Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
File: CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json)
Hash identifier: wvY6uTNkbv3uWXNlnrSj/fJCFQ1a+nuYN81g1t31HS4=
Subject key identifier: DF:4A:88:F5:C1:44:CF:62:8C:D9:23:D1:52:CA:B4:D9:13:B1:C8:0F
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial: 01A03FE01F95DFEFE0BD4D5CDBA139C778AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
Manifest number: 0381
Signing time: Wed 26 Aug 2026 21:00:47 +0000
Manifest this update: Wed 26 Aug 2026 21:00:47 +0000
Manifest next update: Thu 27 Aug 2026 21:00:47 +0000
Files and hashes: 1: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: 76vynW3RW28S1yfp7AzTDAA1ii/dpjh1S2pD5AreGFk=)
2: Hm_m491XoXkRYN13NObfd481Amk.roa (hash: aw00i43ojCPAL/bMwtW4sU2iXT88omwAr6mDI5/DvVY=)
3: PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa (hash: TNQeQoC/qT98wAaweVjAuTu11UnJIuOyyoosQn8fzXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:1f:95:df:ef:e0:bd:4d:5c:db:a1:39:c7:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Validity
Not Before: Aug 26 21:00:47 2026 GMT
Not After : Aug 27 21:00:47 2026 GMT
Subject: CN=df4a88f5c144cf628cd923d152cab4d913b1c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:dc:bc:be:d2:e4:1a:4a:0e:3b:5a:79:85:
43:3c:44:20:7a:cf:a8:f5:2c:db:a9:d2:c1:50:11:
fd:77:07:19:00:02:8d:bb:99:2a:d5:1a:24:1b:ab:
38:8f:0f:0f:1b:4a:17:9a:cb:6f:ac:30:02:13:3c:
5f:af:bd:2d:ba:2b:f1:3e:49:8d:97:50:0a:33:4d:
eb:8f:38:53:11:24:e5:39:3a:d1:52:90:94:73:02:
9d:65:d1:ae:60:b2:0a:57:9b:e1:56:b8:68:32:f9:
4e:33:d6:83:b8:42:e1:54:59:a4:1d:af:02:ad:55:
ff:b5:a2:a4:6f:c1:8c:49:71:c7:97:35:b6:46:33:
91:da:ae:da:71:7f:af:c5:c4:cb:67:f3:35:76:3a:
98:10:72:c0:b8:da:db:50:b9:b6:2b:bf:18:28:82:
2d:ec:c9:4b:4c:19:58:c5:da:bc:bf:b6:14:47:a1:
bf:e4:03:1e:c1:d4:76:2f:4b:55:5d:e8:3a:26:07:
50:01:d5:51:aa:24:d0:88:54:a8:9a:fe:70:98:13:
64:19:42:ed:a0:78:3f:1f:f8:62:9b:ce:b5:93:98:
9e:be:7c:67:98:88:a1:80:15:f8:5d:49:0a:10:bc:
e6:87:9a:19:ef:cc:be:eb:44:b0:cd:c9:4b:77:cd:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:88:F5:C1:44:CF:62:8C:D9:23:D1:52:CA:B4:D9:13:B1:C8:0F
X509v3 Authority Key Identifier:
keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:14:6c:7d:2d:fb:f3:35:83:5f:6c:09:1f:c3:11:60:e9:e4:
a4:9d:b2:30:c2:60:c9:08:8e:0e:41:2c:85:95:6e:aa:eb:29:
f2:f7:75:30:c6:b2:5a:b9:51:cd:0e:65:a7:26:43:f7:f9:21:
3e:f6:b9:21:bb:c2:c6:bc:b3:6b:bb:af:69:85:7d:21:eb:8f:
f1:4c:21:0d:15:f2:5b:9f:57:cc:64:74:03:c0:59:94:d0:68:
df:68:70:3e:c4:99:01:80:73:36:12:5b:73:e9:1f:9b:c4:f1:
aa:70:da:92:ab:ae:ef:71:c6:84:ba:1a:ee:eb:6a:7f:b2:b8:
54:aa:92:ed:25:f9:02:2b:5d:30:4f:1e:5b:3e:df:0a:ad:32:
3c:ba:2a:b0:1a:fa:1f:1d:9a:f5:7f:1c:91:ff:8d:5e:43:4e:
c8:5b:ea:0b:a2:25:3a:2a:a0:e6:24:6a:21:7c:e4:dd:2f:cf:
28:c3:43:da:67:e5:4d:10:c7:88:6a:71:9a:7e:7d:76:4d:c3:
55:09:64:0a:d2:40:f7:1a:7d:35:9a:aa:a8:92:a2:56:93:eb:
eb:17:9b:2d:7e:12:a9:b1:40:6e:06:76:e3:4a:18:67:98:1b:
2c:44:32:e8:ef:54:91:db:ac:42:58:f6:3b:2c:ae:9b:6a:2e:
27:99:2c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/4B+V3+/gvU1c26E5x3ivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmI1NGIwNWFmNWUzZTg3NDNlN2JmNGFmNDFlYTYyMmJi
MDk0MTEwHhcNMjYwODI2MjEwMDQ3WhcNMjYwODI3MjEwMDQ3WjAzMTEwLwYDVQQD
EyhkZjRhODhmNWMxNDRjZjYyOGNkOTIzZDE1MmNhYjRkOTEzYjFjODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgDcvL7S5BpKDjtaeYVDPEQges+o
9SzbqdLBUBH9dwcZAAKNu5kq1RokG6s4jw8PG0oXmstvrDACEzxfr70tuivxPkmN
l1AKM03rjzhTESTlOTrRUpCUcwKdZdGuYLIKV5vhVrhoMvlOM9aDuELhVFmkHa8C
rVX/taKkb8GMSXHHlzW2RjOR2q7acX+vxcTLZ/M1djqYEHLAuNrbULm2K78YKIIt
7MlLTBlYxdq8v7YUR6G/5AMewdR2L0tVXeg6JgdQAdVRqiTQiFSomv5wmBNkGULt
oHg/H/him861k5ievnxnmIihgBX4XUkKELzmh5oZ78y+60SwzclLd83c8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9KiPXBRM9ijNkj0VLKtNkTscgPMB8GA1UdIwQY
MBaAFAgrVLBa9ePodD579K9B6mIrsJQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOTAwYTEtOTI0Zi00OTZhLWFkNGMt
MTk1MDYwNjcxYTBjLzEvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wOTAwYTEtOTI0Zi00OTZhLWFkNGMtMTk1MDYwNjcxYTBj
LzEvQ0N0VXNGcjE0LWgwUG52MHIwSHFZaXV3bEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBRsfS37
8zWDX2wJH8MRYOnkpJ2yMMJgyQiODkEshZVuqusp8vd1MMayWrlRzQ5lpyZD9/kh
Pva5IbvCxryza7uvaYV9IeuP8UwhDRXyW59XzGR0A8BZlNBo32hwPsSZAYBzNhJb
c+kfm8TxqnDakquu73HGhLoa7utqf7K4VKqS7SX5AitdME8eWz7fCq0yPLoqsBr6
Hx2a9X8ckf+NXkNOyFvqC6IlOiqg5iRqIXzk3S/PKMND2mflTRDHiGpxmn59dk3D
VQlkCtJA9xp9NZqqqJKiVpPr6xebLX4SqbFAbgZ240oYZ5gbLEQy6O9UkdusQlj2
Oyyum2ouJ5kstg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:30 2026 by rpki-client