
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: ihJrnEpQAL8Oz6jel7hAJNThFgE7pLmLtbEVFJWx4YM=
Subject key identifier: 52:BF:99:0E:29:3F:47:D1:A3:A9:B5:CF:95:91:42:0F:2C:5B:8B:8E
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 01A001DD06182D56160E219E3BCB5E8D1589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0644
Signing time: Fri 14 Aug 2026 20:00:57 +0000
Manifest this update: Fri 14 Aug 2026 20:00:57 +0000
Manifest next update: Sat 15 Aug 2026 20:00:57 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: 39Ccs+WvhkYDjuJ+eyoOn9Z90Atn6NV8Jl5wXgpqUZY=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:06:18:2d:56:16:0e:21:9e:3b:cb:5e:8d:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Aug 14 20:00:57 2026 GMT
Not After : Aug 15 20:00:57 2026 GMT
Subject: CN=52bf990e293f47d1a3a9b5cf9591420f2c5b8b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:c2:5a:b3:79:2e:7d:95:3d:b7:5a:9b:cc:
0a:88:b5:05:6c:5b:7d:de:2f:eb:c5:6d:1a:12:fb:
73:0c:bc:9d:38:e8:c4:31:a2:e8:1a:53:8c:80:2c:
cd:b9:69:1b:94:99:53:af:2c:0e:bd:d7:85:ef:6c:
91:0e:e5:43:74:e6:54:45:b6:5a:55:82:2a:e6:5f:
67:4b:22:26:0a:75:38:11:a7:5a:1b:70:0c:e9:b1:
03:f3:1f:f2:78:12:4f:05:c2:84:b7:aa:8f:23:a3:
a0:1c:78:a7:30:4d:4d:ed:c9:21:1a:42:52:f5:68:
36:5e:30:19:83:20:fd:62:13:1c:de:77:c7:c7:b8:
db:c8:c9:c0:e8:ba:a0:56:2c:63:3d:e4:62:d3:88:
c8:91:7b:4e:bc:73:2c:a8:09:6e:93:63:2d:5f:59:
6f:40:8a:20:a4:26:9a:6f:b6:0b:83:45:20:e3:8c:
ef:97:f5:c8:72:a2:48:93:8d:17:ee:19:b5:1d:78:
8c:81:d9:b6:cd:0f:30:c2:b1:0e:a3:1c:d0:e4:ed:
e3:a2:5c:5d:39:9f:40:40:76:07:79:45:e1:e9:cc:
6d:00:a9:91:e5:46:4a:12:b1:c3:fb:ca:6a:86:1f:
2c:9b:45:17:e1:96:c6:19:fd:14:f6:a4:fc:5e:a3:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:99:0E:29:3F:47:D1:A3:A9:B5:CF:95:91:42:0F:2C:5B:8B:8E
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:1e:aa:4e:bf:a9:db:fb:5f:25:0e:1f:5f:c4:db:5a:b4:
5d:6a:b5:b5:bd:8e:07:20:e0:db:f6:00:b8:88:c6:d4:9a:7d:
29:d5:f5:7b:94:dd:27:0b:ca:aa:8d:52:96:58:0e:46:56:19:
f0:85:c0:44:d5:3d:9b:07:1f:c2:52:3e:22:ac:3a:88:8e:80:
34:94:04:03:9a:16:d4:04:64:aa:2c:3f:2a:46:b8:ba:86:c2:
db:02:2a:b6:e3:8b:e7:fe:bb:5c:3e:b4:8d:ca:0e:d2:d7:26:
14:3d:67:ef:64:9f:0a:a1:c9:66:6d:1d:da:12:cd:10:43:2d:
64:a8:ba:44:d2:5e:2b:c1:f3:1e:cf:45:cb:59:33:99:fd:66:
ff:ec:57:f6:48:11:e9:ca:18:e8:32:97:a7:2a:d2:28:b1:9a:
8c:4e:63:8a:06:34:fc:13:0d:7a:e1:46:b9:8c:c8:cd:3c:fd:
51:be:5d:0b:06:06:51:26:1f:7e:2f:0a:95:1d:35:11:e0:d2:
7d:a1:2a:de:fa:50:9a:7b:2f:81:52:82:48:37:94:ec:b4:59:
4d:4f:2f:d7:c6:16:18:e8:53:cf:63:8a:08:98:6b:11:89:b7:
da:5e:cd:bb:88:a2:78:be:4d:2a:7d:bc:8d:30:55:3c:1a:a8:
42:3c:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:22 2026 by rpki-client