Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: MwYW0q3mjyqtrX++a8zoCrUsaVZTsI4omyi1b9pKG3c=
Subject key identifier: 6C:53:E6:4B:13:CB:DB:2F:B0:CC:E2:65:D1:89:46:84:23:71:93:F0
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019CAD2275D6D6C5DE24016AAA4F050C069B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 11DD
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: Oa4/H0U4zMfeGmKYpqilB/acVcr9ukiS3FBXOqBq5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:75:d6:d6:c5:de:24:01:6a:aa:4f:05:0c:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=6c53e64b13cbdb2fb0cce265d1894684237193f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:b4:61:0f:5a:d0:2a:08:60:a0:51:e7:41:
c2:01:95:96:c8:9b:85:0b:34:14:ee:93:a3:7d:5b:
d8:48:ce:16:ff:66:53:91:d5:89:79:47:ca:81:24:
93:e0:ad:e2:4a:3f:d5:1c:3b:40:e5:b0:35:2f:2d:
ba:8e:a9:ff:2a:4f:c1:7a:c0:25:e8:4f:64:0c:89:
cc:35:2c:9f:27:90:f1:9b:3a:bb:c0:28:26:d6:8b:
35:bb:83:46:d1:f7:bb:7e:6c:26:ae:54:88:33:62:
fb:a4:d6:20:53:98:31:46:d5:3c:23:a2:19:85:a7:
37:2c:38:61:42:20:54:f5:c4:8b:9d:8d:7e:9c:6e:
f1:65:5f:1a:5e:d1:69:fb:7c:b3:aa:15:eb:2b:4b:
6e:2c:40:f2:cc:15:eb:db:69:92:47:1d:6c:7d:2a:
d1:39:81:1e:78:c8:96:4c:c9:9d:6b:9a:86:87:24:
70:f8:c9:5e:67:a1:99:78:67:19:ac:fb:16:62:62:
a9:aa:c2:a2:0f:9a:af:e2:21:3d:66:b9:d2:cb:9a:
4f:49:2e:91:5f:2e:a6:44:29:71:17:a0:5d:4e:31:
6d:f5:55:b9:e3:e2:a5:0d:5b:e9:4a:d2:1f:ca:ff:
74:1b:af:9d:a4:f4:23:31:36:f5:32:b2:3c:4f:f1:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:E6:4B:13:CB:DB:2F:B0:CC:E2:65:D1:89:46:84:23:71:93:F0
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:f9:1d:ca:5f:36:81:09:7a:9a:93:a0:ba:5d:a5:ce:13:
cf:e3:96:78:81:bf:cc:31:57:d1:5d:35:da:e2:73:9f:74:df:
da:01:52:22:e6:62:51:39:26:21:59:81:6e:f3:6a:2c:d1:59:
d0:2d:29:0c:d4:eb:db:25:58:f8:21:61:7a:0d:67:7d:29:57:
e6:15:22:af:b2:17:90:d0:fc:ca:52:39:a5:30:de:35:ba:aa:
36:1c:f7:6f:84:27:75:66:0e:97:e9:ea:d1:d3:7f:d7:f1:89:
6b:8a:32:ea:93:4e:f1:cd:73:2a:97:ef:44:a2:6f:a5:50:fc:
92:7a:e9:2f:62:34:63:f2:dd:8e:47:ea:8b:49:37:2f:72:8c:
52:23:ad:e3:90:4f:d8:99:b2:39:75:28:42:70:63:6a:87:a9:
bf:ee:7b:20:bb:5d:97:5f:63:48:43:0a:85:09:5c:ca:e5:1d:
7c:91:ec:1a:f0:0f:e1:a8:3b:47:ed:85:76:8c:b3:7b:aa:28:
8d:56:0c:29:29:2a:3d:63:d1:3f:72:ea:e2:63:b4:8b:32:74:
17:6f:f5:c5:e6:f2:61:78:ca:4a:f5:35:97:0a:1d:a5:cb:44:
b2:bf:a5:b0:a3:f9:0b:26:50:5f:da:ec:ca:b8:0b:43:37:99:
27:de:7f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytInXW1sXeJAFqqk8FDAabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjYwMzAyMDYwMDQyWhcNMjYwMzAzMDYwMDQyWjAzMTEwLwYDVQQD
Eyg2YzUzZTY0YjEzY2JkYjJmYjBjY2UyNjVkMTg5NDY4NDIzNzE5M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0u0YQ9a0CoIYKBR50HCAZWWyJuF
CzQU7pOjfVvYSM4W/2ZTkdWJeUfKgSST4K3iSj/VHDtA5bA1Ly26jqn/Kk/BesAl
6E9kDInMNSyfJ5Dxmzq7wCgm1os1u4NG0fe7fmwmrlSIM2L7pNYgU5gxRtU8I6IZ
hac3LDhhQiBU9cSLnY1+nG7xZV8aXtFp+3yzqhXrK0tuLEDyzBXr22mSRx1sfSrR
OYEeeMiWTMmda5qGhyRw+MleZ6GZeGcZrPsWYmKpqsKiD5qv4iE9ZrnSy5pPSS6R
Xy6mRClxF6BdTjFt9VW54+KlDVvpStIfyv90G6+dpPQjMTb1MrI8T/FPjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxT5ksTy9svsMziZdGJRoQjcZPwMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4/5Hcpf
NoEJepqToLpdpc4Tz+OWeIG/zDFX0V012uJzn3Tf2gFSIuZiUTkmIVmBbvNqLNFZ
0C0pDNTr2yVY+CFheg1nfSlX5hUir7IXkND8ylI5pTDeNbqqNhz3b4QndWYOl+nq
0dN/1/GJa4oy6pNO8c1zKpfvRKJvpVD8knrpL2I0Y/Ldjkfqi0k3L3KMUiOt45BP
2JmyOXUoQnBjaoepv+57ILtdl19jSEMKhQlcyuUdfJHsGvAP4ag7R+2Fdoyze6oo
jVYMKSkqPWPRP3Lq4mO0izJ0F2/1xebyYXjKSvU1lwodpctEsr+lsKP5CyZQX9rs
yrgLQzeZJ95/lg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:20 2026 by rpki-client