Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier: S6TbkdG43jltCGew/STO80IKGFid1WWIupZ8HEfyF9E=
Subject key identifier: BC:E2:30:86:53:55:1D:D5:3E:5F:CC:DA:11:19:53:95:CE:5C:19:9B
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 019D98BD3E7E66A830C782EF587B1BF47A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: 8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa (hash: Dqp4TUGjySbwuRx7Gm8p9zQiCkfikYnsg1NWXjq33+I=)
2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: GbRTkEtQ61ZYkdCRuwKhvXm+KjQ8BA5ZUPEbNRjGV+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3e:7e:66:a8:30:c7:82:ef:58:7b:1b:f4:7a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=bce2308653551dd53e5fccda11195395ce5c199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:e8:98:51:eb:ea:53:1d:54:f9:57:4a:d5:
63:fd:9d:d9:dc:f6:6a:7b:02:58:12:bc:df:69:f0:
1b:64:aa:c6:6b:40:7a:31:c2:b9:5b:74:b3:2c:b2:
95:dd:21:bd:a4:4a:4b:7b:83:72:c7:c3:fb:9b:de:
94:02:29:fc:35:12:9c:df:ba:7a:3b:ea:10:96:6d:
1f:9c:f6:80:99:46:b0:9f:5b:c1:df:28:ee:74:cd:
b0:a2:40:22:84:d6:8a:84:7f:e9:04:11:5a:4f:5d:
f4:2b:0a:08:66:71:4a:8e:3f:8b:b4:76:b9:88:9a:
44:74:fb:d2:c7:a7:3d:34:a4:6d:4a:a3:11:0d:12:
42:ec:e7:22:77:97:b5:77:77:6e:8e:59:9e:6e:af:
03:60:d2:d3:f4:74:c6:9c:c5:19:cf:83:99:76:08:
aa:3d:a8:7a:88:24:fd:5c:a1:45:44:27:c0:e0:51:
9e:2b:90:4f:e9:1d:e7:9b:b1:57:e0:5b:d7:0f:91:
ba:68:b3:d0:8e:ff:c5:14:59:ed:62:dc:58:5a:46:
2b:25:21:22:9f:db:05:ef:b0:da:51:17:94:a3:df:
fe:d4:58:29:27:7a:3b:1e:33:98:2f:4f:bd:2b:97:
cc:22:9d:1c:e7:f8:65:ae:5d:60:c6:71:b8:69:68:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E2:30:86:53:55:1D:D5:3E:5F:CC:DA:11:19:53:95:CE:5C:19:9B
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bd:52:21:b6:8a:a9:7f:68:86:9b:01:d9:c6:c0:35:c3:4d:
a1:dd:81:af:de:86:10:c6:2c:06:19:56:8e:63:70:18:77:b1:
3b:48:d0:9e:59:ee:51:be:3a:75:b0:45:bf:7d:49:07:2d:13:
7b:36:ab:a9:ea:f0:55:fd:f2:b7:c7:d9:85:72:3e:30:69:49:
73:27:d2:5b:4e:6d:e8:99:da:40:be:38:1b:ae:ad:55:7c:01:
3c:b3:0f:33:c5:da:74:97:17:f7:04:9c:27:08:ab:1a:7b:ba:
44:eb:e5:4b:79:f6:d9:aa:c0:62:23:3f:9d:58:67:7d:00:aa:
95:1e:73:c3:b9:32:2c:78:4d:00:d4:48:c7:be:f0:bc:b3:6b:
f3:f0:2e:1d:ec:8d:18:5d:8f:b0:7e:a3:55:41:b9:72:f1:c9:
a5:05:76:7f:94:e2:08:52:85:a3:95:83:f7:95:d4:00:70:b4:
ee:46:ec:5a:95:a6:b2:30:6e:4a:98:20:38:74:13:b1:94:88:
7c:d6:7e:d3:bd:00:18:4b:7f:d3:a9:71:38:c3:99:de:d8:1b:
34:b9:6a:cc:fa:3d:bd:d5:0a:ec:b0:09:01:9d:4b:01:0f:cc:
3c:89:48:9e:b9:b5:14:bd:d3:df:f9:35:92:7a:f0:dd:a9:cd:
e2:1b:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:33 2026 by rpki-client