Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: 22iHY7ClQh1IBrerUGhbwyKZdgRV+dR/HqOUpQJd9zk=
Subject key identifier: 67:F2:C8:C0:09:A7:23:9F:53:C6:41:07:7C:C4:01:66:3A:FC:CC:BC
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019D389C192E75D7BEE6FD150A2BA5BAF5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: Y5WVKWn1FgJBjVyWeGJ4UDdYzwL1gPN0jTnwWwCGio4=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:2e:75:d7:be:e6:fd:15:0a:2b:a5:ba:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=67f2c8c009a7239f53c641077cc401663afcccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:c6:f1:4e:94:61:76:b6:07:48:e8:ab:81:
f6:5d:29:ee:8a:a3:3e:80:c8:26:a9:c6:3a:b1:1a:
1f:7d:e9:4b:e7:8b:4c:31:9d:0e:64:e9:5d:5b:2d:
db:cf:2f:1a:bf:ad:c0:f3:54:66:54:41:f2:83:ca:
1a:d4:a5:59:ee:7b:f7:f9:35:8c:9c:09:55:fa:63:
f2:34:e0:6c:1d:1d:b1:57:54:fa:cf:09:ae:d9:1a:
5b:e8:1f:d4:8d:84:7a:09:4a:f3:fd:71:51:72:7b:
17:a5:8d:71:d9:9e:96:d7:e3:ae:e3:df:a4:3d:91:
a7:60:d0:de:f6:ab:35:fe:ad:22:e8:13:ec:11:67:
85:5e:fd:34:de:c8:64:2c:fc:6c:ca:e1:a1:f0:d7:
e2:25:c1:93:a3:c3:67:5d:fc:10:8a:47:f8:9a:fd:
9b:61:33:4f:3d:c3:1b:b3:74:d2:4a:d8:1c:7d:63:
db:7c:0e:87:a7:55:3e:7e:16:ac:52:d9:54:b3:94:
37:e7:de:47:d1:fd:dd:b6:d5:26:3d:65:0b:d8:42:
11:b4:ff:4d:20:15:22:d2:4e:d9:b6:8a:a0:b3:11:
7a:ee:7f:5e:8d:af:d3:fa:06:a6:b5:7b:00:2a:ec:
9a:ac:48:cd:c5:64:32:cc:8f:01:fd:c1:3b:56:b9:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:C8:C0:09:A7:23:9F:53:C6:41:07:7C:C4:01:66:3A:FC:CC:BC
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e0:ab:07:99:62:76:dd:14:c0:52:06:a4:7a:c9:2e:7f:37:
d8:a2:a4:7b:5e:e6:c9:06:3a:39:a2:41:bf:c3:40:e0:7e:af:
19:fb:32:3d:62:ed:83:69:0a:38:d8:b9:14:66:72:3f:e9:6c:
50:01:a7:4a:c0:e3:5d:36:5e:2f:55:eb:8d:5e:04:bf:04:cd:
4d:36:c6:b7:fe:eb:8f:87:d7:f1:cc:20:72:44:08:84:e4:fb:
98:f9:ae:19:b8:5d:43:51:e5:fa:aa:73:3e:2b:48:74:d0:97:
2e:63:a5:be:cc:79:19:28:90:63:ae:eb:5c:1d:cd:ab:7f:43:
4c:28:26:5f:75:f8:e3:27:68:17:70:46:10:8d:4d:92:37:a9:
3d:89:3e:fd:bc:0f:d7:68:65:d3:c2:b3:b1:04:ff:5b:99:84:
62:a7:fb:79:4c:a3:7a:84:bf:39:a3:2b:ec:19:fe:2d:34:72:
34:d2:0b:58:16:3a:8b:10:4c:1f:cc:32:24:d5:27:ff:e2:5a:
e0:79:c2:ef:f5:99:12:9b:9f:5c:c7:3b:8a:b8:54:4c:83:d6:
79:ce:9d:36:e8:4d:b1:39:5d:9c:f8:65:38:40:7d:51:02:09:
3e:2f:40:dc:b7:9c:39:80:98:c7:67:61:e5:89:07:11:bc:48:
8a:09:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:07 2026 by rpki-client