Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: VdvWq4XqDZDvdIEp9XjT5xUnaw8xP+n5deVR7UV3qr0=
Subject key identifier: 6D:CE:4A:25:E7:4A:E8:29:14:95:8C:DD:16:D2:9A:60:AC:0C:CB:78
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019E29266F1892BD3918C5F326BCCEF56D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 1297
Signing time: Fri 15 May 2026 01:00:45 +0000
Manifest this update: Fri 15 May 2026 01:00:45 +0000
Manifest next update: Sat 16 May 2026 01:00:45 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: c9Eenp3OjWf98HMHYa+IOYj1zUct33doEnI9SOxldZA=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:6f:18:92:bd:39:18:c5:f3:26:bc:ce:f5:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: May 15 01:00:45 2026 GMT
Not After : May 16 01:00:45 2026 GMT
Subject: CN=6dce4a25e74ae82914958cdd16d29a60ac0ccb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:34:9a:22:19:5a:10:53:98:54:19:27:c6:
31:99:f9:5a:ab:26:ca:78:da:c4:eb:c6:cc:c6:e1:
9a:ba:86:d1:d2:1e:8f:a7:3e:dd:a3:b2:1c:97:9c:
cc:35:30:91:8f:ca:d1:d2:95:89:25:91:84:0a:f0:
ca:e0:74:92:fc:5e:05:6f:f9:fe:b0:fd:f1:f4:db:
e4:37:58:e7:e6:d1:2f:fe:b6:2e:05:0f:2d:2d:ba:
55:14:57:72:3c:d2:74:b8:a9:8b:e4:37:b9:d0:99:
04:e9:ed:f5:9a:d0:9d:1d:7c:75:89:5e:5a:83:52:
71:09:bf:f9:32:9b:40:e4:82:23:1b:a0:3c:6f:d5:
56:b0:b2:8a:ea:08:a9:3d:c2:9a:25:4d:ed:ab:09:
01:c2:d6:88:e4:2a:f3:9b:3b:54:74:93:85:e1:5b:
8c:36:5b:e8:ff:bb:f9:a8:0f:b5:06:0f:5b:a4:8f:
d0:53:99:79:fa:24:ee:53:7e:f2:9c:e2:1d:69:bc:
c0:3b:fe:88:9e:91:e7:2a:02:fd:08:19:03:8e:0e:
8a:1f:1b:9e:47:ae:a0:93:70:c3:5b:b0:b8:30:5e:
36:79:55:88:78:4c:b3:b8:1b:97:4a:75:83:7f:99:
f8:87:65:94:ad:41:9c:b8:03:00:3f:78:00:fc:a7:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:4A:25:E7:4A:E8:29:14:95:8C:DD:16:D2:9A:60:AC:0C:CB:78
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:43:cf:45:00:1f:9f:10:7e:d3:ca:be:a7:7c:5e:94:87:
45:13:be:c2:95:67:6a:60:5b:2e:c5:d8:80:35:f7:90:5e:fb:
2c:f3:64:11:ef:c1:ce:e2:73:7b:e7:3c:3b:fd:d4:4b:76:a3:
59:93:da:59:0e:59:b7:68:5d:3f:fd:13:80:92:ae:3c:2a:34:
19:92:58:d1:76:65:b1:fd:93:d6:a2:dd:1f:08:cd:af:cd:3a:
8b:35:e2:12:dc:fd:cf:6d:5d:a2:f3:72:f1:fb:d8:ec:b5:ed:
4b:65:d5:cd:49:b0:f3:4e:7a:01:c8:33:fd:78:b1:3f:f8:cc:
34:0b:a5:b2:a6:f2:62:e4:de:4f:9a:eb:0f:e5:2a:61:2f:9b:
81:b9:31:76:6f:0c:df:cb:72:2e:e2:d5:4c:d1:4f:32:83:2d:
c6:28:77:f2:f7:32:a9:c0:63:5a:71:5e:18:88:0a:c2:7a:39:
42:59:45:cd:a7:71:76:af:a0:37:9d:48:30:45:6f:9a:32:73:
46:39:6c:5e:35:95:f4:61:fb:0b:7b:76:a8:b4:38:3e:ee:95:
6b:b0:72:24:be:2b:8b:f9:26:24:f0:22:2c:cc:81:3d:53:37:
ed:31:8c:fa:e1:13:09:96:51:90:21:05:da:e3:20:60:c7:8b:
3f:75:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:16 2026 by rpki-client