Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: NEV+gfS2sgEd9UrP9xo4spS6CC3Rm8SIw6wMt451yL4=
Subject key identifier: 63:E2:02:27:50:64:EE:69:14:F4:51:A2:0F:0F:77:C1:39:92:89:F4
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019FAAF5AC674EB901E16596C27822C2A16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 13CF
Signing time: Tue 28 Jul 2026 23:00:54 +0000
Manifest this update: Tue 28 Jul 2026 23:00:54 +0000
Manifest next update: Wed 29 Jul 2026 23:00:54 +0000
Files and hashes: 1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: DmOS3tN2h+9WqFzTQwv/LWKHzgkvdLBQxCE6jKq7u1U=)
2: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (hash: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ac:67:4e:b9:01:e1:65:96:c2:78:22:c2:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jul 28 23:00:54 2026 GMT
Not After : Jul 29 23:00:54 2026 GMT
Subject: CN=63e202275064ee6914f451a20f0f77c1399289f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:5a:3a:ca:b4:24:ae:c7:9b:4b:ec:2c:cd:
b0:75:56:1c:8c:7f:de:c7:f4:ec:b1:e5:38:69:56:
35:07:d1:ff:53:13:c4:68:b7:91:f1:28:c9:04:3a:
21:c1:c5:c9:b6:37:ec:23:64:6b:89:2f:79:0e:27:
ff:6d:52:ae:e6:08:96:78:87:12:d4:70:90:53:81:
7f:ee:f3:ee:5b:42:80:e5:ee:17:74:69:0d:09:ba:
97:70:3c:ef:f7:55:03:ef:96:53:41:66:d6:8c:55:
2c:1c:ca:2a:4f:f8:0d:41:df:52:17:fe:87:bc:2d:
03:d4:8e:33:9c:bf:15:3e:d4:81:5a:0a:82:63:aa:
74:36:19:2e:c5:07:1a:bc:08:9d:9d:d3:60:d0:25:
0c:8a:1c:62:e0:71:0d:5a:1d:47:91:0b:7b:85:de:
dc:5d:73:bb:71:f7:12:84:47:e0:df:1b:9b:74:55:
66:44:d5:ae:a5:e3:92:30:25:a0:72:ae:5c:dd:58:
b8:55:4f:dd:a0:c1:2e:a8:ca:59:15:8f:a8:ab:85:
22:44:2f:c7:e4:26:8b:7e:ca:37:e7:0d:7c:be:67:
8e:f6:6b:d2:ee:b2:e8:b6:b1:ac:63:8a:a2:f1:21:
e5:c8:25:6f:9c:07:3c:79:1e:4a:62:4c:d9:9e:f7:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E2:02:27:50:64:EE:69:14:F4:51:A2:0F:0F:77:C1:39:92:89:F4
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:60:28:4e:f0:c0:c7:8e:38:a2:bf:6d:55:d5:17:cd:d0:cd:
7d:55:ac:e8:ce:f7:1f:82:60:36:18:02:10:54:27:9c:c2:1c:
f2:4d:ad:64:02:8b:84:25:63:d3:dc:0e:ce:b3:6e:e6:8e:c5:
04:ec:5e:2f:21:25:ba:91:c1:d7:b4:00:5f:f3:b7:65:83:8f:
1b:9f:ab:00:38:18:98:0b:8e:77:88:35:e1:a3:e0:42:a6:d4:
9f:81:7e:77:64:2f:3b:82:af:31:c7:fe:4a:a8:c8:b1:6c:26:
13:e3:ae:0c:be:91:7a:bd:a1:bd:45:79:b9:8e:b5:5b:b9:95:
dd:da:0a:ab:b8:9a:62:a9:d4:3d:fd:aa:ac:5a:b1:d4:16:b1:
64:7e:3a:8a:91:41:9b:e8:31:b5:67:82:74:db:3a:96:83:33:
44:8c:34:7f:26:f9:bb:0f:94:c1:53:32:e1:5c:b7:2b:05:9c:
d6:48:60:6b:4a:ae:54:da:29:74:c8:19:95:13:71:e5:48:c8:
9c:03:11:1a:4f:35:6f:8a:83:2f:23:ae:33:99:43:a7:08:3c:
e3:18:56:cf:a6:de:db:d8:0f:90:63:9c:a4:6a:cd:c3:49:cc:
b6:16:3a:cc:1e:fd:99:8d:5a:8b:7d:2d:fe:6e:9a:38:76:e5:
5d:13:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:20 2026 by rpki-client