Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: RB9DxLkgZJY7yDgMMcdVpaGc/j5OSm1XqdUlULddg8Q=
Subject key identifier: 9C:A8:A9:E9:5D:69:8A:6C:5F:5F:AA:12:C3:90:55:87:21:06:DE:53
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 019D9B50407DA7C22DB1E4A3C8C971FA2C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 0238
Signing time: Fri 17 Apr 2026 12:00:20 +0000
Manifest this update: Fri 17 Apr 2026 12:00:20 +0000
Manifest next update: Sat 18 Apr 2026 12:00:20 +0000
Files and hashes: 1: LB897dXLBM36a7U6SkP9ZIBRp0U.roa (hash: syt+8t+IbVJ3QRitmZH6LwQ2EF86AutEdjHbzKfuLYY=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: 3rnGcyGFl/bXIDWXCyhExy/C+FuiLSwRYb6N1p1ErtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:40:7d:a7:c2:2d:b1:e4:a3:c8:c9:71:fa:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: Apr 17 12:00:20 2026 GMT
Not After : Apr 18 12:00:20 2026 GMT
Subject: CN=9ca8a9e95d698a6c5f5faa12c39055872106de53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:26:dc:6f:bf:9e:4a:07:9b:20:c1:9b:81:
91:46:c3:be:aa:19:ca:12:c8:2e:44:b2:ee:56:f0:
5d:47:17:f5:19:03:27:c5:c6:af:83:7b:4e:47:82:
a5:89:c2:84:a1:38:f5:5a:b6:a5:f4:8c:af:d8:0a:
95:03:b0:71:9c:3f:8f:b8:be:0b:98:82:e0:2f:a0:
1b:ea:82:7b:d4:9a:1c:73:30:35:4c:67:1d:01:a9:
e8:fd:97:4d:01:6d:3c:85:0c:35:36:71:63:0a:2a:
e0:b4:70:78:42:ee:70:36:6a:8f:b1:ba:9c:e0:fa:
f0:af:74:2b:60:8f:5c:83:6a:bb:78:37:47:7f:ba:
61:fa:73:de:f1:64:8c:55:30:bd:59:d5:01:8f:d4:
26:02:1e:d5:f3:b0:51:2c:74:bb:eb:f9:1c:a8:98:
2f:e0:36:24:83:15:a9:ab:48:6a:0b:b0:cf:5d:8a:
d9:d0:4e:2b:de:72:42:f8:cf:b2:c6:3e:7b:c3:bb:
d2:60:0e:db:5c:fd:63:de:af:0d:53:a2:9c:73:65:
6a:ce:fb:3a:f1:aa:06:8a:0e:ed:b6:46:6d:c7:e4:
f4:0d:8b:b9:32:c6:a3:84:ae:93:c1:cb:1e:88:03:
cd:34:c9:56:9a:fb:a1:f2:40:2f:5e:70:be:ac:38:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A8:A9:E9:5D:69:8A:6C:5F:5F:AA:12:C3:90:55:87:21:06:DE:53
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:30:fa:f2:a9:7f:fa:c1:30:e4:34:47:64:77:c5:37:a4:97:
de:c6:e1:d4:7f:5a:7b:3b:32:31:08:46:a8:ac:5a:93:69:76:
ab:3d:e6:b9:38:92:fb:2e:bc:8c:8a:b7:dc:b2:9d:55:70:d2:
d7:50:2f:e9:3e:e6:ad:c3:97:fe:78:07:a8:ec:1c:e9:b8:24:
ad:92:57:43:da:25:d7:9b:c0:3c:d4:33:60:0a:a6:fc:a6:c4:
a9:26:ea:a5:ab:fa:f8:eb:cb:f8:09:9b:31:5b:50:07:95:9d:
f9:4e:ab:64:b9:bc:a1:ea:f6:e8:14:d0:47:a9:d8:c2:85:c0:
6a:4a:33:13:37:6e:06:42:9c:46:fd:e0:e8:42:46:ec:a5:29:
86:38:f1:8b:84:42:e0:f4:06:09:48:8f:5f:4b:ba:87:4d:51:
8b:9d:47:9c:f7:ef:bf:0a:8b:bb:17:66:aa:51:7e:8a:90:13:
2c:3c:b6:a5:ae:02:c7:16:a7:ae:cb:12:f4:be:ff:18:ad:9f:
ac:96:65:fe:99:74:3d:84:24:52:f7:c7:53:9a:e9:d4:e9:21:
14:c0:c5:4c:f3:8d:96:29:f1:e8:e3:85:0c:48:12:e5:2f:88:
dc:a1:24:78:d4:55:e8:40:b7:35:0b:03:c6:20:f1:d6:56:d3:
1b:ee:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:56:38 2026 by rpki-client