Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: gtWq1X8YkGeGcMPekOw61UNQMV5MHT3mh9BSpJCjjYc=
Subject key identifier: DD:04:36:19:4E:A7:49:6A:08:64:FC:63:BC:A5:6A:66:70:95:E9:02
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01A143F188B89F060B4CF6161F088BF4D609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1461
Signing time: Fri 16 Oct 2026 09:01:04 +0000
Manifest this update: Fri 16 Oct 2026 09:01:04 +0000
Manifest next update: Sat 17 Oct 2026 09:01:04 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: fO1uUx5P0oMW2e+NAzlLw56ErD9+SdnBv7xWMoY4nOY=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f1:88:b8:9f:06:0b:4c:f6:16:1f:08:8b:f4:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Oct 16 09:01:04 2026 GMT
Not After : Oct 17 09:01:04 2026 GMT
Subject: CN=dd0436194ea7496a0864fc63bca56a667095e902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:f4:c3:c4:52:8b:bd:4c:f8:6f:aa:5d:4e:
78:2c:de:68:2a:ac:0f:c2:d1:d6:7d:f7:11:a1:81:
4d:71:f5:37:00:59:38:04:99:f1:c8:ba:cd:bc:60:
e8:c8:62:db:8d:92:2a:52:56:00:61:8a:13:f4:1a:
7b:6a:a9:16:96:ba:4f:17:a1:2a:dc:5c:87:0e:5c:
7e:68:97:98:e9:e7:12:8e:d8:44:cb:82:ec:c8:d8:
97:17:71:16:e5:e5:06:66:a3:af:35:d7:75:64:dd:
eb:45:a3:0a:90:75:35:53:de:05:35:e2:93:c2:11:
3c:e0:23:4a:42:e8:08:72:35:90:a2:f1:a2:d5:ff:
d5:15:3c:3b:54:68:83:05:e6:fa:ab:d5:eb:0f:d3:
43:51:f0:9f:c6:0c:4b:bf:eb:71:9e:c3:45:66:f8:
79:2a:bc:8b:24:1d:89:20:a3:f6:9c:8e:d3:d9:2a:
2c:72:8e:83:63:82:9e:b1:71:d3:03:8c:4d:ec:96:
49:7b:ab:67:9a:b2:09:46:40:2b:71:c5:6e:ed:35:
f2:34:97:04:54:23:9c:c5:b0:1d:2d:bc:a3:5e:72:
a6:8c:4c:a2:1c:6b:8b:84:3a:f8:26:7a:59:df:e4:
e2:63:75:f3:a3:e2:f4:a4:d9:a0:f7:85:8a:1b:25:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:36:19:4E:A7:49:6A:08:64:FC:63:BC:A5:6A:66:70:95:E9:02
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8b:73:f5:81:f0:05:3c:f9:16:e6:23:3c:1c:30:5b:57:66:
92:83:7f:01:f5:d5:c1:f0:f4:c6:a0:f6:26:2a:8f:5b:21:70:
1e:38:e8:73:bd:df:5b:11:5c:7f:7b:64:17:8e:0f:47:42:6a:
0d:2a:c7:e8:f4:59:64:29:3b:90:23:e2:8b:30:3e:7f:11:91:
12:d0:9d:62:db:32:40:88:c4:78:ca:e7:f4:8c:fa:39:7b:42:
ca:9e:a7:a2:93:f7:c4:c3:78:6b:5f:bb:ab:37:7a:0b:38:76:
f3:60:21:8e:94:94:2b:9c:72:56:e2:8b:d8:80:fd:6e:ea:1e:
5c:1c:af:b9:41:08:cb:cf:3a:be:70:71:7c:fc:ff:51:7b:4e:
ea:79:74:58:a4:b0:db:7a:49:20:e2:55:27:67:4d:99:61:30:
0a:1a:cb:19:61:45:59:ce:34:64:33:73:50:b2:b7:c4:fa:2c:
3f:05:4b:2e:87:e3:93:0b:af:8a:44:e6:e6:d8:f4:1c:13:80:
d8:d1:a7:08:9e:bd:f0:e9:98:bc:0e:68:ab:ae:72:ec:7a:37:
59:40:84:dd:fe:45:ca:db:1b:87:75:29:a9:14:78:06:0a:b4:
f3:f2:f1:2b:71:b1:74:4d:90:df:e6:c4:ff:c9:9a:eb:2d:70:
29:2b:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 19:25:22 2026 by rpki-client