Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: hk8uFK8A9pHS0tNlHVciZ18YmoYrfyn1k9HgDR3IVuw=
Subject key identifier: B8:E3:2D:07:58:E6:7A:47:AF:EF:A2:AF:04:7F:55:91:C9:35:F8:35
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 019D9A3E7BB2424AF3A9A48614A728DAA8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 15AA
Signing time: Fri 17 Apr 2026 07:01:19 +0000
Manifest this update: Fri 17 Apr 2026 07:01:19 +0000
Manifest next update: Sat 18 Apr 2026 07:01:19 +0000
Files and hashes: 1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: IcQB6FuoNrPPecNEqYzsnLRYEFBEWHoUBqCmUjhS43M=)
2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:7b:b2:42:4a:f3:a9:a4:86:14:a7:28:da:a8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Apr 17 07:01:19 2026 GMT
Not After : Apr 18 07:01:19 2026 GMT
Subject: CN=b8e32d0758e67a47afefa2af047f5591c935f835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:ca:f3:03:50:09:94:4b:ea:f4:4e:da:eb:
8e:fd:b8:f2:2b:0e:06:b0:4f:70:24:08:e2:08:be:
e2:c9:82:f8:e6:c6:72:36:5d:c6:a4:4c:dd:1b:99:
16:1b:42:2d:1a:52:9b:48:68:24:d9:58:cb:66:08:
0c:59:d9:5f:25:52:aa:be:fd:a6:e9:2b:f4:0b:49:
b5:a6:a8:00:d3:0f:1a:68:9b:96:da:cc:18:2f:3f:
3d:4a:fe:29:64:0d:0c:5a:63:da:e7:68:45:ef:12:
4b:1e:7f:cd:f6:54:f5:8d:ca:75:e4:ab:3e:f1:c5:
75:46:47:a9:a1:69:37:09:eb:c4:43:a2:03:98:bb:
4f:83:6b:dd:ea:59:eb:36:12:eb:a0:e5:f7:f1:21:
af:69:d5:a8:18:19:39:6d:c5:f5:57:fb:e2:5a:18:
04:74:4f:33:80:41:a8:6d:94:a4:ef:67:9f:06:b6:
55:3d:ba:51:1b:81:e0:c5:26:ab:2f:89:60:50:72:
51:3b:69:59:46:40:74:4d:9a:be:77:b2:4c:ae:6f:
c6:5d:e0:6a:a4:b9:21:89:85:ff:d8:cf:b3:8b:27:
8f:25:b3:03:e8:cd:6e:44:ab:7d:99:46:ed:fa:c7:
da:20:03:48:1d:88:4e:1c:e1:90:cc:a9:a5:8a:4c:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:2D:07:58:E6:7A:47:AF:EF:A2:AF:04:7F:55:91:C9:35:F8:35
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f6:1e:ac:6a:81:a9:2d:30:f9:11:19:87:59:a9:35:2e:6c:
c3:fb:e2:64:91:70:99:ae:71:26:1a:f5:be:75:81:34:0c:d1:
b0:3e:7d:9b:5a:e7:6d:95:0f:56:cb:33:f3:4b:7e:c0:ac:96:
9d:2a:c6:85:ee:7c:42:eb:f0:57:26:15:1d:bc:e6:d1:81:46:
5c:c9:80:b6:8c:55:41:b2:6a:5d:4f:ac:46:24:1e:c5:bb:8b:
d3:ab:2c:ce:ff:4d:7a:5a:62:31:b6:c2:49:f6:5a:4a:f9:47:
d3:16:35:23:8f:ca:dd:f6:b5:3e:ac:e6:b3:bf:8d:e7:a6:5e:
4e:9b:2c:4a:6b:a1:e2:7b:25:23:c7:e4:14:1e:2e:49:c1:46:
c1:e5:ce:3b:33:1d:b9:69:ab:19:f6:93:88:c8:a9:f3:59:d9:
2f:e8:51:e7:ef:eb:3d:d4:44:ff:5f:40:07:6d:87:06:65:38:
82:e1:c8:c4:17:1f:26:0e:a1:2e:1f:f6:4d:6a:d2:41:19:c0:
6d:ef:23:7c:5f:31:1e:6e:bb:75:df:19:70:0d:ab:20:30:ee:
e8:68:a2:a6:78:bc:a5:3e:df:50:e6:64:24:d8:9f:ba:fa:cf:
c7:8f:7c:94:c0:bd:7a:14:46:82:ac:83:eb:a8:a4:6e:89:5e:
4b:f6:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:41 2026 by rpki-client