Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: /1YX+hlAh0tT8EaXJJ65eZSjB2MwmoQUBcs5Ua8paTM=
Subject key identifier: D8:9E:FF:03:BF:FE:1E:3C:54:94:C2:61:2C:9E:3E:10:96:B5:34:02
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 5BBB313390616032FDF0FD77C00380701B4A28D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 0130
Signing time: Sun 29 Mar 2026 09:04:20 +0000
Manifest this update: Sun 29 Mar 2026 08:59:20 +0000
Manifest next update: Mon 30 Mar 2026 09:43:20 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: xs584EtLQDLVSDO3UXUms+yG5f6XQatZj1WFtIcH/Ps=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bb:31:33:90:61:60:32:fd:f0:fd:77:c0:03:80:70:1b:4a:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Mar 29 08:59:20 2026 GMT
Not After : Mar 30 09:43:20 2026 GMT
Subject: CN=D89EFF03BFFE1E3C5494C2612C9E3E1096B53402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:3a:02:fe:62:6f:6b:9b:3b:83:07:e9:95:
d9:d1:5b:45:a8:68:d3:9f:53:7f:0a:20:97:a6:f7:
a2:36:17:d8:b1:45:3a:69:1e:19:c2:ba:58:d4:5a:
39:ff:ed:19:fa:47:6d:b4:f9:17:a5:8a:15:8e:b4:
19:fb:a3:a2:0a:96:21:d3:35:8f:5d:95:6e:a6:70:
1e:e5:8c:3e:80:0b:78:e0:b6:b6:13:57:6f:5c:40:
81:93:b3:60:10:39:df:89:8d:55:42:38:00:d2:93:
a5:f3:de:68:2c:12:a5:be:21:37:00:b0:e5:71:d8:
42:d0:8c:1d:58:c2:69:88:f5:ba:a0:ce:b9:16:cc:
57:a4:c9:09:d5:98:78:11:ae:56:1a:dc:52:d8:23:
10:09:1c:4f:12:04:dc:eb:5a:56:1e:05:1c:f5:10:
43:c9:df:34:e8:10:e2:46:be:ee:f6:a8:02:f4:b4:
af:1e:e7:9f:af:1b:ad:98:84:99:b3:ba:bb:a2:60:
a3:15:af:1b:cf:a8:26:a7:9b:58:3b:a1:50:7f:a0:
81:f6:28:f6:24:e6:f4:5a:d7:08:bb:8d:27:fe:66:
de:ad:62:a2:21:0f:fb:a3:ec:ec:4a:4c:3f:7f:68:
6b:53:c0:c8:b3:bf:f4:51:2f:f1:94:38:9e:91:6e:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:FF:03:BF:FE:1E:3C:54:94:C2:61:2C:9E:3E:10:96:B5:34:02
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6d:63:59:45:24:da:4f:87:7d:3a:09:7e:27:c6:2e:53:8e:
f7:4f:9c:6c:38:1f:7d:ce:5d:06:e5:c7:32:00:9c:c1:41:b0:
2b:8b:cb:b2:f1:5e:5f:4e:27:ab:cd:da:1a:5b:10:9c:4f:7b:
cf:9a:55:f0:00:6d:e4:d0:f3:e9:6c:b4:6d:eb:2e:f4:ca:b7:
c2:2e:30:aa:28:e0:6d:15:59:e9:6e:3c:34:cb:8d:a4:05:b6:
8c:9d:a1:67:3e:e9:ce:da:3b:ea:29:a1:d8:94:61:12:a1:2d:
a5:bb:95:f0:b4:75:8a:2e:1a:72:4b:ad:35:05:5f:98:cb:19:
8c:fa:45:51:3f:2f:bb:39:a7:43:4a:c8:99:48:ed:99:eb:20:
7d:0a:44:28:7b:01:c8:64:42:88:c5:02:c8:ef:da:78:d7:82:
6e:6c:63:b6:a3:e2:ac:b9:d8:98:3b:a0:72:7b:c2:e9:fe:c4:
93:4b:1f:40:44:1c:07:16:d3:2a:83:f4:bb:60:61:c7:7c:24:
bf:95:fd:d0:c8:fb:1f:b7:5a:d7:2d:cf:41:09:06:f5:06:59:
1a:d8:f8:a7:7a:23:90:62:b4:3b:2c:4e:56:fe:34:0e:97:61:
f2:8a:7a:bc:6d:a5:37:22:51:97:b3:f7:26:5b:ca:80:ee:bd:
77:21:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:18 2026 by rpki-client