Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier: chkNhJd91jPuBnKLvdjeejhV2bx2Mz95GM43LymiazM=
Subject key identifier: F6:B9:36:B1:66:70:3D:49:78:A8:FC:01:41:97:B3:B8:9E:7A:A3:D8
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 019CAD228CCDB759E445668B988EE96F9523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:00:48 +0000
Manifest this update: Mon 02 Mar 2026 06:00:48 +0000
Manifest next update: Tue 03 Mar 2026 06:00:48 +0000
Files and hashes: 1: 8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa (hash: Dqp4TUGjySbwuRx7Gm8p9zQiCkfikYnsg1NWXjq33+I=)
2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: InXaYtq95Zv9Xmuv0OKXzuqSexHExSOC6Nhnja8AGQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:8c:cd:b7:59:e4:45:66:8b:98:8e:e9:6f:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Mar 2 06:00:48 2026 GMT
Not After : Mar 3 06:00:48 2026 GMT
Subject: CN=f6b936b166703d4978a8fc014197b3b89e7aa3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:fc:9d:04:8a:c3:00:f3:a8:3e:9c:e8:78:
e2:ae:88:4c:c2:b6:ca:e6:2e:7a:74:4e:03:86:f8:
64:87:16:af:99:e8:76:e7:86:24:61:55:50:6a:c8:
84:03:c2:82:de:0a:ad:ae:58:4c:53:6e:78:44:b9:
27:32:8b:27:77:48:90:1e:0d:29:78:6a:63:f7:2e:
ab:26:1b:33:6a:b6:f6:a1:54:26:43:d3:15:69:f3:
4f:d0:9b:48:16:98:f9:98:6d:54:74:3b:41:fc:80:
ff:72:18:67:f5:70:06:1f:d3:f7:40:c4:b3:e1:36:
01:03:2c:6b:92:a9:24:f4:b8:5b:54:15:3a:50:72:
a0:f1:60:57:fc:7e:74:1b:62:44:7d:c7:94:8c:23:
7d:60:2e:77:e8:10:3e:39:83:89:80:55:f6:48:03:
4a:05:35:40:57:f2:03:77:b1:74:34:d6:ea:91:ca:
2d:30:1b:65:44:c3:9f:8c:e9:38:f8:43:43:c1:e9:
67:3b:d5:ef:51:56:39:c6:b5:e5:74:8c:c7:8d:24:
d0:f9:ce:e1:ea:f5:ba:48:3f:69:f1:13:ae:6d:65:
b5:9f:05:f8:c0:33:2e:3b:03:08:57:35:4a:ca:f2:
69:cd:d9:62:d2:87:7f:21:76:3a:b3:0b:ee:96:01:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:36:B1:66:70:3D:49:78:A8:FC:01:41:97:B3:B8:9E:7A:A3:D8
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:49:ed:ef:f5:e3:3b:e3:31:3e:75:bc:31:98:c7:19:c6:06:
95:7c:06:03:75:fa:3f:72:a1:59:fb:42:41:44:a3:85:af:1c:
8e:04:e7:f1:0d:12:d4:c2:ab:ab:a3:49:60:ea:a1:e1:5d:40:
14:89:cf:e1:47:11:e4:d2:a9:5f:60:d4:c4:6c:6a:ea:6b:51:
31:18:cc:e2:d1:a4:88:1a:04:6c:e5:84:72:8d:cc:58:32:54:
bf:e3:68:d4:8f:14:05:4e:bf:04:4b:ee:81:4c:01:3d:c9:cd:
6f:f0:b8:f8:f6:4b:98:d4:2c:63:cb:ba:c1:03:c1:19:3f:8f:
bc:1d:b4:d9:4f:22:15:69:c2:74:e7:42:4d:14:bd:20:44:70:
6f:59:b9:ac:5a:c8:9e:6a:89:25:26:e2:00:e3:86:09:75:14:
98:a3:32:3c:f9:d8:12:f2:9f:9c:fc:d6:ae:63:d9:02:22:eb:
69:46:bf:bf:a6:d1:5b:69:39:e8:6e:8e:2c:ce:12:77:d0:64:
ac:59:de:1b:60:4b:c2:9e:60:86:0b:d0:1e:4c:69:47:43:ca:
93:64:6d:45:72:ba:c7:95:e9:a1:7d:71:99:e9:7c:84:9a:2d:
ab:ce:aa:50:f0:4b:d2:2e:a2:c4:6b:50:94:4c:d5:71:1c:38:
d3:f0:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:07 2026 by rpki-client