Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: jusslmdMduHR0+9c7r6ENio6SJXMvX/JrSuB8JYwjd8=
Subject key identifier: A8:ED:3F:5C:64:B3:4C:88:AD:FE:F3:E3:4E:D0:25:C3:91:84:C4:0F
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019D37895ACA11CAB35C89AE576723D68086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 12D0
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: ErcSVLCKfVh7C7Ixfl/b7XbljhwZBYht8/gTAUrdF8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5a:ca:11:ca:b3:5c:89:ae:57:67:23:d6:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=a8ed3f5c64b34c88adfef3e34ed025c39184c40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:a6:3f:c8:6a:4d:89:81:51:65:29:38:59:
a9:10:79:fd:e7:ea:a7:96:8e:9e:95:c0:3d:44:31:
2e:cb:60:5b:a0:f5:7f:f0:82:19:41:d9:f5:3b:56:
fb:3a:fc:bc:64:74:1a:ba:b8:dd:48:98:52:b6:10:
28:e1:9e:27:5e:3d:5a:c3:e9:36:7a:da:b4:52:59:
bf:47:64:08:b2:8a:ef:c0:02:a4:25:12:1d:bb:2b:
69:c3:2f:f1:90:40:ba:18:4a:41:f8:41:78:48:ea:
fb:51:74:50:74:29:f1:23:e5:de:eb:78:a9:1c:88:
68:bf:fb:60:ed:72:b4:5a:c4:eb:57:05:4e:87:22:
9f:40:38:4a:e5:1c:88:9f:e6:5d:d2:c1:35:dc:da:
18:3a:65:c6:78:12:4e:55:fe:57:a8:b2:08:32:a8:
7a:ba:a7:37:a8:0d:82:32:33:3c:f3:5d:8b:17:61:
7e:b5:be:e2:ae:ae:99:5f:4a:2b:64:e3:9f:86:00:
dc:5a:9c:4d:8e:5c:17:11:86:5a:04:92:0f:d5:03:
1d:8d:cd:7a:66:e2:07:7a:64:cb:c4:81:3c:09:d6:
8b:61:bc:a1:32:1f:3e:96:16:5e:7e:61:8a:53:d1:
9e:05:08:51:b4:ea:cf:47:dc:5d:75:28:94:fa:b4:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:3F:5C:64:B3:4C:88:AD:FE:F3:E3:4E:D0:25:C3:91:84:C4:0F
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4c:55:a4:c2:bd:fb:af:6b:8a:75:0f:e6:3c:d4:4b:b6:5c:
82:d1:d5:b1:a5:f9:fa:78:aa:02:e4:a0:33:f6:a0:f1:f9:03:
64:53:ca:d2:5c:44:60:53:6d:58:4e:5e:e0:8a:93:1b:a0:7f:
af:6f:e1:85:6b:4f:08:5c:2c:1f:99:7b:87:28:df:25:c1:52:
cb:2c:25:44:6b:bd:2e:f7:6c:22:ac:d5:2d:38:1e:6c:f2:ce:
b5:62:e2:5e:32:24:83:cf:27:8c:9d:74:35:62:0b:3a:d1:62:
e1:b3:20:be:4e:82:d8:b1:59:b0:14:28:37:02:33:e2:19:ed:
c9:be:a8:75:67:c0:73:94:9b:3e:10:45:92:ce:81:a2:f9:af:
6c:0a:60:67:c5:37:71:50:7f:f6:5e:d8:25:5d:c2:9d:77:b0:
a3:02:5e:75:aa:28:2e:b3:58:55:56:5f:fc:24:00:c1:ba:b9:
59:60:ad:e7:1b:61:29:b5:d4:59:df:7e:c9:0c:d9:88:c9:e5:
d5:d6:c4:34:00:76:a6:08:cf:fc:ad:60:58:16:99:5b:8c:20:
80:94:2c:c2:39:4a:1d:c5:fe:68:cd:af:24:4f:fd:f6:f1:62:
50:fd:f0:8b:89:e6:9c:7e:8a:4e:de:0e:60:a2:25:6b:0e:9e:
e3:df:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:52 2026 by rpki-client