Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: 4d2uUZvv3a27RMmbHe0t0JZ2pj/H6ikC7JmrD34kIYQ=
Subject key identifier: 55:D1:A0:F8:07:CB:C6:6A:90:9F:ED:D3:56:A8:05:CF:E4:92:94:9C
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019CE5C927F631C995D68B53871E1B24319C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 121E
Signing time: Fri 13 Mar 2026 06:01:31 +0000
Manifest this update: Fri 13 Mar 2026 06:01:31 +0000
Manifest next update: Sat 14 Mar 2026 06:01:31 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: LjU87xCLry+qkvt6jSMZ1sB0hLzWyFl1cOHLRfxIh2k=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:27:f6:31:c9:95:d6:8b:53:87:1e:1b:24:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Mar 13 06:01:31 2026 GMT
Not After : Mar 14 06:01:31 2026 GMT
Subject: CN=55d1a0f807cbc66a909fedd356a805cfe492949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:32:f4:d1:c5:f2:60:fa:bd:7b:2c:2e:60:
1b:b2:9a:97:78:9a:c6:d2:46:91:8d:b9:fd:c9:be:
2a:b6:4c:cf:b0:96:08:0a:3c:ed:08:b0:92:36:80:
22:76:91:64:b5:25:b8:85:3c:ec:0f:7f:12:fd:fc:
54:c1:9c:90:58:95:1d:f4:3a:ba:37:a9:9b:a7:af:
94:bc:93:51:35:7b:68:ae:f5:83:a7:26:28:cf:ab:
14:74:82:12:ff:6c:ae:15:0d:18:7d:cf:e8:5b:05:
62:2f:32:a5:74:0f:43:47:09:db:38:bb:94:4e:34:
8d:da:22:16:0d:49:25:0e:f5:49:c3:aa:69:f7:9c:
05:d3:62:74:36:29:0c:93:7c:f5:10:79:6b:56:f4:
92:31:c8:9d:71:0b:ff:88:06:e0:b4:c9:d0:ac:22:
bf:1a:ad:49:d5:51:da:a4:ca:5c:9a:cc:5b:d4:a2:
f1:12:42:8f:04:ab:d8:5c:ef:d4:eb:ca:ad:01:6d:
a1:f8:d7:89:01:84:cf:8f:70:70:2f:d5:15:b7:89:
64:17:1e:29:9d:be:47:12:ef:fb:0b:87:32:7b:fd:
86:ed:63:a5:0b:e8:39:5b:56:ff:46:21:0b:c0:a0:
78:81:ac:22:b7:9b:70:78:c3:f9:e2:7d:35:0b:80:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:A0:F8:07:CB:C6:6A:90:9F:ED:D3:56:A8:05:CF:E4:92:94:9C
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:00:99:fd:e3:36:67:36:72:2a:2a:93:70:8d:15:cf:ec:75:
78:28:80:d9:ab:e8:2c:fd:b9:63:fe:c2:57:47:61:44:14:09:
33:71:6e:48:0c:3d:7c:81:1d:4a:be:3a:70:56:b0:21:90:19:
91:12:f9:1f:b8:17:1b:d7:78:f3:cc:89:24:33:9c:39:03:88:
cb:20:57:72:d2:c2:bd:b5:d0:e0:ec:d6:23:c0:81:e4:03:40:
cc:62:6f:4a:52:bd:a1:f8:c8:62:d9:98:e6:82:7e:3f:9d:3e:
a1:af:67:b7:1f:de:2f:82:46:d1:0e:da:88:46:bf:a1:3c:48:
4a:34:30:72:c0:84:d8:24:86:b7:bd:e4:30:0b:a5:9a:e3:f8:
17:1e:70:dd:20:f5:7d:fc:e0:b3:c3:d5:c0:42:56:65:e7:ff:
ed:a7:58:b1:6f:be:d4:ca:f6:e1:a9:5d:a8:33:25:ab:db:04:
a7:61:0e:54:2a:39:c0:58:12:69:12:02:b6:67:fd:62:36:19:
d5:f0:f1:62:d4:29:cf:38:5a:64:e3:a8:55:f1:b5:58:5f:15:
f2:aa:16:a5:aa:6a:bb:a1:68:b2:66:c9:d8:1e:35:72:1e:73:
d3:6b:f8:88:0b:73:fe:96:ae:5b:ae:98:3f:83:47:7c:b9:7a:
bb:b1:1d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlySf2McmV1otThx4bJDGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2
OGIwNjEwHhcNMjYwMzEzMDYwMTMxWhcNMjYwMzE0MDYwMTMxWjAzMTEwLwYDVQQD
Eyg1NWQxYTBmODA3Y2JjNjZhOTA5ZmVkZDM1NmE4MDVjZmU0OTI5NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cky9NHF8mD6vXssLmAbspqXeJrG
0kaRjbn9yb4qtkzPsJYICjztCLCSNoAidpFktSW4hTzsD38S/fxUwZyQWJUd9Dq6
N6mbp6+UvJNRNXtorvWDpyYoz6sUdIIS/2yuFQ0Yfc/oWwViLzKldA9DRwnbOLuU
TjSN2iIWDUklDvVJw6pp95wF02J0NikMk3z1EHlrVvSSMcidcQv/iAbgtMnQrCK/
Gq1J1VHapMpcmsxb1KLxEkKPBKvYXO/U68qtAW2h+NeJAYTPj3BwL9UVt4lkFx4p
nb5HEu/7C4cye/2G7WOlC+g5W1b/RiELwKB4gawit5tweMP54n01C4Bo1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXRoPgHy8ZqkJ/t01aoBc/kkpScMB8GA1UdIwQY
MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt
NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3
LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQCZ/eM2
ZzZyKiqTcI0Vz+x1eCiA2avoLP25Y/7CV0dhRBQJM3FuSAw9fIEdSr46cFawIZAZ
kRL5H7gXG9d488yJJDOcOQOIyyBXctLCvbXQ4OzWI8CB5ANAzGJvSlK9ofjIYtmY
5oJ+P50+oa9ntx/eL4JG0Q7aiEa/oTxISjQwcsCE2CSGt73kMAulmuP4Fx5w3SD1
ffzgs8PVwEJWZef/7adYsW++1Mr24aldqDMlq9sEp2EOVCo5wFgSaRICtmf9YjYZ
1fDxYtQpzzhaZOOoVfG1WF8V8qoWpapqu6FosmbJ2B41ch5z02v4iAtz/pauW66Y
P4NHfLl6u7Edtg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:13:26 2026 by rpki-client