Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: pC1cd+Q8lmbdLqQlOE7yeGhReNxPhHFVNo9FNvJm5KQ=
Subject key identifier: FC:86:D2:E2:4E:41:B9:4A:69:DA:10:0F:BB:82:5A:12:65:0C:9F:A2
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 019D3A53DEC7216939A9667046DF2BBC8E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 10AB
Signing time: Sun 29 Mar 2026 16:01:08 +0000
Manifest this update: Sun 29 Mar 2026 16:01:08 +0000
Manifest next update: Mon 30 Mar 2026 16:01:08 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: omsSBxp96gHwz3xJ9TyiuoM5MGULgoelg7R8F/MtSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:de:c7:21:69:39:a9:66:70:46:df:2b:bc:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: Mar 29 16:01:08 2026 GMT
Not After : Mar 30 16:01:08 2026 GMT
Subject: CN=fc86d2e24e41b94a69da100fbb825a12650c9fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:76:70:3f:0c:6e:5f:49:17:a1:82:fa:ab:
c2:6f:60:5a:65:cf:2a:73:07:01:5f:de:3c:e0:0e:
18:7a:9c:99:32:e5:28:1c:e8:91:3f:3a:fe:fa:56:
56:0d:4b:9b:18:65:4d:a5:8d:c2:31:ae:ec:da:2e:
31:16:6b:45:f2:bd:10:8e:04:b7:af:ce:ce:ec:07:
d4:f7:5a:9c:19:6c:1e:7f:aa:3c:ab:f5:eb:2d:ea:
19:df:75:60:69:b6:bf:09:9f:d9:bb:68:d9:97:1e:
94:2d:35:80:fb:5f:81:ea:d2:d3:6d:2f:95:51:3a:
bc:20:69:a4:f7:ec:89:03:e6:36:95:5e:f0:8a:66:
35:3f:dc:48:bf:f2:ee:08:a3:ef:41:ec:e6:a0:09:
11:d9:fe:d0:fb:d4:7b:4e:b0:f9:a2:97:b8:b5:a2:
63:d5:84:16:1c:fe:35:c2:e0:4f:0e:e7:c8:80:0c:
11:15:35:91:61:41:28:31:25:51:76:d4:84:8d:e5:
25:10:30:fd:bf:31:df:3c:7a:6f:5b:a3:3c:9e:02:
41:e1:ae:09:ed:a7:70:75:ed:03:c7:48:32:c7:e5:
f9:48:e5:72:91:91:09:36:08:c0:54:d7:53:07:dd:
4a:8d:2e:0b:82:8f:e1:62:a5:9b:85:d6:d2:60:9e:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:86:D2:E2:4E:41:B9:4A:69:DA:10:0F:BB:82:5A:12:65:0C:9F:A2
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:8a:f9:07:dc:cc:8a:17:ae:48:73:93:c8:44:b8:c1:a0:
32:0c:aa:93:8a:67:b0:2e:df:29:50:74:9b:00:8a:49:e4:62:
91:45:a4:17:19:22:cf:2e:32:22:dc:7d:c4:ff:0b:21:6a:03:
d1:97:86:99:81:ed:3c:a0:fe:87:22:8f:e4:77:24:5d:21:a8:
b7:f6:55:d2:53:9a:10:3b:c1:94:0c:e8:7c:23:32:ce:21:10:
9e:4b:b6:91:1e:9d:8c:40:39:0b:fd:ee:27:07:bd:7f:98:2a:
97:09:08:ae:e8:ad:07:99:32:c3:14:24:65:8b:1c:e4:e5:8f:
9a:7e:67:5c:fd:a6:58:0a:bd:95:d1:bc:93:45:e7:e1:47:bc:
8d:3a:2c:81:29:14:96:bb:78:65:64:1d:b2:52:49:73:e8:b4:
3d:44:b7:4d:4e:f7:5c:9c:cb:1d:52:be:c5:11:c9:43:ad:bd:
e8:d7:41:25:ac:00:fe:3b:63:df:1e:d5:af:0b:72:77:f5:11:
d3:e6:7d:fe:7f:48:30:2c:12:f2:83:2b:34:9d:6f:50:61:ee:
d8:f8:fe:dd:ae:e7:00:04:2f:3d:c5:84:f2:83:f6:02:51:ef:
58:d4:57:e1:36:ca:42:23:57:ac:3d:8d:59:e9:63:4a:fc:c3:
e1:71:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:24 2026 by rpki-client