Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.mft
File: cCYdHor8gLy0Jkca0oq12kgp8MY.mft (raw, json)
Hash identifier: CvLAoXnGI5ds9oxbYrhl6x8Y6gg+m0oFKRmIBu9OAmw=
Subject key identifier: 4E:3E:85:1E:29:19:D4:43:E4:73:08:38:D4:B6:0B:89:A7:07:50:19
Authority key identifier: 70:26:1D:1E:8A:FC:80:BC:B4:26:47:1A:D2:8A:B5:DA:48:29:F0:C6
Certificate issuer: /CN=70261d1e8afc80bcb426471ad28ab5da4829f0c6
Certificate serial: 019D39AF23B8D972E819FBA26197CC61FFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCYdHor8gLy0Jkca0oq12kgp8MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.mft
Manifest number: 3C
Signing time: Sun 29 Mar 2026 13:01:12 +0000
Manifest this update: Sun 29 Mar 2026 13:01:12 +0000
Manifest next update: Mon 30 Mar 2026 13:01:12 +0000
Files and hashes: 1: cCYdHor8gLy0Jkca0oq12kgp8MY.crl (hash: 4V/zVbgPiBx06/z0/EUSgmLL157vKd818h6NaIOp3zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCYdHor8gLy0Jkca0oq12kgp8MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:23:b8:d9:72:e8:19:fb:a2:61:97:cc:61:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70261d1e8afc80bcb426471ad28ab5da4829f0c6
Validity
Not Before: Mar 29 13:01:12 2026 GMT
Not After : Mar 30 13:01:12 2026 GMT
Subject: CN=4e3e851e2919d443e4730838d4b60b89a7075019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:8e:3c:1e:23:2e:18:0e:5f:08:6c:00:e4:
e5:fc:0b:69:85:77:ee:26:17:0b:c5:a0:0b:14:6d:
cb:5e:40:71:0a:19:f9:d1:34:49:2f:55:b1:32:91:
3b:5b:66:51:a8:a7:42:fa:1c:1b:be:1c:f0:57:e7:
01:f2:86:ca:ee:c3:19:ed:9d:59:4a:ab:f6:aa:ad:
63:e0:1b:d7:5c:3b:a3:9e:d2:a4:ae:5d:14:87:5a:
57:57:3b:a5:1f:c3:d1:63:de:13:82:9b:2e:60:8e:
5c:48:84:fc:1f:98:5e:3d:64:ef:45:99:61:6b:fa:
cf:ae:dc:84:fe:03:51:88:7c:6a:24:3f:56:d5:1b:
5f:06:01:2d:69:01:e5:a1:e4:cd:7a:b8:60:b3:27:
4f:12:72:1e:45:64:eb:78:b1:2b:d3:d9:80:cc:e6:
b0:3c:5d:af:2c:f3:3e:b5:2e:ae:46:b7:e3:4e:46:
00:9e:2e:d3:b3:2c:fb:8b:fb:5f:ea:60:12:e5:5e:
32:99:6a:f3:1b:fe:2e:dd:2d:e9:93:dc:6f:3c:49:
c1:5a:26:ff:fb:a0:0a:6c:d1:3b:70:5d:38:5b:41:
f3:e5:75:ee:af:c2:6e:03:21:a4:2f:7c:0a:50:37:
bd:32:aa:bc:bd:e2:09:03:dc:9a:d9:c1:09:59:63:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:85:1E:29:19:D4:43:E4:73:08:38:D4:B6:0B:89:A7:07:50:19
X509v3 Authority Key Identifier:
keyid:70:26:1D:1E:8A:FC:80:BC:B4:26:47:1A:D2:8A:B5:DA:48:29:F0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCYdHor8gLy0Jkca0oq12kgp8MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/233113-a696-406f-9258-9cec6326e8a5/1/cCYdHor8gLy0Jkca0oq12kgp8MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:87:db:6a:b5:4a:f7:54:36:21:6a:48:cf:ff:e8:f7:21:c4:
85:d3:ae:d0:ce:9b:83:09:f1:af:9c:93:75:91:79:49:ad:ef:
59:82:e0:48:4d:97:3b:71:67:29:71:00:6d:af:54:e5:30:97:
ae:5f:7e:d3:e7:33:36:ba:f4:ec:54:30:ae:75:c2:fa:f6:e2:
1a:34:b4:8a:da:53:d8:9f:88:4e:bf:07:bb:b5:1a:23:4a:07:
83:a9:f6:4a:7f:fe:2a:be:de:a4:bc:6b:37:95:28:ab:d3:b9:
92:5f:e0:9c:9b:ed:54:3a:a1:68:5f:fc:7a:fa:55:df:c5:de:
38:ce:9c:e8:c7:c1:25:2d:ce:44:94:be:7c:93:c0:7e:a5:a4:
61:a6:e9:ea:e2:c2:e0:ed:9c:b5:06:40:68:b7:d4:94:e8:97:
c7:a4:7c:ab:7e:52:d9:37:48:e7:d0:18:ce:68:a2:d5:b6:3e:
9a:6a:5b:4d:99:bf:0c:7c:66:1f:9a:e4:dc:bf:93:44:07:c5:
dd:5e:c6:25:9d:c2:90:c9:e8:58:01:eb:9c:b3:63:a5:40:62:
d8:96:40:0c:06:21:9c:9f:6d:8f:cf:74:f3:dd:1f:69:e0:fb:
68:f5:52:39:b6:4e:04:a4:45:ca:1b:88:58:15:b5:b7:42:56:
2b:e8:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:22 2026 by rpki-client