Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: bOFLKABmbiVezimr/NOndkgWIDvGhZWt+vAlMVzeMpA=
Subject key identifier: F6:10:C5:D9:4A:25:C4:18:47:B2:87:B5:20:3E:3B:81:34:5B:A4:10
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 01A0013848722E03C236C579CAB4CBAA4551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 17:01:00 +0000
Manifest this update: Fri 14 Aug 2026 17:01:00 +0000
Manifest next update: Sat 15 Aug 2026 17:01:00 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: xXGpfoo3etkTff7lwisNKSFKjWtJrfpm+M1pG4Qlvz0=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:48:72:2e:03:c2:36:c5:79:ca:b4:cb:aa:45:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Aug 14 17:01:00 2026 GMT
Not After : Aug 15 17:01:00 2026 GMT
Subject: CN=f610c5d94a25c41847b287b5203e3b81345ba410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:56:cb:d8:0b:36:5b:a7:bd:ab:a8:72:a8:
0d:02:80:a8:2a:58:a6:a8:9d:bb:15:7b:e0:5d:a3:
7f:ee:31:66:b1:98:1f:25:e8:14:cb:2e:82:09:4b:
0a:d4:42:f7:8d:e9:e8:59:2f:1f:82:33:d2:74:c9:
9a:98:ae:8a:d6:44:67:f4:85:aa:70:dd:9d:f6:d9:
13:5e:dd:84:da:ec:b2:70:7c:c8:dd:4a:3e:92:9b:
cc:97:e8:2c:b3:b7:fe:18:5b:ba:3d:70:54:5b:24:
be:86:e1:27:35:70:a2:25:be:20:eb:c4:1f:4b:87:
01:49:ec:aa:91:8d:a7:9f:df:26:41:b1:a2:dc:7b:
b6:81:3f:96:e4:5f:42:81:7d:e8:ba:37:fd:b5:f1:
6d:df:ec:81:60:50:a2:2c:56:61:39:1b:61:f1:2d:
98:08:26:28:80:d3:6b:1b:cc:a1:d8:b6:36:61:40:
fb:03:48:b0:4c:0b:18:95:de:ae:89:fd:8a:21:cd:
1c:03:ba:80:5a:24:a0:d3:f9:25:03:08:8c:d2:7b:
99:82:21:46:f2:bc:0b:77:43:46:cd:07:fb:9b:d3:
74:e7:85:ce:b9:91:61:dd:4d:26:3d:6f:ce:e7:b7:
58:61:b4:b3:c0:d1:99:4a:59:54:57:4e:df:08:5c:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:10:C5:D9:4A:25:C4:18:47:B2:87:B5:20:3E:3B:81:34:5B:A4:10
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a3:51:87:de:1d:a4:06:ba:3b:e0:eb:5c:7a:23:77:85:9d:
28:d0:2e:1c:4a:dc:53:a6:54:20:77:77:83:41:bf:59:c8:93:
7f:0c:58:1b:8b:58:fb:4d:ae:2c:09:bf:35:01:11:29:12:93:
8c:3f:04:6f:36:ca:d7:f4:ec:68:55:85:cc:ea:fc:6e:9b:fb:
f0:25:34:c0:4f:7c:d6:6a:46:57:cc:73:06:a9:e7:83:a1:55:
7a:d5:f0:5e:73:c3:b7:4a:30:2c:82:9e:12:72:88:b4:71:ca:
41:06:78:b9:95:94:e5:68:07:79:8d:31:cc:e4:67:98:6b:ff:
95:ea:9d:0c:3c:5d:e9:16:35:df:3c:cc:0e:a6:55:86:27:44:
c8:bf:91:d2:05:d2:3a:26:e1:b8:9b:c5:e9:50:b7:bd:2f:fa:
04:ad:1e:2e:36:a7:1b:30:1c:07:63:b0:b8:d2:e0:9b:68:e4:
6f:5b:eb:04:14:0a:e5:a4:6f:10:0b:06:c7:a1:20:cb:8d:cc:
cb:84:a3:b6:cf:dc:0e:ca:c3:29:44:e8:e3:65:e7:5d:16:8a:
de:f4:55:03:73:2a:43:87:44:ec:7c:76:d5:cb:cb:47:73:e2:
71:10:0a:fc:b4:d4:77:64:4c:02:a9:b2:78:4c:d5:9e:65:35:
f4:3b:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:32 2026 by rpki-client