Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: fv+B2dujCuZYasgUMmND5a8bAfLmuEt1LbIVFCYbiV8=
Subject key identifier: 99:AE:25:7F:B5:0B:B3:4F:2A:09:43:11:24:E9:40:7C:2E:A3:0D:39
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 01A00101E6082DF5C717E3339F25752C19FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 172C
Signing time: Fri 14 Aug 2026 16:01:36 +0000
Manifest this update: Fri 14 Aug 2026 16:01:36 +0000
Manifest next update: Sat 15 Aug 2026 16:01:36 +0000
Files and hashes: 1: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (hash: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: +a8Dm9bMmmhsWJoeAB4gkcRqmr9hH0BHB6p+znG5XPg=)
3: TT3NuIk1jnUlKN28ZgYKJPiSqvg.roa (hash: 5qXHnDoMl4Q3U+1gYr+pAeCUGStPZ9XDhx99c3xsil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e6:08:2d:f5:c7:17:e3:33:9f:25:75:2c:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Aug 14 16:01:36 2026 GMT
Not After : Aug 15 16:01:36 2026 GMT
Subject: CN=99ae257fb50bb34f2a09431124e9407c2ea30d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:4c:3e:68:9b:71:ad:7b:72:d2:94:d6:5e:
d9:7c:1e:5c:09:ea:c6:80:1e:93:fa:7e:ac:37:31:
4a:87:ab:70:2d:63:b2:40:d4:da:d9:c1:52:aa:25:
9d:01:ea:cd:39:08:f5:7c:b5:dd:d1:9e:58:c2:71:
82:36:58:d0:3b:14:19:d3:4c:4c:0e:8b:5a:0c:7d:
87:1e:8c:4d:82:fd:d7:40:24:b0:74:4a:93:40:e6:
b7:94:25:14:01:d6:42:a3:5c:81:1f:29:af:29:ea:
d2:7c:23:e2:a3:49:3c:51:97:de:07:ac:f5:95:51:
23:30:cc:93:00:90:93:61:48:58:a8:ef:b6:f0:53:
d6:81:f3:76:ec:86:89:37:ef:25:2d:f0:1b:c8:b1:
b7:fd:01:e7:9d:11:47:79:a2:2f:dc:fe:d4:9b:57:
48:71:75:51:1f:8f:87:13:a2:c9:1f:0f:fa:f7:4e:
17:28:ce:5c:4d:89:68:6d:4d:78:b7:08:c7:fc:16:
e1:9e:93:2b:9d:4e:9a:9e:4b:9c:87:39:d2:59:13:
8f:da:2f:31:55:f5:81:bf:c1:83:ac:e5:37:a0:c4:
ff:69:81:23:e6:f2:c2:b7:2d:a0:1a:14:6f:d3:6d:
60:ca:c5:86:7a:fe:b0:f0:4d:63:a6:e7:ee:37:46:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:25:7F:B5:0B:B3:4F:2A:09:43:11:24:E9:40:7C:2E:A3:0D:39
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d1:e7:db:a5:18:fa:c2:9f:b9:37:97:cc:b2:66:b0:1b:27:
9e:41:4d:fd:12:d4:be:3d:05:ef:1c:f1:d6:8b:bd:cc:89:c9:
35:00:e6:e8:df:48:e2:9a:de:d5:61:6b:91:2c:57:e6:60:6b:
dd:f4:cc:59:1e:23:33:4c:31:58:8e:56:16:82:db:c6:04:11:
f3:1c:94:5a:82:e5:e3:e1:8a:3f:8b:9a:0d:69:e8:66:7c:12:
68:bf:1c:aa:d9:bd:ff:aa:ba:dd:d3:01:7f:a3:98:90:7b:9a:
a1:69:e6:53:35:89:ad:d4:8d:5e:ec:ca:eb:19:6f:e5:ea:4e:
f5:c2:03:77:70:d7:26:65:2d:89:4e:7b:27:bd:23:49:f0:81:
d4:8e:c2:e4:b3:9c:f8:db:4d:d0:f1:41:76:79:b4:af:45:81:
95:e4:7c:c0:e9:dc:0f:72:6c:2b:c0:58:6c:c4:af:00:00:40:
ef:50:e5:46:cb:96:1e:89:e4:a3:fb:41:94:b4:bb:11:fa:f9:
59:c1:f6:64:de:58:bc:a3:23:0e:bb:0e:b4:8a:f2:1d:82:fe:
82:65:f1:63:9d:43:35:15:e4:1d:5f:eb:0d:43:9c:78:2c:cd:
63:79:f6:85:8f:a4:96:b7:13:09:e3:43:61:0e:1d:9f:b1:28:
29:8e:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:05 2026 by rpki-client