Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: hv1W/c/UKkkiS8g3zQ4qNXNW0z5mrw3WTBIprNxazuk=
Subject key identifier: C2:F2:F9:30:F1:68:E9:E0:BB:9F:75:0E:05:CF:5E:B4:61:85:29:E3
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019D0AE8C296E3253547D65DCE9AAFF6C383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 04BB
Signing time: Fri 20 Mar 2026 11:01:59 +0000
Manifest this update: Fri 20 Mar 2026 11:01:59 +0000
Manifest next update: Sat 21 Mar 2026 11:01:59 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: Fq2FoZd6ng0GTIfwEQhTlcccKv1uGnQrW28CWEjBJ20=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e8:c2:96:e3:25:35:47:d6:5d:ce:9a:af:f6:c3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Mar 20 11:01:59 2026 GMT
Not After : Mar 21 11:01:59 2026 GMT
Subject: CN=c2f2f930f168e9e0bb9f750e05cf5eb4618529e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:13:53:c2:7b:df:ad:bd:91:3f:54:ba:c5:
49:90:53:0b:68:fd:3f:97:49:f6:d2:af:05:1d:8b:
7e:88:2b:49:fb:bb:24:ce:5a:a6:fa:6e:cc:82:77:
d2:52:c4:f2:34:c6:b5:df:61:5d:17:ea:66:89:79:
96:54:19:dd:20:34:b8:04:04:07:b9:55:50:92:bc:
40:c1:6a:80:c2:f7:2f:d7:d9:ba:e2:95:bf:80:10:
21:cc:b8:57:57:42:4d:8e:3e:91:ea:b9:ef:a1:6b:
ae:c4:0e:45:c2:4b:1c:db:a4:45:43:52:37:2f:13:
46:db:54:01:04:5c:d5:e7:16:c0:24:c1:96:fb:70:
42:64:b8:c9:91:64:af:c9:2a:4a:6c:50:3f:46:a9:
f8:3b:01:51:62:a7:2a:92:d4:c0:2a:e2:eb:d6:a6:
4d:6e:e9:e4:6a:d9:ab:33:ba:55:35:26:12:66:b3:
e1:9b:25:d1:1d:c2:be:dc:bd:20:d7:91:c7:4a:b7:
7f:f8:60:ed:e4:e9:36:b8:e3:ef:be:66:4e:90:2d:
6f:ce:5b:2d:1c:54:94:91:39:84:d1:85:f2:bf:f9:
14:b0:03:33:fc:15:4a:1c:e8:f4:1f:81:2a:84:a3:
36:3a:62:3b:f8:1d:e8:cc:42:a2:54:6d:84:86:ae:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:F9:30:F1:68:E9:E0:BB:9F:75:0E:05:CF:5E:B4:61:85:29:E3
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:41:20:59:42:66:10:54:5f:a2:49:fa:58:a0:ec:4c:6f:5b:
8c:46:15:fb:31:73:b6:d1:f1:ab:7d:d7:d3:ff:7a:d4:2e:05:
72:6a:72:9a:b3:25:1a:9b:86:55:04:34:3c:a0:40:09:cd:dd:
a8:b1:9d:70:7e:79:d4:ff:a1:e9:48:50:bb:d8:79:ac:09:74:
66:ae:c4:d9:98:a2:d5:8d:c3:a4:4a:d8:ab:23:05:d2:bf:ae:
d7:b2:99:76:9c:24:4c:17:4e:0d:97:cd:07:52:5a:15:89:44:
d1:44:ef:96:71:bd:32:67:18:75:da:6e:f6:07:6e:5f:66:f7:
77:84:67:df:ba:98:cc:75:c0:c7:7f:28:cd:a2:60:95:c9:5b:
42:7f:c4:06:da:a5:35:77:26:a4:55:a8:ba:e8:a9:97:45:6d:
39:09:27:f5:34:32:1a:83:c9:cf:c7:fa:b2:70:d9:67:87:2e:
5f:d1:95:de:26:a6:30:5f:22:be:f3:bb:6f:83:5b:6c:1f:a5:
88:15:3a:8c:a6:72:36:a6:49:51:ad:16:01:b3:78:97:a0:02:
d8:b9:12:6b:91:8a:af:7b:18:c5:e2:aa:95:22:4d:e2:00:f7:
4c:f7:23:20:1d:d4:ca:33:a9:af:6d:ec:e6:d5:29:e7:e0:e0:
6e:41:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:28:24 2026 by rpki-client