Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: scCXa8/B+2Da36KrPIkfit/7Zm+RIOA1HeHBgoOSjas=
Subject key identifier: 3A:1D:FB:58:49:59:FC:21:15:AF:05:86:DA:4A:FA:E2:35:1F:75:7C
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01A0016F609447AA6DCCB2F26EEE264B5F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 13BA
Signing time: Fri 14 Aug 2026 18:01:11 +0000
Manifest this update: Fri 14 Aug 2026 18:01:11 +0000
Manifest next update: Sat 15 Aug 2026 18:01:11 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: 41AZFJcC3P0Fb/dwxT3SxEmVm3tQVgt5Mo8R8cJkSyk=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:60:94:47:aa:6d:cc:b2:f2:6e:ee:26:4b:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Aug 14 18:01:11 2026 GMT
Not After : Aug 15 18:01:11 2026 GMT
Subject: CN=3a1dfb584959fc2115af0586da4afae2351f757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:ce:40:d6:27:1c:f6:78:60:72:c4:18:e6:
3d:93:6d:a1:b7:90:81:0f:07:d6:cd:6e:f8:47:d3:
ad:d1:eb:92:a6:7b:c1:e1:d2:25:8f:9b:b9:eb:59:
4c:9a:9d:19:24:e6:54:76:47:de:6b:d7:3b:1a:09:
42:b3:33:59:7e:5f:70:d0:2f:bb:57:5f:00:14:4d:
10:e5:60:5a:cf:e1:9b:f3:5a:19:32:35:fe:5e:f7:
5b:04:62:af:fc:26:8a:fc:ff:2c:d4:01:f7:6e:de:
df:f1:79:40:39:c8:4f:33:81:36:fb:80:ee:b8:e4:
ee:4d:07:b8:11:25:19:07:3d:eb:ef:6d:b3:6d:3c:
1e:5e:4b:1c:af:c9:68:30:42:1b:e1:e1:fe:f7:0a:
66:6c:4e:e8:d4:57:5c:4e:b4:be:1c:36:ea:40:51:
e6:23:3a:35:91:8c:35:a4:36:b8:ee:0f:55:c0:84:
fc:dc:48:1f:66:04:c2:85:94:ef:af:8e:1b:97:8e:
7b:73:bf:4d:0f:0a:b3:88:97:f4:9f:12:1a:82:70:
0d:f0:9e:f0:5a:b4:f9:4e:8e:8a:0a:eb:b1:73:02:
60:12:fd:59:5e:7a:54:24:1a:d5:f1:d6:05:5a:83:
60:b6:92:fe:9a:d4:39:1a:70:d2:06:ea:1a:21:1f:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:FB:58:49:59:FC:21:15:AF:05:86:DA:4A:FA:E2:35:1F:75:7C
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:71:cf:c7:9d:fc:74:77:84:41:0f:06:3f:e1:2b:bf:1a:
f0:26:08:0d:29:d2:0e:ea:f2:8b:eb:d9:b4:8b:3a:46:da:7c:
f3:98:f5:6f:dc:f9:63:2f:8d:e3:d8:f9:2e:ba:6a:b0:b8:61:
19:41:4f:d7:ca:64:26:e7:5b:92:6e:9a:80:0d:29:c1:06:72:
be:74:c5:3c:4a:e8:39:26:97:3d:08:af:61:65:50:da:73:85:
72:a6:c7:78:5e:16:14:46:3e:15:8a:17:ec:70:7c:a8:9c:93:
94:47:5f:7c:60:24:b0:b9:cb:43:34:c1:99:95:da:a8:1e:34:
a7:17:6c:94:e9:55:6e:0e:33:61:13:e9:81:cf:d3:bd:ea:32:
57:e0:9e:e6:3e:a5:20:68:ab:b6:28:4c:14:b3:9f:37:2d:84:
a4:90:cf:e8:6c:e4:e7:c7:e1:1f:ca:7f:27:bc:82:5f:de:2b:
9d:97:c7:42:2b:41:c4:b6:8f:c7:02:bd:32:a4:5b:c2:3c:c8:
af:36:c3:0d:d9:6a:0f:14:94:c4:da:2f:63:2a:2c:00:65:80:
51:e5:61:2b:32:61:a6:f6:7b:06:84:2a:71:dc:4b:33:1a:29:
21:c5:6b:6a:fd:29:52:a9:87:c4:72:c3:8a:e4:fa:b5:ef:48:
8c:63:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:52 2026 by rpki-client