Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: Hlf7po34i8Afcpv8QWh7iPiS7ONWkrRJQ8Nfkji2JbI=
Subject key identifier: 45:52:85:22:98:0D:1B:CF:BC:7A:D3:7F:8D:95:43:E8:0D:90:62:62
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019D39AE66471AC9E7931CDC62B9197FABDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 121B
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: erZjWZcx9TAPwgpJ3BV0n2M2zH8CU6ZrDY3J6KyHgwk=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:66:47:1a:c9:e7:93:1c:dc:62:b9:19:7f:ab:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=45528522980d1bcfbc7ad37f8d9543e80d906262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:82:c2:8a:1c:c6:95:ca:ea:ba:b0:be:7b:
23:f5:55:75:4c:32:7b:19:6d:56:5c:e0:eb:06:51:
76:69:63:5c:33:3b:8f:93:99:44:d5:6c:83:13:d8:
b9:ec:04:d9:48:ea:e2:47:5f:24:af:00:aa:34:2c:
d0:9c:9a:4f:85:55:a4:23:fe:a7:e6:e3:d4:38:da:
79:35:35:c1:32:bb:d7:63:8f:f0:38:7a:f7:b7:8a:
6c:ab:ee:82:52:07:c4:26:0f:23:d6:fb:8f:00:87:
34:98:af:a0:56:ba:e5:71:71:7d:99:76:28:d2:95:
f7:a9:d9:1b:c5:d5:30:67:c6:1d:0e:03:e0:56:d4:
10:24:5c:5f:6e:eb:ed:bc:dd:9c:95:8e:eb:60:28:
52:04:a3:87:d5:9e:bf:92:d2:51:6c:eb:6d:a2:17:
96:fa:dc:e1:d7:4b:87:15:0f:2f:9d:33:56:6f:6c:
7a:88:45:33:ed:59:e0:21:ba:05:06:a2:6d:b6:3e:
f4:be:e2:e2:24:20:74:21:8f:a8:e1:73:49:0e:f0:
a2:bc:6b:eb:15:59:ae:33:c3:51:0c:6a:9c:da:0b:
ba:f9:3d:d9:d0:62:62:d2:c3:25:7d:b1:f7:e4:38:
01:12:99:32:8d:95:ad:0e:cc:75:b0:8a:ab:41:f5:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:85:22:98:0D:1B:CF:BC:7A:D3:7F:8D:95:43:E8:0D:90:62:62
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:5e:23:88:da:ae:57:33:27:1d:1e:7a:09:73:10:d5:31:
d2:1c:29:e4:84:f0:1f:e1:4d:fa:99:5c:10:e3:15:2d:49:e5:
df:2c:c1:a2:55:86:d9:fa:6d:78:99:18:05:fc:93:d7:60:e3:
44:6b:1b:2c:ca:74:41:7b:7f:d1:5e:cd:19:ce:02:7f:07:b7:
27:ae:d0:61:43:24:c1:39:5d:d2:5c:50:36:87:5a:36:6c:5c:
dc:ec:97:e6:51:1d:b0:a7:14:23:a4:15:96:21:88:91:6b:9c:
02:53:48:a5:16:15:fd:bc:2d:81:70:98:d0:47:bf:8f:c8:4a:
98:62:48:ab:1d:d0:3d:6a:ba:fb:a8:9f:7f:32:99:ba:fc:93:
9c:c0:db:98:0b:4d:f7:93:d1:f3:f9:60:09:fd:ae:97:ba:33:
b1:17:1a:00:ec:85:2d:65:31:67:fd:82:2a:7b:81:52:da:e3:
47:c2:ca:c8:ad:97:4d:4a:0f:2f:2e:b3:91:ad:31:85:2f:8e:
02:87:fc:25:73:b6:36:9c:e9:11:1f:d1:df:20:e4:4c:b0:54:
ef:bf:5d:46:7f:ea:b1:d6:ad:1f:9c:a8:1a:b1:d5:bd:b9:97:
3c:08:a1:c5:24:b3:1e:7a:cf:2b:72:37:dd:97:c3:9c:30:f1:
d1:a4:b2:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rmZHGsnnkxzcYrkZf6vaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwMzI5MTMwMDIzWhcNMjYwMzMwMTMwMDIzWjAzMTEwLwYDVQQD
Eyg0NTUyODUyMjk4MGQxYmNmYmM3YWQzN2Y4ZDk1NDNlODBkOTA2MjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa6CwoocxpXK6rqwvnsj9VV1TDJ7
GW1WXODrBlF2aWNcMzuPk5lE1WyDE9i57ATZSOriR18krwCqNCzQnJpPhVWkI/6n
5uPUONp5NTXBMrvXY4/wOHr3t4psq+6CUgfEJg8j1vuPAIc0mK+gVrrlcXF9mXYo
0pX3qdkbxdUwZ8YdDgPgVtQQJFxfbuvtvN2clY7rYChSBKOH1Z6/ktJRbOttoheW
+tzh10uHFQ8vnTNWb2x6iEUz7VngIboFBqJttj70vuLiJCB0IY+o4XNJDvCivGvr
FVmuM8NRDGqc2gu6+T3Z0GJi0sMlfbH35DgBEpkyjZWtDsx1sIqrQfV2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVShSKYDRvPvHrTf42VQ+gNkGJiMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvxeI4ja
rlczJx0eeglzENUx0hwp5ITwH+FN+plcEOMVLUnl3yzBolWG2fpteJkYBfyT12Dj
RGsbLMp0QXt/0V7NGc4Cfwe3J67QYUMkwTld0lxQNodaNmxc3OyX5lEdsKcUI6QV
liGIkWucAlNIpRYV/bwtgXCY0Ee/j8hKmGJIqx3QPWq6+6iffzKZuvyTnMDbmAtN
95PR8/lgCf2ul7ozsRcaAOyFLWUxZ/2CKnuBUtrjR8LKyK2XTUoPLy6zka0xhS+O
Aof8JXO2NpzpER/R3yDkTLBU779dRn/qsdatH5yoGrHVvbmXPAihxSSzHnrPK3I3
3ZfDnDDx0aSygQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:37 2026 by rpki-client