Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: Zt0ufkZ9eFF3DDEJnz7PjP3FnbFzCBFai1MV+AylIV4=
Subject key identifier: 0F:04:91:06:86:18:38:52:83:EB:9D:70:9D:E0:EA:94:64:B2:B7:AD
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019CACB5607C610D0761FBB07019F9AD5899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0FE1
Signing time: Mon 02 Mar 2026 04:01:33 +0000
Manifest this update: Mon 02 Mar 2026 04:01:33 +0000
Manifest next update: Tue 03 Mar 2026 04:01:33 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: YPRNRBn7PyHizXwSS0I+dGlmvhVTAC5j06J4b7/wVyM=)
2: YtniEFg8kjPPW1GupRixGIZcTZw.roa (hash: kE3KePA1ZXt9tPgxQYG+9riIhGGimv2LBW4VQyOyrso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:60:7c:61:0d:07:61:fb:b0:70:19:f9:ad:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Mar 2 04:01:33 2026 GMT
Not After : Mar 3 04:01:33 2026 GMT
Subject: CN=0f0491068618385283eb9d709de0ea9464b2b7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:90:df:22:87:a1:b8:cf:70:6a:5e:bc:8f:
df:cd:84:2a:b3:71:2f:86:8b:67:77:36:c0:bd:2b:
48:13:6b:c6:34:bb:98:77:90:f5:3c:2f:1b:84:28:
a1:8b:13:4d:70:9d:06:c6:df:9b:7b:77:03:ea:02:
85:58:0e:0a:5a:cd:75:9d:b3:a0:c1:16:fc:5c:6d:
70:30:f3:00:a4:34:7c:e0:40:3c:d9:9c:0f:0e:f0:
6d:fc:ec:17:18:68:72:d9:10:02:f2:ed:a4:fb:97:
00:63:57:66:82:bd:94:63:52:09:9c:78:60:04:c1:
90:58:05:05:99:4b:b6:59:9f:b3:4b:04:43:4b:77:
35:43:78:b8:3d:f0:52:89:fa:0d:c2:b0:af:d8:67:
96:2c:45:12:3b:86:a2:27:42:3a:13:c2:30:ce:c4:
1c:46:47:5a:d6:05:f9:53:7f:65:82:84:21:04:8f:
4a:8e:56:5f:8e:58:5b:b1:1c:61:82:cd:45:f9:0c:
32:d0:46:1f:e6:b1:28:72:db:8d:52:30:1a:94:eb:
42:f4:43:24:70:d3:42:72:cf:4d:52:82:43:4f:8e:
5a:70:ad:ae:27:c1:56:aa:5b:83:16:fc:ac:9b:b4:
78:57:99:2e:fc:2a:6c:85:21:13:2d:cc:bd:87:7f:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:91:06:86:18:38:52:83:EB:9D:70:9D:E0:EA:94:64:B2:B7:AD
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:45:a5:b0:3e:c5:a9:cc:56:fb:95:44:2b:be:c8:6e:39:cb:
0a:90:0a:59:9a:c6:d9:ce:04:14:13:ef:f3:4f:de:ba:f8:a8:
6f:e6:e8:f6:31:55:1c:f7:29:30:c9:48:26:83:6b:7c:c4:d6:
42:e0:10:cf:b9:b8:0b:1b:b9:d9:8b:18:c5:70:af:f8:63:07:
15:b6:68:a4:3b:f8:de:d4:09:d9:d4:e4:6e:34:bd:37:d3:64:
2d:f8:08:01:4d:db:02:cd:6f:25:3c:7e:64:21:9d:90:b6:bc:
3d:39:bd:f2:b9:67:1e:2f:c9:db:02:47:fd:69:c9:74:ca:9b:
5e:1b:07:24:83:d9:05:d1:ad:20:b5:7d:3e:43:6d:e5:95:a2:
eb:48:73:0a:03:3a:20:e5:80:bb:80:6d:45:0d:fe:6f:1e:56:
ed:04:c7:08:af:83:e8:af:eb:ef:f9:4e:d3:00:9d:c6:69:eb:
9e:36:f8:a1:41:e7:8e:d2:0f:03:96:3a:35:fb:5c:97:e4:bf:
70:6a:c4:89:c7:45:70:87:08:b9:0b:e4:2d:f0:a2:b7:0c:3e:
eb:21:b3:2a:3a:5c:60:6a:3d:df:e3:6e:97:aa:a3:8a:23:83:
04:97:96:6e:13:ff:cc:67:d1:2c:3b:b8:2f:cf:ee:95:fb:b4:
a8:c1:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:06 2026 by rpki-client