Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: H2ipYGss2zKJNurE5J8GdhLKLbPC7kzIeph7P7011qU=
Subject key identifier: E9:37:A4:3D:2D:17:31:39:0C:1E:2C:49:FA:CE:9B:36:BD:F5:A8:2D
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019F1378171F0DBEFA7C1EEE55D90A8C8632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 16B1
Signing time: Mon 29 Jun 2026 13:01:04 +0000
Manifest this update: Mon 29 Jun 2026 13:01:04 +0000
Manifest next update: Tue 30 Jun 2026 13:01:04 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: nYT86PgSFFYT1Bv6QSusKMYQX4/WSHKgx1qzilNXngw=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:78:17:1f:0d:be:fa:7c:1e:ee:55:d9:0a:8c:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jun 29 13:01:04 2026 GMT
Not After : Jun 30 13:01:04 2026 GMT
Subject: CN=e937a43d2d1731390c1e2c49face9b36bdf5a82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:2b:32:28:80:e6:da:96:9f:78:3e:8f:18:
b5:e6:bb:34:22:51:13:b6:79:f0:ea:34:24:77:2b:
c3:a2:97:9a:79:aa:9f:7b:84:af:be:d8:bb:8e:3e:
08:da:4c:00:eb:1b:ed:da:a2:3c:b6:52:38:a3:ca:
9e:42:22:61:d5:21:bd:8b:57:9f:88:a4:e5:34:b5:
50:11:98:ae:57:dc:68:5b:96:58:65:14:b2:8e:b7:
5c:66:9e:cc:a3:0c:c6:6f:77:35:f0:78:c4:e7:74:
c5:46:44:5a:e5:59:41:2f:6e:98:df:8c:9a:2a:57:
c1:8f:6e:9b:95:2c:1e:2e:6a:1e:4d:3f:0b:c0:51:
74:db:49:16:ec:39:57:69:29:16:45:14:12:ae:c2:
a8:b9:50:b6:2b:e6:96:57:8d:9b:21:f0:f1:6e:67:
cb:62:f1:3f:c0:98:ab:b1:96:ea:75:ec:cb:78:04:
f0:eb:16:3f:77:0f:07:ee:fd:b8:cc:b4:04:ad:c6:
32:d1:10:5d:af:c7:04:f7:8f:42:c9:52:82:fc:14:
50:0f:84:c0:3a:1c:19:05:b8:ba:ed:9f:ea:35:25:
60:36:de:51:88:1a:41:8a:ae:8c:30:7a:19:b7:c1:
44:1f:da:ec:12:97:0f:18:bb:f0:f1:41:21:8c:11:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:A4:3D:2D:17:31:39:0C:1E:2C:49:FA:CE:9B:36:BD:F5:A8:2D
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:75:52:5e:57:54:24:d5:eb:e0:86:05:6c:b1:96:24:29:
ea:1c:53:b8:93:48:e7:57:0c:b7:93:1c:17:25:8d:7e:5e:f3:
bf:fc:1f:ed:73:91:2b:e2:54:de:c4:13:08:de:03:95:76:c3:
5a:92:86:cd:1d:e0:c1:97:04:ca:1d:94:57:16:91:bd:34:94:
f4:55:b8:06:e7:77:53:2e:d8:ee:61:30:03:ad:bf:46:95:1a:
46:02:f6:91:19:59:fd:78:8d:33:6c:70:7f:2d:64:ee:eb:94:
78:28:33:68:6a:1e:56:73:62:ea:3a:9b:af:f0:55:75:e9:00:
a8:96:46:cb:0f:5a:af:67:7b:37:a2:2d:5c:88:8b:9c:a8:60:
47:81:a4:00:2f:2b:7e:5e:bd:73:10:9a:3a:9e:ef:43:be:89:
87:0c:8d:fd:c4:ac:ad:a6:d6:04:b9:5c:b9:4f:79:e3:8c:33:
38:0d:27:ca:ab:0e:b3:4d:8d:fb:3b:8e:61:b3:0a:9c:f3:50:
fe:cb:7a:62:1b:4f:ec:c5:ec:c6:7a:13:ee:4e:4e:1e:e6:55:
b8:b5:fb:b8:f4:48:8d:ff:2b:0e:79:d8:58:d2:53:fd:58:88:
0e:ac:24:22:e4:33:52:67:00:31:be:cb:ce:32:a4:58:10:3b:
2e:1f:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:34:42 2026 by rpki-client