Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: NiC3e5BTcMPXUuD/nFqFmKJ+Pkf+8Quzk0SIllRsijg=
Subject key identifier: FD:C1:5A:06:DB:7E:B0:CE:C4:88:5E:EF:E0:86:14:BB:5B:E3:3C:CE
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019EBF5A575D467151ED9120D8FCD853ACAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 1355
Signing time: Sat 13 Jun 2026 05:00:29 +0000
Manifest this update: Sat 13 Jun 2026 05:00:29 +0000
Manifest next update: Sun 14 Jun 2026 05:00:29 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: Xrx2s+phHhdStfc8cpNzGipmSkAy7GTJaeqRP8xMmkM=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:57:5d:46:71:51:ed:91:20:d8:fc:d8:53:ac:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jun 13 05:00:29 2026 GMT
Not After : Jun 14 05:00:29 2026 GMT
Subject: CN=fdc15a06db7eb0cec4885eefe08614bb5be33cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:d2:46:80:38:e4:38:c7:3b:a0:f2:2c:6c:
2e:a7:13:78:7a:12:f4:25:4c:f4:94:a0:20:fe:11:
99:1e:5a:1e:62:5a:a3:c4:ed:e2:1c:f9:5c:8d:f4:
e8:ea:60:41:ac:8b:b1:d2:a2:56:7a:42:b6:c0:43:
c8:ee:cf:77:c4:71:69:30:e7:76:d1:d7:fe:f9:96:
92:df:4f:c6:34:3e:ca:ac:5d:e7:95:d3:5a:30:35:
13:9a:fe:69:40:1b:aa:20:80:9e:ad:90:46:a2:0d:
59:d7:00:4c:67:7d:39:71:52:67:01:5c:a1:8f:99:
56:1a:79:7e:f5:4e:3b:f6:44:6a:f1:cd:b9:ac:66:
9a:76:fd:24:b7:c3:94:83:71:de:81:d7:8a:3d:7f:
eb:97:dc:82:29:7b:7a:3f:db:f3:09:a3:f7:75:7b:
bf:0b:0f:b5:21:1b:a2:9d:37:4a:8c:b8:59:7d:85:
8d:95:a1:14:91:ea:ce:d2:cb:56:fb:e4:48:ed:07:
26:7a:58:46:41:aa:6b:0e:7d:53:b4:e8:82:cc:c1:
35:40:94:8a:6f:84:ca:24:60:06:af:36:bd:21:6c:
59:af:10:29:94:a5:9c:e9:a6:d4:fb:62:a2:6c:05:
4d:19:ce:e8:9d:d5:97:18:d4:78:cf:00:02:28:bb:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C1:5A:06:DB:7E:B0:CE:C4:88:5E:EF:E0:86:14:BB:5B:E3:3C:CE
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:08:de:2e:fe:44:aa:f7:c9:3f:be:25:cf:fd:d4:8c:fa:38:
e9:79:ac:11:ab:82:36:58:3d:81:e0:3f:be:60:01:c9:00:2b:
3b:78:21:ef:74:42:a5:30:56:cf:0a:95:ad:af:f5:49:f4:e9:
c1:28:24:66:6b:9b:04:b3:5e:59:3c:17:09:bf:38:08:51:4c:
ed:c1:ac:d3:54:67:47:92:f7:71:7b:a1:43:8d:fb:f8:0e:e1:
87:c1:cf:1d:00:dd:84:b6:e4:3f:3f:ca:1f:1b:7c:88:e9:4d:
bb:e5:f3:13:2c:2d:b7:8e:4a:fd:04:87:39:15:a1:d9:0c:a7:
9a:e4:8b:41:20:b2:79:b3:03:9a:06:2f:0b:22:6c:54:4a:2c:
bf:a4:74:99:bb:63:3b:38:01:a3:c0:f5:35:4b:fa:45:73:e5:
f4:37:61:d8:ea:4a:9e:1f:3b:f5:4a:9b:17:da:c2:b2:39:58:
59:ee:b0:d6:c1:db:2b:f6:a8:fc:05:c1:18:b3:f5:eb:99:94:
9c:67:e7:61:10:e9:f4:96:94:04:f1:40:15:d4:8a:f9:c4:9c:
c0:87:62:c8:7f:e4:14:e2:ed:76:64:ae:76:72:ec:96:bd:05:
a4:d4:6a:39:ba:21:07:4b:8e:06:91:c6:b2:98:8d:1b:e6:20:
44:8f:7f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WlddRnFR7ZEg2PzYU6ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYWUxYTYwNThiYmRjZDA4MzUwNjhlM2I0ZjlkZTUxZjJi
ZDkwNTcwHhcNMjYwNjEzMDUwMDI5WhcNMjYwNjE0MDUwMDI5WjAzMTEwLwYDVQQD
EyhmZGMxNWEwNmRiN2ViMGNlYzQ4ODVlZWZlMDg2MTRiYjViZTMzY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1LSRoA45DjHO6DyLGwupxN4ehL0
JUz0lKAg/hGZHloeYlqjxO3iHPlcjfTo6mBBrIux0qJWekK2wEPI7s93xHFpMOd2
0df++ZaS30/GND7KrF3nldNaMDUTmv5pQBuqIICerZBGog1Z1wBMZ305cVJnAVyh
j5lWGnl+9U479kRq8c25rGaadv0kt8OUg3HegdeKPX/rl9yCKXt6P9vzCaP3dXu/
Cw+1IRuinTdKjLhZfYWNlaEUkerO0stW++RI7QcmelhGQaprDn1TtOiCzME1QJSK
b4TKJGAGrza9IWxZrxAplKWc6abU+2KibAVNGc7ondWXGNR4zwACKLvbhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3BWgbbfrDOxIhe7+CGFLtb4zzOMB8GA1UdIwQY
MBaAFAquGmBYu9zQg1Bo47T53lHyvZBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAt
YjIyNDdiM2E1MmQ4LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAtYjIyNDdiM2E1MmQ4
LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAjeLv5E
qvfJP74lz/3UjPo46XmsEauCNlg9geA/vmAByQArO3gh73RCpTBWzwqVra/1SfTp
wSgkZmubBLNeWTwXCb84CFFM7cGs01RnR5L3cXuhQ437+A7hh8HPHQDdhLbkPz/K
Hxt8iOlNu+XzEywtt45K/QSHORWh2QynmuSLQSCyebMDmgYvCyJsVEosv6R0mbtj
OzgBo8D1NUv6RXPl9Ddh2OpKnh879UqbF9rCsjlYWe6w1sHbK/ao/AXBGLP165mU
nGfnYRDp9JaUBPFAFdSK+cScwIdiyH/kFOLtdmSudnLslr0FpNRqObohB0uOBpHG
spiNG+YgRI9/vg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:35 2026 by rpki-client