Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: BG+u6M/reZEjSWJZR2lY99YDVFVv97wHv8FNYL0LY/4=
Subject key identifier: 91:32:7A:AC:5E:BC:F4:91:19:78:51:03:6A:12:64:94:AD:95:5D:36
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019F197A71A0CA84F56008CAD8E57EC68412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 198E
Signing time: Tue 30 Jun 2026 17:01:22 +0000
Manifest this update: Tue 30 Jun 2026 17:01:22 +0000
Manifest next update: Wed 01 Jul 2026 17:01:22 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: Uyxbxj0KpS0zMCwkJtXE5asKmtLHWCy5RaJh9GKJq8Y=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:71:a0:ca:84:f5:60:08:ca:d8:e5:7e:c6:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jun 30 17:01:22 2026 GMT
Not After : Jul 1 17:01:22 2026 GMT
Subject: CN=91327aac5ebcf491197851036a126494ad955d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:a2:99:61:22:b0:d2:8e:4e:5e:8a:e6:01:
3b:db:c4:bc:6c:16:7d:fd:54:d4:c7:1f:a9:c2:60:
ae:ab:9d:ef:14:07:e2:65:18:f0:bf:85:82:96:56:
59:32:96:c3:a4:8a:3d:43:a9:09:9c:b7:b5:4b:6b:
b6:98:65:ec:a8:dc:4f:77:89:5c:90:18:f2:07:83:
61:10:cf:37:86:00:39:9f:ca:47:b1:ca:9b:52:a3:
42:ac:b1:cd:b8:d2:cf:50:84:f7:de:2a:54:18:b5:
dd:eb:f6:c7:2c:9d:09:dc:28:b8:45:53:df:15:59:
3f:97:4e:b0:52:5e:26:8c:03:b3:e8:7a:ec:1a:85:
0c:0b:5f:3a:03:e1:cf:98:44:91:48:d3:12:0f:01:
0c:f5:8c:f1:44:b0:cc:6e:44:9c:81:c0:77:1d:71:
35:99:85:58:7f:47:b4:24:fe:6e:9b:1e:41:34:1c:
19:0f:88:1b:10:0d:8b:49:04:76:da:77:b9:e9:67:
3b:e2:a3:cb:d9:31:24:8b:97:7a:f1:da:b7:59:36:
a6:ce:b4:f4:53:c1:b0:26:a2:4c:63:09:54:92:ef:
8e:f2:be:8e:fd:92:8b:aa:4f:5f:7c:02:ce:9a:6c:
3a:80:cc:e6:70:56:97:ca:c0:77:04:e3:c3:a3:4d:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:7A:AC:5E:BC:F4:91:19:78:51:03:6A:12:64:94:AD:95:5D:36
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:a5:ae:7b:f7:aa:07:86:73:77:a9:ac:b1:b9:b3:25:9a:
ea:51:3f:ce:3d:e5:fb:06:5a:ba:5b:4b:9e:fe:b8:bb:96:47:
07:5c:7a:2f:20:34:5c:42:c9:22:e7:a4:66:89:21:6e:90:59:
98:b5:2d:3a:1d:36:3e:fb:d6:df:c7:8f:42:59:b6:51:d2:2a:
d2:64:08:8f:53:43:bf:77:d8:55:88:88:7b:7e:4d:b7:c0:b3:
af:94:09:2e:1a:c0:1e:80:9b:4b:4a:48:03:bb:09:8c:1b:31:
f6:f0:fc:c8:6d:07:37:b8:24:b7:09:3d:3e:46:da:14:94:97:
cb:ba:e8:51:11:b5:fa:b4:fd:8b:63:18:d9:62:0e:9d:e2:88:
2e:e0:ea:25:4c:e4:8b:93:95:a0:a0:f7:58:1b:2d:12:14:15:
f1:25:59:bc:c1:3d:ae:f4:1d:91:e5:a6:bc:5b:72:31:17:be:
0d:f6:07:2c:d6:54:33:bc:ab:ff:6d:de:e3:e9:5f:b3:de:19:
58:31:2a:a2:e3:0d:5f:06:84:c6:41:e9:34:35:7d:9e:d2:f1:
91:a6:fc:96:0c:8c:19:da:f3:7d:4a:90:d1:c4:ca:93:75:78:
9f:5e:a5:e5:79:e3:0f:42:cd:f4:41:5f:b1:7e:3c:0f:5f:d4:
c5:f1:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:23:18 2026 by rpki-client