Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: cbVd+xTxozoaXpbR7KArZfZKZM9Eh6eBxjxf96zXsV0=
Subject key identifier: 0C:22:AE:56:E0:0F:3F:5F:E0:68:98:97:6C:C3:BD:63:4D:30:CE:4C
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 019CAAC6939E5D5E96E4263CC061B7E03B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 152E
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: wzYRI2uAMFONshReuuDWKy0QmMBwvrWb8/YQ3rrmGJw=)
2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:93:9e:5d:5e:96:e4:26:3c:c0:61:b7:e0:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=0c22ae56e00f3f5fe06898976cc3bd634d30ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:75:5c:0c:0a:e0:b6:38:de:dd:64:32:1e:
36:1f:12:a9:03:24:7c:03:a3:68:01:ba:4b:5c:1e:
61:73:2f:af:ea:d3:e7:e1:01:cb:55:34:cf:7e:ad:
e1:33:f0:ad:11:fd:ca:a3:be:18:9a:9a:d7:8c:59:
9f:c9:bf:68:27:65:b1:68:5e:9c:ed:b9:1d:b3:5a:
8d:48:f4:ec:eb:e6:d7:8a:76:0d:c4:9d:a9:71:13:
22:dd:58:43:51:15:f7:96:20:02:85:1a:7f:c6:1a:
40:60:6d:45:67:ab:22:c9:df:63:f3:00:09:1c:57:
12:a6:f4:06:f1:94:88:ed:c2:ed:a2:87:97:76:1b:
18:d0:83:be:cf:ff:a1:8e:f1:80:f9:8b:21:33:d3:
42:2a:21:ef:28:69:fb:fb:44:52:c8:9e:7f:37:b2:
60:fe:da:4e:71:60:7d:81:a9:07:dd:c2:3a:55:76:
95:75:16:af:f8:42:3d:29:0b:96:e8:ec:8d:b2:e2:
86:81:7c:8c:73:9c:14:0f:c5:1d:f8:9d:9c:4f:b4:
b6:4a:0c:f6:7d:57:51:1f:08:ea:cc:dd:2c:8c:e3:
d1:41:f8:b0:88:10:3d:d6:ea:e5:ea:72:dc:d3:a0:
c5:d5:8b:c8:96:23:51:d7:c7:e4:62:bc:85:04:a8:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:AE:56:E0:0F:3F:5F:E0:68:98:97:6C:C3:BD:63:4D:30:CE:4C
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4b:af:35:24:b8:d3:22:b3:b3:ab:54:29:42:14:db:4b:cb:
e8:13:20:73:16:a5:6a:55:99:bc:23:53:f4:68:d8:f0:10:d1:
10:f3:19:0b:05:84:c2:2c:38:51:70:ed:54:2c:63:1f:6c:2a:
3e:67:cf:8a:32:69:06:f9:84:fd:6a:0d:b8:05:e5:f1:94:e6:
07:e1:3a:b8:80:52:71:e7:89:33:d4:ca:71:fd:2e:cc:25:b9:
06:88:c7:0a:35:b3:34:78:89:09:01:23:06:9b:f7:d4:07:3b:
1c:f0:72:82:d3:6c:d7:21:9f:b4:03:3e:52:37:0d:a4:15:9e:
d1:03:d1:1c:98:28:0e:10:3f:ae:73:60:21:de:e1:26:81:92:
e9:fc:41:25:61:3a:5c:7f:91:87:ce:61:b9:85:c5:cf:e3:3f:
a4:16:6c:e6:07:3a:35:74:4d:59:e1:78:ec:b4:1b:7c:05:70:
3c:b3:b3:ee:70:69:8d:bf:46:19:a8:78:80:ba:12:88:10:6a:
03:e4:52:0f:a7:c3:f4:6b:22:1b:bf:c3:ca:06:ec:32:f0:8d:
a2:55:0b:cb:09:20:d7:c3:6d:7b:b2:79:15:51:18:93:14:68:
d8:a4:a0:42:bc:f8:b7:0c:28:36:93:0b:7a:2e:ea:0a:e4:08:
43:cc:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:15 2026 by rpki-client