Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: oIuIesEjjtPVxw3rumEOySz0EyyVMdTsWMOpwJPt6Xk=
Subject key identifier: CC:C0:7A:67:F5:3D:3F:C2:13:EF:30:21:5F:24:A5:D0:7C:99:C3:0B
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019CCAF62F115F648E2D7E90E59DCF70EAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 09CA
Signing time: Sun 08 Mar 2026 01:00:57 +0000
Manifest this update: Sun 08 Mar 2026 01:00:57 +0000
Manifest next update: Mon 09 Mar 2026 01:00:57 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: wehGkP7WE9m6xlMdmm2G+Bz1ZPy1tjiA+K79x9HMdyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:f6:2f:11:5f:64:8e:2d:7e:90:e5:9d:cf:70:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Mar 8 01:00:57 2026 GMT
Not After : Mar 9 01:00:57 2026 GMT
Subject: CN=ccc07a67f53d3fc213ef30215f24a5d07c99c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:aa:dc:76:0f:8e:91:d5:8e:54:ad:d4:e1:
a4:7c:80:41:b5:90:45:ef:84:6c:88:93:61:e3:a4:
3d:d9:66:f9:b9:d6:47:16:c6:8f:01:44:e0:44:03:
20:76:7e:09:0e:6b:31:b5:c3:17:2e:7e:d6:43:1a:
7b:fd:9b:b7:a0:27:bc:45:2c:c9:dc:39:54:ab:a5:
38:cb:49:5a:cc:1e:8f:e1:0a:a8:5b:1c:31:f1:03:
be:a0:99:6e:f9:fb:a7:0b:ce:f9:24:66:61:ab:59:
a3:8d:f4:2d:f7:8d:b9:38:f0:6c:d8:db:80:1b:73:
76:ef:85:1f:20:14:70:b4:90:b9:6c:8f:8c:fc:5a:
b2:09:38:61:c6:03:c2:88:51:20:2c:2d:96:31:af:
c0:0d:c3:7d:37:92:c1:6e:6d:76:80:8a:57:ce:e4:
76:ce:79:32:8e:9f:b9:82:83:2a:59:96:d9:65:de:
a0:c9:04:d0:01:7f:ee:fc:76:c5:61:42:0e:3d:9c:
d4:de:e5:e3:40:d1:90:cc:6a:e8:04:bb:a5:23:4f:
8e:8b:90:90:63:6d:ab:3a:4a:1e:a5:6e:07:3c:9c:
00:96:ad:d2:84:7a:b8:91:e9:0e:d0:33:75:2a:cd:
51:61:47:2e:af:53:8d:18:8f:4d:df:7b:31:5a:46:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:7A:67:F5:3D:3F:C2:13:EF:30:21:5F:24:A5:D0:7C:99:C3:0B
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f7:45:36:15:75:51:c9:11:15:b2:46:9b:1d:5d:e7:1f:b4:
03:49:2e:63:48:7e:0f:5c:5a:d1:f5:fb:29:34:d6:a9:11:dc:
6e:8e:07:9c:3f:ca:f1:bf:93:11:90:1c:28:51:8c:2a:5a:b2:
f5:a2:69:2e:b6:e5:69:6e:45:9e:39:c5:bf:88:28:f9:2f:97:
a1:05:2e:2c:46:07:fc:53:45:3c:da:00:90:dc:af:93:69:5b:
96:4c:8e:76:0c:01:00:61:80:10:41:ec:bc:f7:5e:db:2a:59:
39:0f:4c:a1:5f:fb:a5:b4:55:52:fa:1e:c6:9a:07:b9:2b:e2:
39:d6:19:d1:d3:dc:da:06:24:60:c7:da:0d:07:de:d8:5d:91:
92:4c:87:e1:b2:ef:b7:2f:a2:5c:1a:09:de:53:ef:c7:5a:1d:
83:65:25:09:f7:61:56:40:f2:c8:7e:95:56:73:79:33:1e:37:
f5:17:9f:83:94:bb:39:1d:48:08:44:3b:7d:e0:7e:c4:1f:58:
bd:7e:da:8a:f4:48:34:b1:ee:cd:e2:5d:50:df:a2:c0:b8:a9:
59:81:76:6d:08:37:fd:dd:93:d1:84:a9:92:37:77:74:25:e4:
3e:86:fc:10:a7:d1:e9:d3:35:dc:b0:1c:12:37:dd:d8:51:d1:
69:56:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:38:03 2026 by rpki-client