Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: koX86ykmZGfbg+XzN8RB6IRKt+Wh9uKLAcFNsHJJakU=
Subject key identifier: CE:E7:AA:3B:FA:33:37:FE:75:16:63:4C:A7:B3:42:C1:05:CE:2A:0D
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019EB92162D7EF94286A69F466FFB36B16E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1310
Signing time: Fri 12 Jun 2026 00:00:33 +0000
Manifest this update: Fri 12 Jun 2026 00:00:33 +0000
Manifest next update: Sat 13 Jun 2026 00:00:33 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: qY9j+lSxEmdqGSK/xQ/NFdAWH8VTTVKdj7yrIYea4A8=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:62:d7:ef:94:28:6a:69:f4:66:ff:b3:6b:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jun 12 00:00:33 2026 GMT
Not After : Jun 13 00:00:33 2026 GMT
Subject: CN=cee7aa3bfa3337fe7516634ca7b342c105ce2a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:da:4c:d3:28:ec:d1:54:37:2f:c7:05:a8:81:
3a:4f:5a:98:70:6a:4c:13:74:0d:8d:f2:f0:51:ba:
9c:a1:e2:3b:07:8a:dd:7f:98:8c:3b:c3:95:3d:3b:
d2:d0:62:9e:f9:c9:80:2e:8d:24:fa:b4:4f:70:2e:
20:a1:3d:c1:6f:6b:6f:ea:a6:1e:ce:de:f3:5b:38:
61:8d:e9:e1:6c:e3:53:a1:0d:8d:a6:ee:4b:5b:a3:
52:e4:fb:61:6e:1e:e1:29:f9:56:b7:69:7b:76:54:
bf:d4:b5:97:94:44:4a:0e:e2:20:d9:2a:a7:30:86:
31:f0:3d:d9:8e:87:59:6a:42:e5:b6:a3:6b:44:aa:
f1:ae:fe:62:92:94:c3:d6:ca:b6:93:f4:c6:3a:6b:
75:52:cf:4b:6e:7c:9b:c0:73:f3:77:4c:5e:0b:c3:
89:69:3f:89:2b:51:cf:fe:52:4c:63:22:8f:eb:c9:
56:59:3a:d7:be:2b:21:d3:e6:90:ca:f0:24:69:38:
b5:3b:33:63:fc:20:38:4b:37:96:de:53:a1:96:89:
b4:0a:f2:7d:3f:94:48:91:40:d3:b8:cb:d2:22:aa:
b8:89:e1:b3:60:cb:5f:27:c6:9c:b1:a8:74:be:13:
04:0b:26:dd:dd:3f:69:b6:6a:97:34:84:55:fd:fa:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:AA:3B:FA:33:37:FE:75:16:63:4C:A7:B3:42:C1:05:CE:2A:0D
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:a4:53:34:b0:4e:45:d6:df:29:3f:42:11:7d:e8:56:7f:
f2:9b:f5:36:c1:58:80:4d:39:c9:54:5b:cf:ab:86:6a:e9:4e:
ce:20:ec:20:bc:e6:96:f4:e9:72:d2:e1:e9:e9:a5:82:ac:cd:
f8:f5:40:24:fa:30:b0:68:2e:35:f8:ba:cc:4e:fb:2d:e1:3f:
bd:76:96:35:04:7e:0c:c0:65:31:e6:13:04:fc:42:cd:d6:b6:
1d:70:29:09:b3:c2:a8:73:c8:c4:38:f6:f2:a2:cc:4f:ab:c5:
d0:48:f0:3a:61:7e:58:b6:bd:7e:9f:9b:b5:d2:fa:eb:45:b8:
69:49:a9:af:fe:ba:ef:60:f7:51:fd:50:d5:c9:16:8f:3c:6c:
78:43:fe:00:e6:08:ab:53:b7:a1:87:4f:74:6a:d3:74:d2:b1:
d4:06:18:ba:97:4f:7c:7e:5c:52:59:07:58:fb:be:9f:0d:9c:
bb:1d:e8:eb:20:31:f9:b0:69:4a:f5:34:9c:cc:2a:b5:61:a9:
e8:02:46:9b:b6:5d:77:52:3e:d5:7e:87:ef:85:94:0c:53:5f:
cc:37:51:4d:40:32:a7:ce:d6:ba:2f:69:9f:bc:8f:17:68:68:
01:9b:86:ac:8d:3a:ac:b7:9a:a3:5e:5f:2a:76:c4:f8:74:6d:
ad:4b:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:56:16 2026 by rpki-client