Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: O88TI4F+O2Kd/5nsEV7cbWIZUz1np+jIxEjlkNKF+Xg=
Subject key identifier: B1:63:B0:CF:FE:EC:22:EC:D1:8B:F1:93:14:3A:1C:C3:1E:00:D2:CE
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 019CABD9280A22C480351DF0A2EF7C1F376B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 01BC
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: LB897dXLBM36a7U6SkP9ZIBRp0U.roa (hash: syt+8t+IbVJ3QRitmZH6LwQ2EF86AutEdjHbzKfuLYY=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: oe8YDanYj+7ohOq/NEMTRji/EdTO5ZGdb3zJHkqp0hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:28:0a:22:c4:80:35:1d:f0:a2:ef:7c:1f:37:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=b163b0cffeec22ecd18bf193143a1cc31e00d2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:a1:b4:d6:65:b4:0c:a6:04:ce:4d:1d:ca:
4f:68:3b:b1:9b:73:ef:c1:ef:9c:98:39:4f:13:02:
75:b7:94:ff:50:bd:4c:14:c6:4a:94:00:54:2d:43:
c9:c3:63:36:4d:4f:da:2f:c7:8d:f1:3a:8e:8f:dd:
e4:8d:a1:f6:38:e7:37:bc:7f:8a:41:31:28:e2:be:
53:73:b9:79:e8:04:0a:a3:70:1d:73:14:ff:26:20:
d5:c5:c1:16:c5:da:eb:28:79:00:2d:9a:9f:18:6d:
47:fa:1d:23:a8:d1:30:0c:2d:ed:80:00:28:b9:88:
64:b4:0b:d0:38:f4:b1:c7:2e:cd:3e:9a:31:0b:61:
9c:29:1d:f7:bd:b4:23:b9:bb:a8:bc:2b:7b:95:06:
57:49:81:41:b5:93:9e:82:a2:cd:e1:d5:ef:28:4f:
df:3b:60:86:34:11:c6:1a:5a:2c:06:81:96:a8:57:
55:2b:07:92:8a:3c:49:d3:db:c6:bf:08:78:09:0b:
0c:2a:54:1a:a4:a7:77:2c:29:34:00:bd:54:39:d2:
ae:49:8d:4a:36:76:38:fd:65:4a:2b:9e:53:65:5e:
fc:0a:c6:04:12:b4:e5:11:95:4b:cf:85:3f:8f:02:
cd:00:91:8f:c0:8c:9e:d9:57:4f:60:1e:9f:a9:b7:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:B0:CF:FE:EC:22:EC:D1:8B:F1:93:14:3A:1C:C3:1E:00:D2:CE
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c3:ff:3e:02:d3:77:38:dd:37:b8:1d:76:83:84:ed:8f:4c:
a5:64:7d:73:3f:cf:20:08:0b:97:9a:be:a1:ee:e5:9b:6d:3b:
16:88:4d:bd:07:71:fb:05:c0:b9:c2:88:9c:34:16:3c:a4:2a:
b1:b3:26:37:63:b6:a6:fc:65:87:d1:11:9c:cd:7e:f2:33:2a:
fa:57:93:9d:65:6b:8c:ca:ef:f1:24:f9:56:75:bc:7f:cd:1f:
58:d8:a8:73:b2:18:4a:1d:73:42:45:fd:fb:bd:48:82:49:07:
ba:2f:0d:09:00:66:7b:20:94:3c:bb:2f:cf:31:e7:63:df:0f:
70:d6:7a:01:ef:45:a0:aa:af:a5:45:9b:c9:6f:50:bf:83:7a:
06:c7:aa:47:5d:40:ce:df:b7:23:32:e5:7b:fc:d6:88:74:27:
a0:4a:73:48:68:0b:e2:82:d2:4c:2e:da:63:f9:ef:9d:84:b4:
b1:62:68:08:da:f1:b5:de:fa:f2:bb:97:9f:4a:5f:7b:51:34:
39:c1:ed:4a:dc:6c:c7:3b:d4:0b:9e:e9:61:43:68:94:81:89:
60:a1:45:cc:f7:5e:2d:c0:34:b0:b6:f9:c7:c3:95:2b:b0:f1:
40:4d:30:b5:28:74:96:ca:0e:db:e1:dd:6a:c9:23:1b:12:ef:
48:78:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:16:19 2026 by rpki-client