Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json)
Hash identifier: LzlR51KM7dzk+OX72RnxGLaT4Eq1WrUIxvGThG3Fzdc=
Subject key identifier: 68:4C:17:67:EB:6E:8E:6D:D5:34:5F:1B:F9:7A:9D:1A:10:B9:8B:81
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial: 019D37896FFB402EB03D0F88D999D1368B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
Manifest number: 01EF
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: QHjoLQpxTXhNqNpUoAlKUyu7oZTsijGJiVmvfp3mM7A=)
2: Hm_m491XoXkRYN13NObfd481Amk.roa (hash: aw00i43ojCPAL/bMwtW4sU2iXT88omwAr6mDI5/DvVY=)
3: PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa (hash: TNQeQoC/qT98wAaweVjAuTu11UnJIuOyyoosQn8fzXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6f:fb:40:2e:b0:3d:0f:88:d9:99:d1:36:8b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=684c1767eb6e8e6dd5345f1bf97a9d1a10b98b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:fd:ab:d8:b2:81:22:80:2b:fd:53:2f:57:
8c:04:57:be:d1:74:1e:dc:fe:8c:ac:bc:ea:94:a4:
a6:40:24:30:33:8d:a6:b5:fa:a6:82:90:46:8e:56:
6c:31:97:c1:67:ee:c8:1a:08:f5:82:38:32:15:4c:
81:19:7a:65:00:d4:85:9b:80:38:ca:a5:ee:a4:57:
cf:8c:b8:28:56:5c:29:7e:8a:3c:dc:65:d9:52:b5:
a6:7c:79:54:21:8c:6c:f1:9e:21:83:86:dc:68:86:
21:bd:69:6e:7b:c8:a3:50:d0:1d:d4:44:99:36:53:
79:87:91:5c:00:f3:06:52:b6:4f:2b:ed:89:43:4e:
eb:66:f1:84:cf:d7:72:c0:f2:d8:76:28:3f:d9:4e:
16:03:80:af:6e:51:0d:3c:53:d4:21:24:26:98:26:
c9:51:51:48:0d:a8:9a:31:b4:75:31:f9:ae:cb:6c:
a2:74:33:c0:36:95:29:81:84:7c:41:61:be:e2:67:
bd:a6:6f:f8:ef:17:4a:89:15:a3:d7:ea:2a:3a:58:
6a:19:21:f0:86:cb:90:c1:c0:81:4e:a0:04:23:a6:
36:66:b4:cd:20:aa:eb:94:ac:c6:59:ac:a5:b0:99:
68:a8:f0:e4:04:bc:51:8e:65:18:9b:61:9f:d4:61:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:17:67:EB:6E:8E:6D:D5:34:5F:1B:F9:7A:9D:1A:10:B9:8B:81
X509v3 Authority Key Identifier:
keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:58:68:7b:98:e7:d6:12:a9:1b:85:85:a6:57:ca:db:73:ce:
ac:12:80:86:ec:88:17:3f:ec:04:c3:57:50:0b:2b:cf:18:df:
9e:4e:9d:87:ae:d6:f9:75:3b:e2:59:ca:5d:5a:54:1f:a6:b3:
ad:32:8a:f2:32:21:18:54:86:3f:0d:c2:c9:d1:12:5a:c5:2f:
81:59:83:3c:87:79:d0:41:78:0a:8c:48:99:a4:cc:42:4e:4b:
cd:5b:c1:23:c6:61:b8:95:25:92:fd:98:52:1e:34:4f:9b:b4:
96:30:23:78:dc:d1:31:e8:b5:b6:8f:9c:71:e1:2e:fd:af:a0:
65:e7:40:73:96:ce:76:9f:56:00:70:e6:e9:59:9e:90:7c:fb:
14:68:34:88:f8:d6:cc:98:2d:09:0c:2c:cd:e8:e4:a0:70:90:
ac:34:02:53:5c:f3:1c:d6:9b:d8:5f:86:a6:85:40:fb:3c:f8:
7a:02:42:40:99:b2:7b:a1:b4:ea:74:da:87:d3:15:97:4f:0d:
91:e3:b0:03:30:59:48:0d:6b:fe:c6:be:37:da:18:6d:e8:98:
d1:8d:9a:1a:91:e9:5b:bb:3e:d6:4b:8b:8f:4c:3e:47:18:b8:
6e:73:5a:a6:cf:55:62:14:c2:d1:5e:a1:a0:0e:ed:7b:84:71:
81:ee:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:38 2026 by rpki-client