Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: /2ZOB0WBD3R6OCJ5auqmP4d9q5MP2uIpdClkqJEarZ4=
Subject key identifier: 61:C8:99:52:BF:12:7A:5B:00:A3:BD:7C:67:63:A3:EF:52:6E:9B:B4
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 019E2FCDC203893BD3026B944EAFF9AE9ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 08:01:14 +0000
Manifest this update: Sat 16 May 2026 08:01:14 +0000
Manifest next update: Sun 17 May 2026 08:01:14 +0000
Files and hashes: 1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: btSaPpdIHk+9+De1QwfSEsLi+vBoQBpopGf0PO4j6/s=)
2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:c2:03:89:3b:d3:02:6b:94:4e:af:f9:ae:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: May 16 08:01:14 2026 GMT
Not After : May 17 08:01:14 2026 GMT
Subject: CN=61c89952bf127a5b00a3bd7c6763a3ef526e9bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:5c:c9:f0:5f:f5:3c:54:bf:9e:09:f1:cc:
dc:77:1b:13:73:e5:50:82:1b:82:5b:c5:19:1f:ef:
b8:c1:4e:cd:1e:f4:a7:e0:72:f4:93:4f:06:7c:91:
6c:1d:13:49:96:c0:3d:a9:e0:68:1d:5f:cb:c7:c4:
c6:50:47:9e:24:e9:5f:d6:49:00:1a:5a:c1:84:f1:
8a:bf:c7:a2:a4:4f:04:b7:28:be:ad:bc:90:3a:0c:
50:26:bc:05:a3:17:5e:e6:c7:12:f6:46:6c:32:c0:
76:48:fe:9c:7f:4c:25:21:df:7b:b1:7a:53:34:26:
ec:86:dd:36:4a:01:bb:fd:5d:af:97:4e:d8:ff:26:
3f:70:94:5f:91:8c:1f:85:b5:14:89:a5:bb:96:1c:
8c:69:8b:6d:24:d2:4d:47:28:b1:ea:cf:5b:2f:c1:
23:9c:2c:f8:d6:c3:91:22:f9:3a:ae:58:a3:d1:58:
f1:f7:76:dc:f0:47:60:77:20:01:6c:ce:c3:40:fe:
c1:98:2e:99:8b:3f:93:d4:24:ef:f9:83:94:0f:a0:
e5:10:17:06:98:53:4b:62:a0:ac:c9:01:f7:2c:3f:
ca:97:b1:27:cc:4d:b4:05:28:0a:b9:67:69:d4:2c:
4f:e1:b9:14:1f:f0:82:01:3d:ed:3d:95:41:92:76:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C8:99:52:BF:12:7A:5B:00:A3:BD:7C:67:63:A3:EF:52:6E:9B:B4
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:61:f5:13:cc:15:9c:e1:6c:94:71:28:a6:b0:74:8d:1a:d6:
56:c1:8d:00:d5:6b:98:52:34:9e:ce:7a:71:0e:ad:92:80:26:
fd:f7:38:bc:e2:f0:4a:3d:42:be:78:f7:6d:87:5a:fe:25:a2:
17:a8:69:47:04:d3:88:a9:92:7a:09:98:90:e3:56:75:7a:b7:
6c:24:22:80:2d:7d:d6:bb:20:54:95:91:d9:68:23:aa:5d:27:
b4:a3:15:f1:66:18:0e:07:55:ca:3a:1e:97:d6:62:e0:90:c2:
c9:09:b2:38:56:b1:a9:00:34:75:e3:62:b3:6b:6c:b5:b1:03:
e4:67:89:ba:d9:0d:99:78:1e:71:46:96:72:52:49:1c:05:e9:
90:99:73:bc:11:24:e8:57:56:ea:98:6a:28:62:69:44:45:7e:
7c:05:7b:8a:01:39:9b:31:67:24:59:2d:f7:f8:a8:50:bb:ef:
1d:0e:f1:2d:9b:2b:3d:b4:cc:f4:3a:ed:2a:23:a8:73:50:dc:
63:60:6f:ec:26:28:94:3d:f4:ba:66:57:53:12:63:7e:d1:95:
6c:30:de:73:45:e4:c9:61:9b:92:9d:ef:44:64:65:3b:26:e5:
89:93:53:59:08:39:a4:fa:4f:68:8e:9d:0b:b4:b5:a3:b6:10:
2b:0c:94:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:20 2026 by rpki-client