Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: 5xyY8EHyBUhoksa187Z9FnyHVlplwhh3mZ94zJpF7Vc=
Subject key identifier: 85:AF:DC:77:A8:0B:08:50:8A:C2:9B:BD:89:55:0F:AA:86:F0:4A:AE
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 01A14C501328ADB6A018FCE10DAA61C31A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 14ED
Signing time: Sun 18 Oct 2026 00:01:18 +0000
Manifest this update: Sun 18 Oct 2026 00:01:18 +0000
Manifest next update: Mon 19 Oct 2026 00:01:18 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: U5wZAcZ4j+7Yh92ZPYMGE8unPYGLnVqKGoL9d7ZE6xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:50:13:28:ad:b6:a0:18:fc:e1:0d:aa:61:c3:1a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Oct 18 00:01:18 2026 GMT
Not After : Oct 19 00:01:18 2026 GMT
Subject: CN=85afdc77a80b08508ac29bbd89550faa86f04aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:6b:5e:34:ec:c0:2c:9a:42:0d:0f:1a:db:
90:e7:68:2c:09:7c:ca:f4:aa:55:92:95:f8:36:9f:
f5:4e:5e:05:29:0b:ee:12:42:48:cd:86:28:fb:eb:
a9:0a:9b:4e:78:35:60:a5:73:b4:4f:a1:c0:9d:dd:
a7:dd:db:85:01:3a:b5:62:b9:76:19:e6:50:22:b7:
e5:ac:74:f4:f4:13:c6:c3:57:9d:74:2b:60:90:29:
6c:f5:c1:7f:ba:a6:ba:5a:00:bf:86:64:91:f4:ec:
18:5a:ad:e7:a2:7f:a1:83:ca:33:c1:1f:c9:e8:f6:
7c:1d:3a:e3:d9:a9:8c:21:97:fc:9a:22:3b:0f:e0:
b7:d7:e1:8e:f0:48:59:ea:46:0d:75:76:31:ea:5d:
f5:6b:27:5d:55:24:6f:77:89:5e:24:b8:b5:2d:3a:
73:45:3c:36:d4:74:5b:44:0b:46:15:76:63:9d:e7:
00:3a:b1:7d:5f:2f:28:eb:f1:da:01:9f:dd:38:df:
d7:fc:cf:aa:16:9d:91:10:23:7a:dc:ce:a9:18:f6:
69:17:56:7f:4f:3a:71:67:43:b1:1d:b4:d6:49:69:
ad:4d:d9:20:17:16:8b:45:2b:24:32:a8:27:44:b9:
43:e9:81:2a:f3:14:8c:32:d8:ef:9b:6f:9c:04:60:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:DC:77:A8:0B:08:50:8A:C2:9B:BD:89:55:0F:AA:86:F0:4A:AE
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2e:cd:7a:b4:23:69:ce:a9:ea:b4:58:87:c7:5c:43:8b:fd:
4e:7a:61:f1:6c:d8:db:20:c1:80:95:b0:f8:5d:b2:55:f8:be:
58:ba:c0:36:60:4a:51:4c:c8:35:4f:99:cd:1d:b6:5d:68:b3:
af:b1:e9:be:c0:8b:a0:fd:65:0a:3b:55:66:b7:2e:45:e1:54:
dd:fd:7c:b1:3a:ea:1b:a7:bb:91:2b:15:c3:ae:8a:39:5a:4b:
97:98:60:30:ce:3f:1f:50:74:23:11:57:b0:44:75:e5:54:c4:
6a:fd:77:96:10:b1:85:33:63:4f:a6:d3:c8:34:61:e4:32:38:
20:4e:52:03:52:08:73:2d:f5:cd:5e:6b:56:dd:94:6c:02:18:
40:61:a1:5e:a3:7c:21:ba:ad:52:2a:aa:9c:1a:1d:76:c3:5d:
8b:53:c0:67:ce:e8:09:09:db:94:31:2e:e3:cf:fd:b6:df:22:
81:89:3a:66:97:b9:b4:e4:4b:58:86:9b:74:f3:58:ea:3e:d9:
f3:40:40:a1:2b:06:7a:c1:a4:cf:d7:66:51:d8:35:e6:1b:7e:
01:fa:8a:fd:54:2b:e0:f4:41:ea:9b:ef:d9:28:fb:1f:92:81:
2a:48:6d:f5:79:a5:3c:cc:1c:d2:1b:5e:31:fc:3c:5b:ab:55:
a1:49:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:34:02 2026 by rpki-client