Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: yPQooi42EzW6zpqHcA5nHjDkeoIgIfJ9UWteOwEBKM0=
Subject key identifier: F0:C8:5D:A7:47:1B:04:F7:FB:D1:6F:5B:97:35:72:AD:34:59:72:A8
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01A12A9F68041894F94CF422799BEEEEBB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1AA0
Signing time: Sun 11 Oct 2026 11:00:52 +0000
Manifest this update: Sun 11 Oct 2026 11:00:52 +0000
Manifest next update: Mon 12 Oct 2026 11:00:52 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: JL/tTbeFqcK6FDKfIPgO2qJ2NU0wXYWVixoP3msXPfk=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:68:04:18:94:f9:4c:f4:22:79:9b:ee:ee:bb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Oct 11 11:00:52 2026 GMT
Not After : Oct 12 11:00:52 2026 GMT
Subject: CN=f0c85da7471b04f7fbd16f5b973572ad345972a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:57:ae:8f:52:93:82:cf:d2:34:d1:87:be:
60:fe:39:5e:85:fa:f5:92:d9:25:09:94:cf:0e:54:
62:d1:cf:54:5c:f6:99:00:3e:35:b3:95:92:db:28:
66:27:b8:3f:f9:87:2c:d1:3d:d2:6d:a5:8e:90:cd:
b7:8a:d3:e6:9f:ca:de:18:e0:07:2c:67:a2:36:bb:
15:55:a1:bd:42:c6:50:84:bf:01:9b:5c:3a:c2:72:
5c:de:10:eb:1a:a6:88:be:ca:4c:79:75:dc:13:9a:
37:e6:e7:24:20:14:de:d4:c0:66:b4:ab:3e:c7:5d:
d8:4f:79:e9:44:6e:1e:fa:c4:89:b1:a9:e9:4b:87:
90:5b:11:21:eb:69:e0:be:bf:c5:ad:ef:92:38:17:
94:e7:5f:ab:01:a3:63:bb:5d:9c:61:fe:b8:37:45:
b9:7e:d6:86:12:bf:83:56:8f:78:59:69:ac:1a:81:
2a:9f:c4:15:6d:0e:49:f9:06:02:b1:ba:e4:e7:16:
e9:95:74:68:9c:22:58:9c:93:6a:19:2b:b0:02:88:
04:00:2f:d4:6c:c0:2d:af:c9:f4:42:0e:33:09:e6:
29:dc:78:5f:98:be:7b:74:c4:6c:46:76:0c:15:ae:
a8:b4:43:b6:57:bf:da:42:34:9c:e3:24:61:21:37:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:5D:A7:47:1B:04:F7:FB:D1:6F:5B:97:35:72:AD:34:59:72:A8
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:4d:2e:cf:ea:2b:a4:fc:6c:72:ec:c1:0c:d5:4a:59:3c:
c5:02:29:70:98:2e:69:d9:ba:79:3b:23:96:e4:f3:4c:f9:6b:
42:23:ef:f8:52:77:40:c8:1a:2d:24:54:15:a9:f6:f3:8b:a3:
a9:90:3b:fd:d2:73:b2:38:b8:81:c4:44:cf:bc:a3:22:88:94:
a2:9a:fd:0f:41:5c:f3:e3:25:57:91:26:96:f7:6a:2e:02:f1:
b7:7a:41:2c:91:71:10:5f:be:17:da:5a:01:53:76:62:bd:40:
b6:3e:2f:4c:c0:c8:65:c7:4d:02:d8:38:ef:0c:54:0d:63:54:
5b:ec:9a:c9:d7:6a:92:15:b9:7e:7b:65:f4:89:a1:d9:79:e8:
42:bb:ca:56:12:48:80:ee:4d:b0:cc:fe:a1:89:b0:7c:57:33:
5b:49:01:58:df:0c:2c:c7:19:b9:04:16:fb:e5:bd:aa:95:33:
5c:75:de:4f:cd:bf:03:8b:e8:23:79:b9:d5:cc:4d:0b:a9:1e:
01:bc:9e:80:82:1c:98:5f:cc:6b:89:8c:f0:7b:94:5c:18:a4:
b4:87:7b:64:a3:48:70:d2:db:96:1c:89:3c:5d:98:be:ee:fa:
fe:a0:1e:7b:25:63:b0:b7:b7:9f:66:18:44:c6:ce:4e:5a:19:
e9:06:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:07 2026 by rpki-client