Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: WcAopKIGXAkPWaloIIjG1g+1qNdVkP/i7Aj1TUKVs6Y=
Subject key identifier: 04:43:66:C0:85:00:C9:F3:00:28:5F:AD:84:AB:9B:3B:D3:A3:25:F1
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019D265F02F91C5693F48881E4B10042821F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 1211
Signing time: Wed 25 Mar 2026 19:00:53 +0000
Manifest this update: Wed 25 Mar 2026 19:00:53 +0000
Manifest next update: Thu 26 Mar 2026 19:00:53 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: dw/uG7YkP71ZGKkwq2x5DNauAjzM/k8B1A471BhsCZs=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:02:f9:1c:56:93:f4:88:81:e4:b1:00:42:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Mar 25 19:00:53 2026 GMT
Not After : Mar 26 19:00:53 2026 GMT
Subject: CN=044366c08500c9f300285fad84ab9b3bd3a325f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:42:40:34:fd:50:39:dc:8c:a3:cd:99:a9:
7f:40:d3:f5:3a:c1:5b:57:fd:57:d0:bc:9d:e8:04:
87:2c:51:13:26:c1:3e:77:03:d2:44:0f:f4:a8:f3:
65:6d:fd:ed:e8:06:ed:99:43:b0:11:2a:ec:e9:c0:
15:4a:4e:97:57:5c:8a:ec:d3:5e:e5:db:7b:6b:82:
f0:88:5e:6b:38:3b:4b:11:b6:bf:77:37:68:0b:0c:
6f:31:7d:eb:29:8b:50:94:16:ac:68:e3:58:9a:db:
db:8e:3b:20:88:2a:3b:53:db:58:1e:15:90:6b:55:
87:3a:c8:6b:93:2d:70:21:d3:04:fa:60:e9:a5:52:
b1:04:f0:11:05:b7:6a:c7:7b:ce:b8:ef:d3:ab:fc:
4d:57:5c:d5:6f:2e:6a:57:5e:bd:3e:1f:17:1e:e8:
e7:ec:cf:51:d4:08:2a:5f:8a:70:a7:2b:14:75:ff:
d0:e5:58:db:1a:e5:cf:a4:04:c9:df:6a:9a:48:de:
d4:05:bb:b3:c0:20:c6:df:64:0d:b3:0b:34:c2:2c:
81:25:bf:35:f3:74:3d:1d:8c:ee:aa:79:cd:69:e4:
cf:ac:36:ad:a4:0f:ae:47:60:40:b7:e8:2d:d0:fb:
63:c5:74:af:e7:97:f7:23:40:bc:bb:b7:cb:11:fc:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:66:C0:85:00:C9:F3:00:28:5F:AD:84:AB:9B:3B:D3:A3:25:F1
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:b9:4d:3b:60:27:76:10:2d:df:3d:6a:d5:a7:71:3b:8a:
34:31:98:9d:28:b7:39:00:bb:76:a2:e4:4d:c6:5a:2b:24:d0:
e4:5d:4c:f5:9f:7d:6c:f1:e9:ef:47:40:63:f2:10:97:a2:4e:
bf:7a:7f:b9:cc:4a:00:70:1b:3b:c4:40:26:54:f2:b2:78:06:
4e:6d:66:91:30:a7:28:d1:f4:e0:9f:d1:c8:f1:03:df:56:3e:
22:13:c9:a7:cc:85:74:b2:44:bd:76:cb:3d:fc:eb:56:85:f0:
a1:29:e4:fb:ab:02:49:d3:66:cf:88:78:6d:6c:30:5f:de:94:
d1:e0:97:2d:4b:a1:95:f7:19:42:95:94:60:69:32:36:47:31:
32:1a:56:fe:b1:3e:43:68:92:85:2c:16:c4:2c:10:48:22:26:
e3:4a:79:6f:04:3d:c0:7f:87:b7:83:2c:ae:58:46:8b:65:ad:
0e:71:1a:02:b4:6e:92:b6:34:d7:8e:d1:a9:f7:ca:a4:75:f1:
df:bc:9e:ee:f9:a9:fd:49:a1:b9:53:51:2c:1e:28:0b:68:36:
58:53:4e:27:0b:f7:53:45:a6:01:8e:b2:f2:45:83:68:a6:5b:
e9:f1:57:50:d2:fc:5e:6f:5e:38:af:70:77:91:e1:be:2d:2e:
95:d5:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:32 2026 by rpki-client