Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: kfJ8XHwiYKz3cMCGlAur380tAurUsoE7F4w7QTgSYeg=
Subject key identifier: 3E:F4:CA:51:00:1C:49:B8:81:54:D5:53:B2:55:18:72:F9:7C:49:AB
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019DA41CC8D012A02CD7D5B04D324436FC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 10E7
Signing time: Sun 19 Apr 2026 05:00:42 +0000
Manifest this update: Sun 19 Apr 2026 05:00:42 +0000
Manifest next update: Mon 20 Apr 2026 05:00:42 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: /rjWKRQixkMKq7JjmmAlIKpyY1/z4FPZt3D0P0XSsf0=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c8:d0:12:a0:2c:d7:d5:b0:4d:32:44:36:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Apr 19 05:00:42 2026 GMT
Not After : Apr 20 05:00:42 2026 GMT
Subject: CN=3ef4ca51001c49b88154d553b2551872f97c49ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:dd:42:fc:34:59:ef:b6:21:d4:97:11:7a:
e0:68:e6:d0:7e:b0:54:71:40:93:cc:08:17:aa:1d:
c8:30:39:bd:5f:2d:b7:6e:5b:10:df:aa:66:71:6f:
e7:8e:e2:8f:5f:c4:47:10:9e:ac:72:6d:68:14:85:
5c:f0:df:81:9d:f8:2c:94:b4:b3:e7:d0:c6:af:89:
10:55:7c:03:d0:b2:c0:d6:bd:eb:49:be:2f:f4:b6:
20:88:98:e7:34:3b:9b:96:3f:47:ef:15:c7:2b:28:
ef:b2:41:03:7e:b8:bd:b6:9d:15:ab:34:a6:ea:b2:
a3:7a:45:dd:7b:7f:b1:04:f6:8b:d8:c4:d5:01:f4:
88:6a:df:53:84:e2:78:be:37:c2:2e:81:1a:0f:33:
cd:71:8e:7d:8d:78:97:d3:6c:b8:b0:82:38:97:f2:
89:27:a8:ba:b0:1c:4c:82:d0:b4:7f:5a:d3:58:ad:
0c:51:56:6d:ff:9d:37:77:c6:47:b0:49:44:80:33:
c3:d3:c1:cf:d5:8b:c6:2a:ec:2e:0a:da:82:9c:0e:
64:f7:49:3e:21:d6:ec:65:d7:b0:91:40:5f:d8:6d:
48:d3:95:1d:96:97:df:42:9f:b5:cc:f4:fa:05:07:
89:47:ef:d1:de:9a:f1:4d:54:b7:78:d8:37:48:ad:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:CA:51:00:1C:49:B8:81:54:D5:53:B2:55:18:72:F9:7C:49:AB
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:0c:c5:a8:fd:6e:62:34:07:97:1c:49:e4:7a:f9:a5:94:
14:0e:a6:e2:fd:b4:1c:e4:1f:2f:08:ea:79:45:5c:91:63:8c:
5d:e1:5f:22:fe:7c:7e:f2:32:36:ab:42:71:e0:52:20:13:0f:
3a:60:54:31:68:b5:46:db:f5:d7:26:c5:3d:21:54:7a:db:7b:
ae:eb:19:18:80:1c:5e:19:79:43:c3:12:84:d2:59:84:39:ac:
0c:3c:2d:f4:e2:05:23:d4:04:4d:26:95:84:97:eb:d6:a9:cb:
87:80:c6:5a:ea:b5:a9:16:01:7e:36:0b:02:4c:b5:38:a5:18:
11:43:45:d8:a4:8f:29:6d:8e:31:5d:e2:55:c5:5a:9e:ca:09:
bf:6c:b1:40:49:e8:db:83:a6:8d:de:64:ac:d6:6f:6c:91:68:
5f:36:88:6f:a7:2b:b6:c1:50:f8:d4:82:a8:27:bf:be:30:4c:
91:fb:d9:b5:fa:35:4a:e7:93:19:76:d0:b5:bc:64:7e:d0:92:
a8:9a:13:59:91:bd:48:22:5c:28:28:cb:91:4a:79:d2:76:e1:
4a:1b:d9:26:84:b6:d2:ef:40:ea:3b:ba:8b:93:6e:a6:d5:c6:
c4:ec:bc:ad:a1:04:5c:fa:51:8a:fd:26:65:96:4c:49:58:1f:
2f:41:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:40 2026 by rpki-client