Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: i+zJB96kJDpUsCtv2w+L2J9l8dopb3h0HcCnj8afUyQ=
Subject key identifier: 6D:38:C3:B7:1A:6A:74:54:FD:77:3E:AF:18:D4:B1:62:8E:C7:07:92
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019E29CC7B4A91F821C53C9D7183581418F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 1638
Signing time: Fri 15 May 2026 04:02:06 +0000
Manifest this update: Fri 15 May 2026 04:02:06 +0000
Manifest next update: Sat 16 May 2026 04:02:06 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: 0i10xvFwKs0ld609AcroE0QHGpIxjazp0zz+NDCbuNI=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:7b:4a:91:f8:21:c5:3c:9d:71:83:58:14:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: May 15 04:02:06 2026 GMT
Not After : May 16 04:02:06 2026 GMT
Subject: CN=6d38c3b71a6a7454fd773eaf18d4b1628ec70792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:48:78:6f:63:86:10:84:5e:4b:59:a3:74:
d7:89:e7:a8:12:86:5c:29:ad:cf:dc:5b:6f:2c:39:
56:35:f8:57:76:e1:c5:23:3d:04:8f:f0:a8:27:bc:
3a:1b:34:0c:07:dc:3c:ad:b6:46:1c:b9:df:06:08:
c4:cf:c3:6e:4c:37:29:53:a1:c9:e7:ff:27:e7:6d:
22:a5:91:68:6e:db:aa:00:62:e2:ac:0a:1b:38:d2:
f8:cb:f2:64:1d:5e:50:ae:c1:4e:a6:9b:6b:5a:82:
41:6a:98:d4:a3:de:ef:6e:7b:f7:81:38:43:f4:db:
4b:9a:f0:71:5e:cf:b7:d5:0a:29:93:9c:f3:13:13:
3c:c9:c2:fe:f4:a5:88:96:ea:7e:f2:c4:86:94:d9:
40:f7:7b:59:78:df:17:ed:1a:4b:58:34:5c:25:96:
45:2f:ca:44:ad:11:70:75:f6:33:5a:4e:4d:d1:21:
8a:99:07:2d:9b:a9:aa:ab:c4:8b:ed:86:97:4a:34:
67:cd:d0:89:dd:2d:c8:1e:e4:3d:c4:33:1d:83:5e:
53:ca:08:a5:8e:bc:2e:8f:8f:9a:ed:32:98:90:60:
fa:50:21:05:29:cb:68:7f:56:e6:38:30:65:af:e6:
36:43:3e:c3:b8:8f:2b:67:78:8e:7b:df:64:3e:24:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:C3:B7:1A:6A:74:54:FD:77:3E:AF:18:D4:B1:62:8E:C7:07:92
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:55:99:f5:c8:5a:fd:ec:d6:89:17:fb:44:6e:f9:65:11:5d:
51:30:15:03:9e:5f:94:7c:8c:22:0d:01:c1:e1:82:f9:69:87:
f1:52:bf:99:33:f0:81:91:ac:30:57:9c:e7:87:bd:36:85:aa:
c5:5b:60:87:03:d1:37:0e:35:46:c1:eb:c9:b0:69:b1:f3:4a:
12:a4:53:d0:cc:26:c7:a6:b5:b1:79:94:ad:2c:4a:d9:6b:58:
c9:a6:92:44:33:ac:c0:ee:62:a3:77:d0:7b:b1:68:e1:cd:34:
1b:07:c2:98:56:8a:22:06:54:e2:98:12:6c:26:d4:df:9e:22:
8e:02:09:27:47:ad:be:42:ef:cb:d9:3b:22:98:9d:cd:55:8a:
14:ba:bd:95:b7:50:74:a7:22:e7:9d:71:38:2f:2a:83:3e:9e:
63:7c:76:0d:a7:c7:e1:3c:90:36:83:c9:bf:38:15:1a:3a:88:
2c:9a:cd:3a:b8:2c:a3:e5:67:a2:1a:a0:23:88:49:88:a2:0e:
1e:42:e4:81:f5:b4:4d:3f:9b:d6:a1:c8:82:b1:be:7b:48:4c:
4f:e5:3c:58:2a:d6:91:97:1b:21:73:e2:91:fe:20:6f:90:4e:
3c:d3:f2:49:37:d0:30:73:36:67:ff:99:aa:18:43:86:97:5e:
12:de:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:43 2026 by rpki-client