Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: Gdj5VZDbrZDgoPjWOxno0N3QcwmHoXmDUdyTfcdGtOE=
Subject key identifier: C6:0D:76:FD:EC:85:95:8C:F2:67:BC:88:42:4A:EB:72:9D:09:45:BA
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 019EC0DAEA8D40E06B3C4C3E55F555A2E6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 02D0
Signing time: Sat 13 Jun 2026 12:00:32 +0000
Manifest this update: Sat 13 Jun 2026 12:00:32 +0000
Manifest next update: Sun 14 Jun 2026 12:00:32 +0000
Files and hashes: 1: LB897dXLBM36a7U6SkP9ZIBRp0U.roa (hash: syt+8t+IbVJ3QRitmZH6LwQ2EF86AutEdjHbzKfuLYY=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: 36Itk1jAYyiYkmDmgclzkRxnJUiQRGMWc76SPWqFhMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ea:8d:40:e0:6b:3c:4c:3e:55:f5:55:a2:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: Jun 13 12:00:32 2026 GMT
Not After : Jun 14 12:00:32 2026 GMT
Subject: CN=c60d76fdec85958cf267bc88424aeb729d0945ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:23:27:ae:2b:49:df:5c:76:08:b5:7d:ef:
f9:10:d1:a8:85:26:f5:98:da:0c:ae:d0:80:38:b5:
d6:b7:46:4a:89:6f:1e:6f:b7:17:dc:41:71:d4:56:
af:03:81:2c:94:f4:89:9b:04:5d:83:59:cc:22:f3:
e2:a5:63:83:e7:a8:a5:af:fa:be:1c:db:2c:e5:88:
73:93:29:91:27:5b:80:b0:3f:e8:76:50:75:e0:00:
1b:36:88:0e:c3:04:38:87:20:e0:5e:d9:de:bb:ed:
d1:c2:b0:ef:25:0e:21:63:b9:5d:7a:0e:9c:f5:cd:
8f:f7:15:00:13:cd:16:e7:5a:97:e4:94:ac:ca:64:
85:b8:86:e2:dc:88:38:05:a1:f7:d6:b7:5f:91:f1:
b8:a8:ab:f8:9b:a5:cb:4e:22:d4:41:2e:2a:c1:85:
2a:df:5a:97:93:6d:12:f5:ba:83:f4:ec:a8:a6:5c:
d6:4b:95:92:a8:c9:e2:4f:86:82:d3:4f:0c:ad:c8:
1d:84:1b:32:fa:20:a2:b8:61:2b:1f:ed:50:48:1b:
b7:4b:69:5d:18:7a:de:50:03:b6:6f:64:50:46:24:
ae:34:04:1d:1b:7c:ac:f6:78:32:74:da:99:c4:6f:
a8:20:1b:e4:f9:b3:c6:88:09:b8:a1:16:2c:58:c2:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0D:76:FD:EC:85:95:8C:F2:67:BC:88:42:4A:EB:72:9D:09:45:BA
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:60:ee:c5:17:e9:c4:a1:0c:77:9b:26:2c:e7:dd:fd:c2:ef:
d3:5f:c9:8e:54:53:cd:9b:07:1e:8a:3f:20:e4:38:10:40:9e:
01:bf:33:50:67:2a:e1:a8:e3:57:56:c9:b9:d6:8c:d3:d7:a0:
78:be:3d:11:16:c7:92:20:08:4f:75:10:3e:7a:11:77:0f:d4:
17:4e:7e:df:46:08:e6:7a:bc:38:49:72:11:f1:ef:56:bc:c5:
d9:fb:9d:b4:c0:f1:3d:de:ec:e2:1e:95:9c:d4:31:3a:23:71:
fe:08:c4:f8:e2:82:ac:5c:e7:a9:82:46:46:2c:8d:7d:73:c8:
e1:84:66:db:2e:4b:d4:c8:f5:2d:ec:32:bb:a9:92:40:c2:f0:
5e:15:9f:de:4c:bd:8f:5b:a8:a8:78:07:63:87:d5:c0:da:e5:
9c:a3:c3:95:47:07:f5:1f:af:c8:78:4a:9a:8f:ca:46:62:ec:
54:2e:90:4c:b7:89:1f:8e:f7:68:bd:75:12:cd:f9:74:17:ff:
1b:0d:18:70:5a:b5:d2:de:a3:b2:bf:8a:04:e0:d7:04:74:39:
bc:48:e3:f4:d2:c1:3a:ae:16:ed:11:57:ee:ea:50:3e:2a:53:
83:d2:72:bb:c0:78:39:11:d0:df:0d:da:d0:2d:10:d3:19:1c:
b8:ac:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:22:59 2026 by rpki-client