Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: 7m73Eq7G7q2b0dHdozVaauLkQcOlipHvFeBcRdgPnX0=
Subject key identifier: 1F:AD:FF:9C:9B:7D:86:ED:FE:9E:3E:06:DC:47:45:9E:22:9D:41:65
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 019CAAFD24C29F2249AB522DEACD06D92993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 1066
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: 1jO_MX-Sw_SWrVNjj0SJGriKWso.roa (hash: +1Ob4GS5KDjiEWqocBShAx8xfU9H3FA5ublgst6nteY=)
2: 7aBM0h9dPhAyCGUi4UC0KOUaN6k.roa (hash: A6f4ThaBnwORbpYnfvo9LMhkIymfzCboRFjkjjXbkTQ=)
3: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: aGCIBkZ9jeN63SbIRVkB2RLAAD9Uuo2Zd+D/xyJMeN0=)
4: Hqz5Gerx__tFj2L3So2G4XVB1Nk.roa (hash: uM9EsZZ8E2g49L46zhUinx0urR3LGpmOX04s8ebZGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:24:c2:9f:22:49:ab:52:2d:ea:cd:06:d9:29:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=1fadff9c9b7d86edfe9e3e06dc47459e229d4165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:c7:c6:8e:fe:68:b8:22:97:3b:ab:03:0d:
9c:f6:84:12:fa:24:39:72:8d:25:21:88:f8:e3:d4:
7c:93:e5:f2:0d:70:9a:4c:3b:74:ed:b0:99:8f:1b:
24:b5:6f:8b:53:21:65:c3:75:74:09:f8:2b:87:12:
e1:b8:02:44:f1:f5:9a:8e:16:cf:6b:fc:56:75:3a:
ba:3d:f9:c0:8d:2b:93:a2:1a:89:40:d0:b2:e7:ec:
57:e6:06:93:c3:53:bc:f7:50:96:79:79:f5:f0:f7:
5e:8d:f4:24:20:7a:07:40:6c:32:24:37:27:ba:ec:
7c:46:73:d8:bb:c0:9e:82:65:4e:8e:44:53:e9:f9:
9b:34:30:b0:d5:95:27:80:16:14:a2:f5:2f:c5:43:
ef:88:21:f4:b9:bb:81:73:f1:5c:a5:c5:c2:97:de:
52:43:e5:45:0a:b9:11:7d:ef:15:0a:8f:fd:7d:73:
3b:84:eb:31:12:2b:a9:5e:d6:d1:f8:83:a6:91:4a:
a1:cf:80:e6:34:59:25:ce:fb:84:40:e0:6b:a6:2a:
5a:48:bd:42:78:37:16:59:e7:71:89:95:50:77:b0:
42:6d:84:f7:19:ad:4a:32:e1:4b:5d:97:27:39:c0:
63:b0:56:fc:75:84:87:ce:e9:ec:e5:16:c0:55:71:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:FF:9C:9B:7D:86:ED:FE:9E:3E:06:DC:47:45:9E:22:9D:41:65
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:73:d3:a8:fb:d3:a8:71:ef:b3:f4:ad:04:cb:0d:aa:f3:
f2:bd:f5:a8:a9:a8:f8:cb:fa:81:af:1f:18:d4:a4:20:c8:a8:
ce:00:d7:ff:fd:5e:39:14:c8:53:0f:ad:04:78:8b:a3:72:e0:
87:01:54:f2:41:5e:7e:8c:61:16:6a:ce:25:b7:21:80:75:4b:
2f:b0:f6:14:44:c3:eb:29:d6:c3:7b:f2:5d:15:51:dc:b9:1c:
16:e4:3e:8c:80:7f:d9:86:6e:f2:36:c7:f3:7a:5e:0c:e3:c5:
d1:25:3d:2c:8a:a6:2b:71:03:d4:12:dd:84:8a:ca:2d:e5:7f:
31:40:58:8e:33:e5:e7:b3:c0:fa:92:50:e6:d8:18:95:b8:3d:
f8:ce:a3:9d:87:2c:56:82:88:41:b6:d0:35:6c:46:a3:67:c5:
11:18:60:79:2b:99:b7:0c:2f:cc:14:c2:8b:b1:c5:c0:e5:7a:
21:31:e6:65:ac:f6:cf:70:39:b2:7d:96:26:0f:82:19:f6:38:
a6:83:78:1f:bf:df:d4:30:2c:e2:de:fd:f7:10:57:78:4f:28:
b2:6f:44:0c:e7:ac:4a:8b:a4:db:5c:da:e9:ef:be:8a:4c:b3:
79:c9:70:43:db:92:86:67:45:c9:f3:30:21:36:54:43:b0:b9:
4e:6f:52:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/STCnyJJq1It6s0G2SmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjYwMzAxMjAwMDQyWhcNMjYwMzAyMjAwMDQyWjAzMTEwLwYDVQQD
EygxZmFkZmY5YzliN2Q4NmVkZmU5ZTNlMDZkYzQ3NDU5ZTIyOWQ0MTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXfHxo7+aLgilzurAw2c9oQS+iQ5
co0lIYj449R8k+XyDXCaTDt07bCZjxsktW+LUyFlw3V0CfgrhxLhuAJE8fWajhbP
a/xWdTq6PfnAjSuTohqJQNCy5+xX5gaTw1O891CWeXn18PdejfQkIHoHQGwyJDcn
uux8RnPYu8CegmVOjkRT6fmbNDCw1ZUngBYUovUvxUPviCH0ubuBc/FcpcXCl95S
Q+VFCrkRfe8VCo/9fXM7hOsxEiupXtbR+IOmkUqhz4DmNFklzvuEQOBrpipaSL1C
eDcWWedxiZVQd7BCbYT3Ga1KMuFLXZcnOcBjsFb8dYSHzuns5RbAVXGW9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+t/5ybfYbt/p4+BtxHRZ4inUFlMB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeRz06j7
06hx77P0rQTLDarz8r31qKmo+Mv6ga8fGNSkIMiozgDX//1eORTIUw+tBHiLo3Lg
hwFU8kFefoxhFmrOJbchgHVLL7D2FETD6ynWw3vyXRVR3LkcFuQ+jIB/2YZu8jbH
83peDOPF0SU9LIqmK3ED1BLdhIrKLeV/MUBYjjPl57PA+pJQ5tgYlbg9+M6jnYcs
VoKIQbbQNWxGo2fFERhgeSuZtwwvzBTCi7HFwOV6ITHmZaz2z3A5sn2WJg+CGfY4
poN4H7/f1DAs4t799xBXeE8osm9EDOesSouk21za6e++ikyzeclwQ9uShmdFyfMw
ITZUQ7C5Tm9S/w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:18 2026 by rpki-client