Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: zOkudqyFMiWCeNY7fq2a05/93niSY+6nWYdlbfTvqLc=
Subject key identifier: BF:5C:0A:7C:7F:0D:8F:A1:03:FC:C3:1C:0D:7A:52:DE:87:CB:65:E4
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019DD08779A2E3CF03870334ADCD0FD0C6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 04CF
Signing time: Mon 27 Apr 2026 20:00:32 +0000
Manifest this update: Mon 27 Apr 2026 20:00:32 +0000
Manifest next update: Tue 28 Apr 2026 20:00:32 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: azhHBJYWm1GA1SEWTGKuvshV/v08/2PWv9Ou366h9Ek=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:79:a2:e3:cf:03:87:03:34:ad:cd:0f:d0:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Apr 27 20:00:32 2026 GMT
Not After : Apr 28 20:00:32 2026 GMT
Subject: CN=bf5c0a7c7f0d8fa103fcc31c0d7a52de87cb65e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:d9:7f:27:52:95:75:7c:cf:2c:b0:26:29:
4d:1f:8d:39:c2:ab:a2:f7:00:98:40:f7:69:19:0a:
dd:eb:1f:4c:76:28:ab:3f:67:e2:17:5e:8e:5f:ea:
e4:48:0c:1f:0e:da:6f:60:fd:d2:3f:57:e6:6f:d9:
ff:e7:e8:2b:46:a9:1f:10:3f:60:78:67:dd:a6:43:
d3:7b:7e:dc:55:e4:4a:aa:03:90:e7:27:50:f8:49:
25:dc:c7:d8:60:38:22:ca:7f:cf:e3:e7:a9:78:32:
7d:c7:90:84:d7:f7:57:5d:05:37:1e:c3:d3:f9:2b:
a1:3a:df:1d:05:cb:95:2f:cc:ae:01:50:89:b6:7d:
00:91:b8:65:63:ef:0f:4b:e7:b5:65:22:93:bb:97:
60:f0:4f:cb:44:8e:2c:3d:1f:e7:f4:b7:c7:b5:31:
8e:ac:c7:35:5c:49:7e:a5:e9:ed:65:2b:bb:f1:be:
66:25:38:44:70:01:ba:ef:a3:94:f0:ff:c1:d0:71:
de:c9:c9:68:ac:f1:28:46:60:d9:63:d3:5d:0e:ae:
13:ef:21:da:be:30:01:4b:9a:1c:73:13:d0:fd:78:
af:75:ec:ec:93:3f:6b:a7:ad:ad:19:4e:3a:af:da:
05:04:8e:8b:d2:d2:a5:79:ab:35:d1:4d:16:b9:7a:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:0A:7C:7F:0D:8F:A1:03:FC:C3:1C:0D:7A:52:DE:87:CB:65:E4
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:20:07:d5:eb:94:41:91:60:1c:47:c8:d9:d6:28:0e:da:
ea:5e:cf:7f:36:a9:f2:6a:ed:95:0a:d1:3a:c3:02:37:6f:e0:
95:b1:e3:0d:0b:b4:14:93:df:0b:29:aa:bf:39:9a:a2:e9:73:
0a:9a:e8:8c:36:68:95:7d:ad:4a:1d:c2:42:10:f9:94:c3:58:
79:6e:3f:8d:40:89:70:0a:bf:c7:75:54:2f:6a:e8:1c:4f:47:
f4:90:d3:18:6d:38:ea:85:87:89:a4:d6:11:f8:f6:c1:ad:9a:
17:f4:35:87:d9:81:d3:cc:58:a2:47:de:f2:7b:ba:78:80:58:
91:5d:49:f2:bd:d3:2f:d3:ae:59:3d:97:2d:9b:4c:3d:10:e5:
e0:86:e8:06:e9:9a:9a:3d:91:5f:12:0a:7c:f8:f2:f0:f0:9d:
ef:f4:c8:53:42:3e:d6:55:90:f7:c1:e5:67:63:48:62:8a:8c:
ab:15:85:76:b0:96:9f:1d:a4:8c:6e:90:1e:75:7f:dd:46:96:
11:99:f7:3e:87:5e:7b:b6:70:a9:92:43:51:bb:56:0f:a2:92:
d4:91:d7:37:c0:57:31:3b:fd:2c:9a:00:a4:bb:3e:e5:36:bb:
f8:db:06:9d:13:c2:f1:7a:37:3e:e7:7e:44:9a:23:82:9a:e3:
65:2f:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:09 2026 by rpki-client