Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: dIUkLShi88qNSmtjYkqkkn90MxX7V0PIOeSDnYpzBwQ=
Subject key identifier: 55:D5:93:88:BB:30:95:29:CF:BE:67:36:13:2E:92:65:62:B1:CB:2D
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019E20C8A50F280604450B7283A60189B5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0A7B
Signing time: Wed 13 May 2026 10:01:20 +0000
Manifest this update: Wed 13 May 2026 10:01:20 +0000
Manifest next update: Thu 14 May 2026 10:01:20 +0000
Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: D/6Fpjw/UCUtditZcVgonv7ei47ZpRJb6nIkCGvwjxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:a5:0f:28:06:04:45:0b:72:83:a6:01:89:b5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: May 13 10:01:20 2026 GMT
Not After : May 14 10:01:20 2026 GMT
Subject: CN=55d59388bb309529cfbe6736132e926562b1cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:f9:3f:5a:a0:a7:1a:f3:3d:04:2b:69:72:
b4:08:b7:9c:3a:d2:27:43:3d:da:29:5e:9f:c1:01:
86:2f:ea:35:f7:e3:e6:9e:5e:76:a9:a0:b7:13:7d:
ed:d2:96:39:68:4a:80:1f:a7:04:bd:c5:e7:4a:cb:
27:6d:41:67:cf:88:7c:af:4c:f7:f9:16:1b:3f:33:
2a:1d:d5:96:86:b8:8c:b1:9e:16:41:d1:8c:4f:c0:
3a:da:07:35:b5:02:ad:b6:b7:b0:b7:d5:d1:3f:97:
4c:1f:4b:f8:cb:27:74:12:a1:70:fe:60:c0:91:2c:
85:13:89:69:01:26:db:72:fd:86:98:8a:73:84:f6:
ca:a6:43:00:07:7a:8d:34:f4:37:31:80:75:da:57:
16:27:d6:fe:b5:02:3b:b6:bd:30:9d:30:83:47:7f:
34:2f:3e:02:76:d9:48:a5:2e:73:db:a1:65:f0:5e:
8c:bd:3f:7a:23:74:04:80:0e:f4:52:2d:f5:b3:6a:
88:e1:2e:fa:70:31:cb:31:36:d4:4b:6e:d4:0c:57:
bc:d8:45:92:0d:09:5b:9b:e8:f7:2c:d3:6a:db:7c:
f7:ee:95:38:db:6c:b8:6c:09:34:e8:e7:db:14:db:
ce:cb:39:cd:7c:36:2f:38:aa:3f:da:97:cf:b5:5d:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:93:88:BB:30:95:29:CF:BE:67:36:13:2E:92:65:62:B1:CB:2D
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:49:c9:fb:16:e5:cc:05:f5:f0:f5:5c:c4:12:5c:d5:d6:f1:
52:10:e3:c4:50:0c:30:f7:f7:fc:d0:44:90:45:04:bc:a0:9d:
bb:50:75:a9:b1:64:c6:e0:57:cf:34:e6:7f:3f:0d:90:eb:88:
30:d9:48:8e:b5:df:0f:ff:65:89:b6:88:01:2f:a7:df:3f:b7:
d3:7f:78:d8:48:6d:1e:20:74:83:25:90:d0:9f:a6:2d:9d:ea:
ab:2f:e1:3f:07:6b:d7:5a:9b:df:29:37:0d:8a:94:9d:b0:96:
cc:8c:ad:80:05:73:7b:34:e2:bb:5c:5b:cb:7c:25:36:48:09:
32:50:af:6f:c0:10:43:d7:06:91:77:53:a9:35:a0:aa:c4:5f:
40:cf:07:5b:71:43:4f:78:d4:d7:5c:a9:86:74:b3:9a:29:e8:
b3:9d:42:aa:3f:a8:6a:ef:bf:ac:fa:36:48:9b:7a:b0:5f:00:
67:62:78:86:02:3a:db:bd:60:84:4e:6f:15:8d:f0:9e:e8:d6:
e5:20:1c:57:bd:21:30:26:e6:e1:27:13:be:e1:18:78:e4:44:
49:5a:ad:3c:6a:eb:fd:ef:40:b0:a6:bc:3a:ab:3d:09:73:16:
0e:bf:8e:94:ff:aa:ae:05:c6:7c:e0:b9:59:cd:e1:3a:de:59:
c8:cd:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:42 2026 by rpki-client