Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: Snbh/UWVQgGKqNywZlHw8g1UqylCdH8d/zNCre1lNxo=
Subject key identifier: A4:17:E8:E0:10:46:51:C6:8E:93:91:57:3F:21:63:27:F5:73:E5:79
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019F8EA2B92B89D0E19E72A52ED4BB019DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 1351
Signing time: Thu 23 Jul 2026 11:00:56 +0000
Manifest this update: Thu 23 Jul 2026 11:00:56 +0000
Manifest next update: Fri 24 Jul 2026 11:00:56 +0000
Files and hashes: 1: Q2c2ZVxD01eYMSDQao1YoIXjWy0.asa (hash: E2cO6SXyK9HZAexFchG/a5DBbHwX9fgWeihBGqBK40o=)
2: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
3: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: U86msDOJub3JsyGPfs3OF8I5o3dIstj47sYHUn0bHas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b9:2b:89:d0:e1:9e:72:a5:2e:d4:bb:01:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Jul 23 11:00:56 2026 GMT
Not After : Jul 24 11:00:56 2026 GMT
Subject: CN=a417e8e0104651c68e9391573f216327f573e579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:6d:b8:93:3c:ee:c3:2a:c7:80:2b:84:04:
5e:58:45:2a:d4:c4:61:19:71:ee:d9:b6:1d:96:4a:
e1:89:b2:00:79:f5:14:64:2d:f5:bd:01:7b:41:88:
d0:6b:40:25:f6:2a:5b:20:f7:d7:0c:81:be:99:fd:
4e:3a:d0:5a:36:a8:47:3a:a5:7d:29:22:59:e7:e2:
a1:5e:72:3c:d3:88:e9:a8:ee:90:29:bc:a2:4c:37:
47:50:ca:92:c7:aa:7a:87:9a:34:77:f5:cb:85:9a:
0b:1f:2c:b7:6b:e2:5e:74:19:11:42:b3:7f:84:c0:
b8:45:14:dd:5f:0a:da:0c:83:b3:22:14:65:ca:cd:
30:2b:18:39:f0:90:e2:93:15:aa:df:5c:64:2a:af:
a1:63:9c:14:4d:59:1e:d9:9d:d7:f8:72:5c:59:3e:
51:26:a8:d7:86:fb:50:f5:f2:3a:a9:52:69:3a:3d:
2e:88:eb:d8:c2:bc:d9:56:4f:3b:7d:7b:0b:a8:8c:
af:de:4a:ec:b4:85:cc:a1:57:b0:33:da:a0:cc:43:
c5:88:e3:b6:0b:f9:9d:b7:dd:d1:3c:4b:ee:97:df:
d1:09:46:bd:9c:1b:1f:0d:13:44:78:55:3d:d9:de:
e5:f2:67:57:51:74:cb:08:d8:2e:77:2a:e9:d2:03:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:E8:E0:10:46:51:C6:8E:93:91:57:3F:21:63:27:F5:73:E5:79
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ad:6e:a6:d8:a1:47:3d:ee:fd:7d:65:be:93:3b:82:2e:0c:
26:1e:49:f2:85:8e:96:a7:4a:4a:4b:7e:64:da:2d:58:df:e8:
f7:15:5d:ac:30:70:dd:d0:a5:b1:1a:a2:37:ec:18:e3:cf:c9:
21:a3:90:a6:ac:a3:62:0e:b6:15:c5:4e:60:d5:c9:7d:b7:e7:
d5:32:0e:4a:cf:05:55:ee:87:6d:e5:51:24:d6:ee:ae:f4:77:
58:b7:d4:3c:b5:aa:2c:30:02:2b:49:ba:e8:a4:77:a9:f5:da:
22:c2:aa:ce:8e:82:8d:10:66:70:9d:3f:e6:39:7d:52:31:33:
a2:47:c9:7d:26:de:8c:9c:75:94:b6:0c:08:3f:1f:52:8e:34:
46:38:97:12:8c:61:23:82:80:d9:dc:ff:39:0d:b9:59:d2:b0:
49:fe:71:85:d2:20:99:e0:de:97:2c:f7:d1:05:51:3a:70:e7:
ab:b0:ec:c1:cb:c7:1d:00:a2:0e:37:bd:09:d6:e4:2a:c0:5f:
9f:a9:32:eb:9a:3e:e3:2a:ee:a9:c9:aa:a7:08:36:50:69:b7:
2a:8a:78:b3:e2:7e:0a:6b:be:73:b7:d2:06:a5:30:9a:ee:1d:
17:ff:c7:8b:77:ae:80:65:47:ce:ce:0b:23:de:36:39:b1:eb:
ec:a0:e7:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OorkridDhnnKlLtS7AZ3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwNzIzMTEwMDU2WhcNMjYwNzI0MTEwMDU2WjAzMTEwLwYDVQQD
EyhhNDE3ZThlMDEwNDY1MWM2OGU5MzkxNTczZjIxNjMyN2Y1NzNlNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtltuJM87sMqx4ArhAReWEUq1MRh
GXHu2bYdlkrhibIAefUUZC31vQF7QYjQa0Al9ipbIPfXDIG+mf1OOtBaNqhHOqV9
KSJZ5+KhXnI804jpqO6QKbyiTDdHUMqSx6p6h5o0d/XLhZoLHyy3a+JedBkRQrN/
hMC4RRTdXwraDIOzIhRlys0wKxg58JDikxWq31xkKq+hY5wUTVke2Z3X+HJcWT5R
JqjXhvtQ9fI6qVJpOj0uiOvYwrzZVk87fXsLqIyv3krstIXMoVewM9qgzEPFiOO2
C/mdt93RPEvul9/RCUa9nBsfDRNEeFU92d7l8mdXUXTLCNgudyrp0gPyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQX6OAQRlHGjpORVz8hYyf1c+V5MB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQq1uptih
Rz3u/X1lvpM7gi4MJh5J8oWOlqdKSkt+ZNotWN/o9xVdrDBw3dClsRqiN+wY48/J
IaOQpqyjYg62FcVOYNXJfbfn1TIOSs8FVe6HbeVRJNburvR3WLfUPLWqLDACK0m6
6KR3qfXaIsKqzo6CjRBmcJ0/5jl9UjEzokfJfSbejJx1lLYMCD8fUo40RjiXEoxh
I4KA2dz/OQ25WdKwSf5xhdIgmeDelyz30QVROnDnq7DswcvHHQCiDje9CdbkKsBf
n6ky65o+4yruqcmqpwg2UGm3Kop4s+J+Cmu+c7fSBqUwmu4dF//Hi3eugGVHzs4L
I942ObHr7KDnEA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:22 2026 by rpki-client