Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File: CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier: 7gH1LBPlxkeWncphbonXSq2iLz0amvDQ1Sb1UmfliZs=
Subject key identifier: 85:4C:9A:4C:05:B7:C2:82:23:C8:49:63:7A:87:F1:2E:E0:47:8F:B9
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial: 019D16EBAAB9061370A73FD243C5D5C93C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number: 1881
Signing time: Sun 22 Mar 2026 19:00:36 +0000
Manifest this update: Sun 22 Mar 2026 19:00:36 +0000
Manifest next update: Mon 23 Mar 2026 19:00:36 +0000
Files and hashes: 1: 0v42-yuEzObgwInMahxldfZmrHg.roa (hash: spJCO+lQpC/r9TzdhrE3WFFw5uBpamaSo1GrCaKj4Fg=)
2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: m9BDRg0rDvHQUp8syYMXcm6fXprtz4XUQzl/SWUjnZI=)
3: OIwvLVG14Er178GMxwrh7ig3kjQ.roa (hash: rrrKwVzY5LibLzq9ZeJSCRsjD6gQ33lRLKMuzjoUt44=)
4: gD3TW1PF3JAEZdLvATbmgeJVunI.roa (hash: t6EoCKHR2D/E7ctxbU4crKBTLrkD21MXceMX9ltMJKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:eb:aa:b9:06:13:70:a7:3f:d2:43:c5:d5:c9:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Validity
Not Before: Mar 22 19:00:36 2026 GMT
Not After : Mar 23 19:00:36 2026 GMT
Subject: CN=854c9a4c05b7c28223c849637a87f12ee0478fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:be:91:21:c2:00:bc:62:1e:05:ef:d8:8d:
66:84:61:ee:1c:54:7d:73:36:f8:60:f9:38:33:fe:
03:27:92:e3:63:e2:d2:ad:ef:59:b1:18:a0:7a:14:
96:dc:e1:2d:65:a4:0c:6f:4b:f0:ba:5b:57:e6:d3:
25:c1:ac:34:bf:fc:f2:67:83:63:a6:26:c3:e6:42:
a9:cc:4c:c6:ea:dc:3d:16:25:9a:f5:6f:5d:22:85:
48:bd:8c:5e:5b:8a:88:77:f6:fa:82:0a:39:d1:2d:
c2:00:4e:81:5c:6b:16:df:f8:4d:3e:83:9d:e7:57:
d6:2b:71:c8:f1:90:29:cb:85:d6:74:2a:86:dc:f3:
94:56:16:a3:54:a2:34:3e:34:ac:d2:28:22:67:16:
de:2a:17:42:ac:40:48:00:6f:98:ee:2a:8c:73:3d:
64:e5:22:5d:ff:fd:8e:44:05:fd:3d:75:9f:f0:a1:
83:1c:3a:38:d9:2f:bb:de:a7:28:41:6e:9b:f7:4a:
bc:c8:7d:43:96:2e:e2:5d:c0:31:57:82:32:b5:f3:
0a:38:af:7e:47:46:d8:29:fd:03:b3:84:f4:f9:b6:
a9:a7:8e:55:43:5a:22:92:92:70:3f:fe:46:ae:c1:
da:32:82:47:27:a7:30:90:e3:1b:18:b1:15:96:7e:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:9A:4C:05:B7:C2:82:23:C8:49:63:7A:87:F1:2E:E0:47:8F:B9
X509v3 Authority Key Identifier:
keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ce:4c:d5:af:d4:a0:3e:ab:7d:76:49:d2:fb:ed:c1:2a:0e:
7f:7d:6b:5a:ea:a0:e5:ec:1b:d6:a0:a3:09:3b:b3:d1:17:9c:
7c:23:0a:dc:b3:9f:f5:70:21:ec:92:a2:9a:42:72:ca:48:9f:
99:35:8e:a5:3b:25:6d:64:6b:b4:18:85:af:57:7f:0c:07:2d:
51:90:a2:df:6a:17:7f:dc:7d:ee:88:a6:4c:52:d0:d4:d7:9d:
39:4f:2a:6f:bb:42:23:b8:18:ee:c0:9d:b1:0d:b9:a9:e4:e6:
a9:6d:ed:c3:a6:13:05:0d:2c:84:19:0a:c7:76:71:d8:51:4e:
41:0b:1e:c8:b7:7a:77:92:12:75:ee:b9:b1:8e:eb:6a:b8:6e:
cf:af:a5:31:d4:cb:7e:82:8d:57:bd:11:26:55:36:e9:fc:b6:
d5:c6:90:b7:ef:67:d3:33:e8:f3:79:0c:cf:b6:61:76:f3:23:
b3:6a:34:7e:53:d7:c8:41:44:19:02:75:5c:ba:8b:64:b2:45:
0e:49:d2:bd:8a:6c:9d:38:80:83:98:fd:70:41:21:15:eb:f9:
6f:12:1a:f2:b0:ca:1b:67:c9:49:5a:2b:cb:ae:7d:2c:1e:aa:
44:b8:7e:ca:11:fc:02:58:a8:79:6f:46:b2:f5:54:5f:f3:2b:
03:78:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 21:54:55 2026 by rpki-client