Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: yPR5leEAt5NoUSiL7AgRq5GXA3DB1otyjdxAXYnPK8w=
Subject key identifier: 1A:67:DA:3C:48:C2:D5:E0:C5:44:60:29:3D:9A:6E:38:36:CB:4F:DA
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 01A08B9EAF593715D5287520A0EAA82ED94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0639
Signing time: Thu 10 Sep 2026 14:00:27 +0000
Manifest this update: Thu 10 Sep 2026 14:00:27 +0000
Manifest next update: Fri 11 Sep 2026 14:00:27 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: 9HSBnq9o3c69AzYLNk5y9svUbLFTKeVjpTd/sJgse4g=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:af:59:37:15:d5:28:75:20:a0:ea:a8:2e:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Sep 10 14:00:27 2026 GMT
Not After : Sep 11 14:00:27 2026 GMT
Subject: CN=1a67da3c48c2d5e0c54460293d9a6e3836cb4fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:d5:3f:d4:be:8d:c3:5b:c8:13:6a:01:03:
19:56:86:a6:60:86:a1:8f:61:c1:08:0a:fe:40:9d:
b4:43:f1:a6:af:cd:71:32:53:0c:c0:49:be:80:7a:
e8:52:52:28:57:f9:2e:d4:13:21:6b:c0:4b:03:3a:
72:b3:8c:03:32:89:db:d2:72:87:4a:fb:35:d6:b5:
e9:c1:d2:64:3e:ad:f4:be:65:12:90:79:82:0e:d2:
86:7e:fa:86:1f:06:bd:43:b6:94:b1:9e:8f:55:03:
82:30:0b:9f:c4:d4:67:36:be:01:e2:1c:71:33:6c:
1a:50:85:9a:4e:2a:53:2a:93:71:5d:31:2a:75:1b:
5b:ec:dc:6d:f3:12:36:c8:da:33:42:53:b4:be:36:
49:89:70:9e:ce:da:b2:7a:e0:5d:44:d4:fb:d5:2d:
58:99:c7:58:80:5b:59:14:9d:63:58:ec:4b:27:e6:
c3:e6:79:1f:bb:fb:93:b0:6e:26:29:54:57:d4:c4:
21:b8:fa:c8:73:53:39:5b:76:b9:13:ff:03:c1:ba:
a6:76:b8:84:88:92:bc:6b:8e:bf:57:75:b0:ae:6c:
77:64:9f:a8:b7:bb:98:5d:79:0d:79:53:03:92:f0:
22:16:44:e7:83:4c:fd:9d:ac:ec:bf:da:55:c1:21:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:DA:3C:48:C2:D5:E0:C5:44:60:29:3D:9A:6E:38:36:CB:4F:DA
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:fe:9c:c4:0c:3c:81:09:62:35:78:f5:90:c6:46:44:66:
35:c0:f4:63:03:b4:a3:c9:3e:4c:be:8f:9b:c7:07:c7:7c:43:
02:2e:69:b3:9a:4e:63:a3:f4:37:35:98:04:55:74:27:67:6f:
c5:58:08:1b:fc:1c:dc:7b:a9:3d:e7:27:3e:b5:d3:74:45:c9:
39:1c:9a:a1:49:41:c2:51:36:a9:16:93:b3:ec:03:cd:ed:10:
7c:c2:84:45:57:32:40:51:47:20:c4:df:8d:0a:10:98:16:84:
8b:03:6e:77:e7:b8:b1:92:39:1d:dc:fd:cb:d3:be:7a:02:39:
41:ec:2e:9d:d1:fb:8c:7c:9e:ec:24:f0:4a:5e:99:7d:77:40:
d8:16:d6:54:64:76:bf:62:35:73:80:90:2e:dd:10:b2:0d:ae:
eb:0e:7c:87:23:cc:7f:6f:83:6b:dc:ad:6c:97:b0:18:5e:29:
4f:db:82:d8:d0:bc:51:04:64:74:c7:b6:ec:c2:e0:19:a3:42:
08:c4:eb:b4:dc:8d:21:17:c1:6f:0c:87:26:f3:21:16:a3:be:
9f:9c:3a:3f:69:21:a2:fa:8b:c1:09:3b:9f:b4:0a:39:fa:c5:
dd:bc:8e:97:06:17:9c:00:5c:30:e7:24:9d:dd:a4:ee:d5:2f:
18:31:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:37 2026 by rpki-client