Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: +Z8zEMRbzKrQj3NdSj0+uHmLk9+Di203jH/tu+L4O7Q=
Subject key identifier: 24:D9:1F:AE:B6:CE:A1:77:1D:C3:66:4B:6B:6A:92:B1:0A:70:CC:84
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 019D3941AB0117A0B630AA3995160C52636C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 11:01:37 +0000
Manifest this update: Sun 29 Mar 2026 11:01:37 +0000
Manifest next update: Mon 30 Mar 2026 11:01:37 +0000
Files and hashes: 1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: zBqwlDz8pP6vUa4quh+b0FKsCleIWE8m7HKp7kmbJhc=)
2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:ab:01:17:a0:b6:30:aa:39:95:16:0c:52:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Mar 29 11:01:37 2026 GMT
Not After : Mar 30 11:01:37 2026 GMT
Subject: CN=24d91faeb6cea1771dc3664b6b6a92b10a70cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:39:e7:a9:4f:68:de:29:ab:c0:fc:b2:07:
64:e7:d5:ed:e4:71:5b:ef:a6:80:fa:96:83:e6:39:
66:66:c1:5b:80:be:9e:01:a6:6b:da:a1:ab:1b:b8:
ea:22:f7:12:0f:9f:60:c1:2c:41:6e:11:5f:2c:05:
c5:3c:14:b4:5c:a3:b1:43:0e:68:0c:61:67:c2:01:
50:c0:f5:88:14:6e:3f:e4:b0:1a:f9:a3:42:57:e3:
f4:7d:d3:0f:cd:06:71:3f:cf:c9:d1:42:e2:94:f6:
92:54:82:da:7a:2d:3a:2f:1e:71:bc:49:3d:21:82:
b4:c0:11:fe:f2:95:a7:7a:33:71:ce:55:23:07:45:
73:17:10:08:c7:5e:9c:53:fb:e3:ee:21:50:de:04:
9c:38:32:d3:6c:0a:fd:0b:ac:e5:3f:3f:14:c8:be:
ed:6b:b2:81:c0:f2:df:6d:43:5b:99:cf:ce:02:4c:
55:ab:7c:41:c6:f0:c9:77:80:82:64:71:7e:d1:01:
31:84:e6:79:48:a5:aa:3a:e2:aa:5b:a6:f4:9e:e4:
72:8f:a3:b4:a3:38:e7:d9:3e:55:e5:18:31:3c:43:
e9:f8:0b:bf:5e:12:8a:68:f1:2f:eb:2e:0f:46:bc:
8a:a1:79:85:3f:8a:36:99:2b:67:aa:a1:dd:d1:50:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:1F:AE:B6:CE:A1:77:1D:C3:66:4B:6B:6A:92:B1:0A:70:CC:84
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:16:51:55:e4:cd:2a:8c:f0:98:ef:ca:51:01:3b:b7:b0:
5e:c4:30:4e:ad:b6:e0:a9:0e:36:d5:47:00:d2:af:77:55:e0:
2e:b0:0a:94:a0:71:85:5e:4a:63:69:7b:ff:a4:24:eb:cc:f3:
6c:61:df:c2:cd:9f:1b:ef:dc:e2:53:1e:10:f2:4c:67:2f:f3:
6a:fd:f9:4c:f4:72:3c:85:34:70:3f:eb:9b:5a:ac:24:30:f3:
c8:0f:cf:21:1e:b7:2d:4f:01:c3:72:47:28:3d:e6:0a:97:cb:
61:da:3f:81:b2:d8:af:5f:ce:ae:4e:65:21:cf:c6:9c:d4:ac:
b5:5d:8b:2e:53:f3:85:3b:e9:90:e5:64:fd:2e:bf:10:43:82:
16:63:d8:1f:50:b5:ac:56:b5:73:8a:cd:d8:2d:b7:01:40:b3:
72:92:51:a6:df:ad:82:3e:be:70:d2:f5:4f:c8:91:18:18:2c:
02:91:5c:e6:c5:f2:c3:29:f0:57:53:ff:b8:a5:d4:05:44:43:
3b:01:ff:f0:cb:55:ec:1f:4b:cd:5f:71:1e:45:d8:f2:c7:e0:
95:bb:f1:15:02:04:48:5f:1b:4e:23:95:cf:a7:fb:df:ff:7a:
0d:13:da:82:1f:33:72:ea:3e:24:06:cb:3f:68:fb:df:32:90:
8d:9b:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:27 2026 by rpki-client