Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier: AAIxDbk0a6xhlH+ISLPljLUIKNRqmtFKHOFtIBow6FU=
Subject key identifier: BE:F6:7D:4E:0A:77:CE:9C:5E:44:A4:9F:54:B1:5B:BE:4C:EE:74:2D
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial: 019D386567C4DC6397FA3DB1BED915B654B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number: 09DF
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: tTQ/KBMCNVcqEk0uu0inDI1AZUQTtSAsIU1Va1AAFvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:67:c4:dc:63:97:fa:3d:b1:be:d9:15:b6:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=bef67d4e0a77ce9c5e44a49f54b15bbe4cee742d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:69:e7:7b:b9:47:94:2a:2c:c0:4c:c8:29:
0e:59:10:da:f1:35:3b:99:5d:07:f9:e1:3d:09:ec:
5d:99:a5:fd:45:a6:7e:40:3d:8e:af:30:ef:41:e4:
a1:6f:98:60:fd:bc:f0:dd:4c:a9:af:1f:7b:56:0e:
be:2c:bc:d4:f8:bc:54:60:c3:50:07:37:48:3c:23:
3a:64:b7:e8:51:e1:fa:0b:33:aa:ce:79:33:01:f5:
40:1b:2f:fc:ea:b9:b6:72:f0:fd:0b:32:21:e0:7a:
de:4c:e7:79:93:1d:1c:9f:c8:b5:2f:66:49:b1:3e:
c9:6c:cf:65:0c:49:b7:47:fb:b1:de:d6:62:59:99:
71:c6:ce:f7:4c:42:06:91:4e:ae:5a:52:ab:98:53:
07:46:10:80:d1:9f:f5:b4:2e:1e:d0:17:fe:e5:4c:
0f:fb:67:ce:9a:ae:4b:49:ba:c9:a6:b9:69:d1:67:
96:d2:d4:fc:dc:53:b9:c2:65:71:16:b7:8e:af:b6:
9d:da:9b:92:73:ee:5a:2d:bf:af:57:c8:a4:10:6a:
3d:02:33:19:2f:2b:52:a5:0d:da:1f:04:72:2c:02:
4a:ca:97:c1:9c:83:fa:ac:eb:77:69:3b:e2:70:82:
f4:6a:c9:b6:76:61:5a:ac:69:56:1a:b5:1b:ae:e3:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:7D:4E:0A:77:CE:9C:5E:44:A4:9F:54:B1:5B:BE:4C:EE:74:2D
X509v3 Authority Key Identifier:
keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:03:74:d0:95:f3:03:91:3c:ba:a9:b4:0a:a7:d4:07:0b:37:
b1:32:c3:e4:90:8c:61:73:1a:35:74:5d:17:84:b9:85:ff:51:
81:96:60:3b:13:62:ae:f1:67:eb:80:3c:76:5c:18:d9:9b:44:
9b:69:a8:37:01:e0:fe:bc:87:1e:6f:d9:d9:c1:a8:df:fb:5f:
ab:ca:1e:92:eb:2e:99:e7:e2:95:de:3c:14:6c:d5:be:af:cd:
69:62:c0:22:c2:7b:9a:c4:1f:c5:a4:19:25:ba:2f:3c:07:d7:
66:62:b4:9b:bb:96:d0:29:d9:73:1d:35:2a:0b:a2:51:31:ce:
e8:73:bb:bf:c0:ab:ef:3d:f0:84:d9:cf:42:fd:9a:ba:39:aa:
95:bc:11:c9:22:9c:2d:10:d9:64:43:64:dd:b6:16:70:6e:0a:
ed:c9:f4:a4:40:21:b1:bf:5b:b6:96:fa:71:7d:72:97:0d:d0:
5a:a1:93:eb:23:9c:f0:17:09:fd:e0:0a:fc:a1:80:15:3f:ec:
7d:88:b6:a4:8b:23:08:6b:38:a5:a9:43:d6:ff:1b:2d:75:f5:
ab:13:b2:f3:89:fc:16:25:d9:65:c8:70:b1:8d:63:90:a2:c6:
9c:24:a7:ba:33:22:2d:44:58:12:1c:63:0d:c8:d7:9b:ed:ef:
09:53:49:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWfE3GOX+j2xvtkVtlSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYzU5ZWRhYjk4ZWZiMGNkMzc2NzYwZjQwNjllNGM2OGI4
YmRhMjAwHhcNMjYwMzI5MDcwMTAyWhcNMjYwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EyhiZWY2N2Q0ZTBhNzdjZTljNWU0NGE0OWY1NGIxNWJiZTRjZWU3NDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiNp53u5R5QqLMBMyCkOWRDa8TU7
mV0H+eE9CexdmaX9RaZ+QD2OrzDvQeShb5hg/bzw3Uyprx97Vg6+LLzU+LxUYMNQ
BzdIPCM6ZLfoUeH6CzOqznkzAfVAGy/86rm2cvD9CzIh4HreTOd5kx0cn8i1L2ZJ
sT7JbM9lDEm3R/ux3tZiWZlxxs73TEIGkU6uWlKrmFMHRhCA0Z/1tC4e0Bf+5UwP
+2fOmq5LSbrJprlp0WeW0tT83FO5wmVxFreOr7ad2puSc+5aLb+vV8ikEGo9AjMZ
LytSpQ3aHwRyLAJKypfBnIP6rOt3aTvicIL0asm2dmFarGlWGrUbruP3+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL72fU4Kd86cXkSkn1SxW75M7nQtMB8GA1UdIwQY
MBaAFHHFntq5jvsM03Z2D0Bp5MaLi9ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTct
NzdlY2JiYjRmN2Q4LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTctNzdlY2JiYjRmN2Q4
LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwN00JXz
A5E8uqm0CqfUBws3sTLD5JCMYXMaNXRdF4S5hf9RgZZgOxNirvFn64A8dlwY2ZtE
m2moNwHg/ryHHm/Z2cGo3/tfq8oekusumefild48FGzVvq/NaWLAIsJ7msQfxaQZ
JbovPAfXZmK0m7uW0CnZcx01KguiUTHO6HO7v8Cr7z3whNnPQv2aujmqlbwRySKc
LRDZZENk3bYWcG4K7cn0pEAhsb9btpb6cX1ylw3QWqGT6yOc8BcJ/eAK/KGAFT/s
fYi2pIsjCGs4palD1v8bLXX1qxOy84n8FiXZZchwsY1jkKLGnCSnujMiLURYEhxj
DcjXm+3vCVNJmw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:14 2026 by rpki-client