b3:
af:54:11:31:4c:d5:07:7d:55:c5:66:72:ac:41:04:10:61:77:
5b:b7:e7:c3:e3:33:65:72:c2:61:ce:62:9c:38:18:78:f3:46:
e5:05:0f:75:41:63:6b:93:92:f8:8e:63:cc:ba:07:49:56:34:
d7:fa:03:8e:49:3e:86:fd:c1:5e:6b:af:2d:9b:b1:8f:35:8c:
f3:38:a4:6b:86:85:8f:5b:53:99:5b:d6:0b:55:98:ae:aa:91:
a6:63:59:ba:16:9b:7c:f2:40:69:d0:2c:75:b5:e0:bd:d2:fa:
e2:7c:a9:eb:45:3a:88:40:09:60:ec:2d:d3:08:16:7f:51:35:
2e:0b:65:da:fb:ad:3d:3e:36:97:2c:45:97:8d:85:09:ef:27:
20:50:79:7b:3f:c8:52:c8:ea:9e:b9:67:23:60:17:40:88:40:
30:1f:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:46 2026 by rpki-client