Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: JA32She6CxvIwVF9+0nHczDT15yaUdpuOabNokvBmMc=
Subject key identifier: 6E:13:70:AF:41:80:76:C0:A9:9A:31:F5:E8:85:8A:FB:AB:4C:20:8C
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019DCF7502BD5739A9F4447453415AF8225D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1297
Signing time: Mon 27 Apr 2026 15:00:45 +0000
Manifest this update: Mon 27 Apr 2026 15:00:45 +0000
Manifest next update: Tue 28 Apr 2026 15:00:45 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: On9IkTvBflR3987V9J4FyBYMLQdASCgrVB58SFtLlyU=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:02:bd:57:39:a9:f4:44:74:53:41:5a:f8:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Apr 27 15:00:45 2026 GMT
Not After : Apr 28 15:00:45 2026 GMT
Subject: CN=6e1370af418076c0a99a31f5e8858afbab4c208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:91:7d:16:f7:ae:8a:e1:8f:b9:24:21:2a:
d2:7e:3e:3c:d0:75:85:37:b0:33:e5:bf:98:59:2a:
b5:21:66:3c:5d:c5:c6:22:19:f7:9f:e9:f2:95:39:
5e:3e:ab:4c:fd:41:9c:b5:a3:1f:92:a1:0b:51:7e:
9b:c5:86:a5:63:54:75:30:01:93:c8:a0:dd:c3:f3:
7f:7b:d1:12:40:90:61:f8:1d:93:63:a8:d6:78:99:
17:a8:4c:c3:32:68:84:e1:c4:c3:5a:2e:88:44:52:
76:7e:24:35:db:71:0b:cb:83:ff:d9:2b:bb:66:2c:
f6:96:76:be:33:20:3a:f4:29:af:da:91:c0:04:49:
b7:41:b5:a5:fa:5d:0f:70:87:08:ec:5c:12:56:97:
2c:4c:68:ff:79:77:8e:d4:85:55:31:95:34:4d:77:
6a:a9:53:ef:ea:0d:11:a2:84:c6:e0:44:7c:dc:7e:
36:3e:9a:63:f5:53:f0:50:94:c7:c8:8a:e0:c2:60:
42:4f:40:79:c2:62:71:80:8f:88:2e:cd:d7:39:2f:
a5:12:1f:b9:75:76:ed:0a:c8:71:b2:d8:3b:10:05:
a9:62:ec:ba:c6:46:1d:ee:2d:58:10:5c:89:82:f3:
6c:1c:de:72:78:70:2a:b6:d8:04:9f:6b:4b:72:eb:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:13:70:AF:41:80:76:C0:A9:9A:31:F5:E8:85:8A:FB:AB:4C:20:8C
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0f:8c:aa:28:4e:78:b1:b7:be:b6:ae:9d:9a:2d:61:92:4a:
dc:37:bc:28:e2:64:fe:a6:ea:58:7a:91:fb:f4:66:3f:c1:fd:
83:72:35:da:22:ec:b3:82:f7:9f:cd:1a:d3:00:36:61:41:49:
0b:6c:02:23:c2:05:42:8e:f6:4a:f9:b4:53:1e:5c:ca:da:3e:
68:b4:c9:af:4f:57:cc:51:88:aa:0d:20:72:bf:12:72:da:84:
35:cb:ef:2f:1c:f8:49:b7:60:d2:4f:02:9b:07:94:6a:4e:74:
47:d5:b2:f3:60:f5:17:9d:9e:64:f2:b3:1b:9f:ec:59:fc:9f:
1e:67:9a:c4:08:2f:4d:23:16:5a:b9:90:e3:f8:6e:23:db:c0:
88:07:ad:14:43:55:f3:3e:14:3d:24:d7:2a:62:09:65:f8:e3:
77:ed:1e:27:9f:5d:4d:65:19:fe:c6:ff:30:73:f8:ef:b3:57:
9a:53:dd:b4:c2:1e:3b:4d:12:ca:87:bd:41:3c:50:c9:36:0d:
5f:94:47:b2:e9:81:12:cb:62:90:92:e1:cd:c7:0d:39:cc:8f:
61:55:b7:38:46:83:9e:0a:0d:c9:87:7f:2d:4a:0d:3b:09:37:
4e:fb:92:d7:53:fb:d7:0c:06:7f:7a:32:e4:91:1b:13:37:13:
0f:5e:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:14:20 2026 by rpki-client