Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: ecLzDeDKJKm3SJKdk4G+7v4MhnCu14Z7xGa9zFWPqsU=
Subject key identifier: 74:2E:7C:36:EB:A2:71:2B:A0:06:12:DE:6F:E2:43:B0:80:85:65:0A
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019E1DC71C055EF9BED6CE011277E45AEE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 04F7
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: CM9cWnE0vMhA1ETuYkFU+2KuQDC5/c0O4mr50LiqJZs=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1c:05:5e:f9:be:d6:ce:01:12:77:e4:5a:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=742e7c36eba2712ba00612de6fe243b08085650a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:6a:cd:28:3b:f8:1c:6d:1b:be:5b:7e:82:
6d:64:2a:bf:c6:8b:3a:0a:5a:fe:dd:92:3c:66:dc:
e2:cd:83:71:f6:e4:af:f6:69:5c:09:86:c6:ee:22:
90:ed:a6:eb:03:41:9c:6c:e2:44:75:6f:41:55:09:
25:b3:06:cf:5a:6e:0b:a2:87:bf:76:f1:16:cb:64:
de:1d:0a:7a:86:7c:5a:05:8d:ae:b2:08:9f:4a:0c:
30:b3:93:aa:cc:1e:68:ec:77:f9:72:34:ab:88:26:
f1:32:ce:02:73:81:06:a9:8f:93:52:51:10:18:a8:
33:68:de:64:34:58:2e:07:4f:18:f2:15:03:a1:a0:
3a:91:34:f1:c7:37:88:f8:32:28:75:cc:66:9b:f4:
17:95:e2:4a:06:bb:f3:92:1d:4e:16:63:c3:e3:cc:
98:d4:0d:a6:9e:bb:c9:3e:77:21:7f:1e:cc:54:f3:
64:fe:cb:2b:fe:fa:53:9c:d6:62:96:79:d2:11:90:
47:a8:b2:02:a8:fd:c1:f4:c2:64:1a:7f:ec:23:90:
20:4f:d0:4e:1f:df:88:fe:73:92:7d:eb:10:50:1c:
56:90:8e:3b:a2:9e:45:88:b5:09:c6:c4:98:6f:53:
39:47:87:08:b8:88:4a:c3:97:41:13:9e:8d:90:8d:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:7C:36:EB:A2:71:2B:A0:06:12:DE:6F:E2:43:B0:80:85:65:0A
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:48:66:d7:d2:3d:a3:ec:70:ee:45:a7:43:06:a4:14:e2:bb:
26:e8:0d:b8:f9:d5:68:60:2e:d9:e8:1c:ab:0e:31:80:6f:f5:
8d:d4:0e:17:d4:96:60:fc:e0:c9:b0:30:3b:2c:e9:47:c0:60:
26:aa:4b:7c:43:a7:ed:a3:c6:7f:17:6d:d9:5c:08:c9:9f:7d:
cf:4a:cf:eb:90:cc:4a:04:69:41:d9:27:ec:30:22:91:eb:43:
a2:ce:c2:4a:b1:8f:ed:3b:50:5b:8d:fb:cf:fc:ee:09:e0:56:
78:26:10:a2:5c:cf:6a:92:d0:9b:19:0a:ba:45:78:ea:92:ab:
97:07:86:9f:c1:ef:c2:83:c0:c1:89:5a:61:c2:db:86:aa:b6:
90:5e:38:f4:97:48:7c:1f:e8:c8:bf:8c:5c:21:2c:53:1b:54:
fa:79:53:a2:71:af:e9:54:b3:2b:cb:ae:fd:9c:78:02:b2:4e:
9b:d9:56:b3:67:16:ce:94:1f:10:4e:12:cf:35:a5:e6:e8:50:
28:02:ab:33:ee:5f:e0:e3:b6:13:ad:8e:c7:cd:a9:35:f0:5d:
c8:38:30:33:41:1e:42:7e:6b:c9:bb:a5:d5:f0:5a:49:3d:8f:
bb:39:4b:76:f0:53:fe:ce:a6:6d:23:c0:33:71:c7:f4:54:44:
db:36:95:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxxwFXvm+1s4BEnfkWu4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjYwNTEyMjAwMDQ4WhcNMjYwNTEzMjAwMDQ4WjAzMTEwLwYDVQQD
Eyg3NDJlN2MzNmViYTI3MTJiYTAwNjEyZGU2ZmUyNDNiMDgwODU2NTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn69qzSg7+BxtG75bfoJtZCq/xos6
Clr+3ZI8ZtzizYNx9uSv9mlcCYbG7iKQ7abrA0GcbOJEdW9BVQklswbPWm4Looe/
dvEWy2TeHQp6hnxaBY2usgifSgwws5OqzB5o7Hf5cjSriCbxMs4Cc4EGqY+TUlEQ
GKgzaN5kNFguB08Y8hUDoaA6kTTxxzeI+DIodcxmm/QXleJKBrvzkh1OFmPD48yY
1A2mnrvJPnchfx7MVPNk/ssr/vpTnNZilnnSEZBHqLICqP3B9MJkGn/sI5AgT9BO
H9+I/nOSfesQUBxWkI47op5FiLUJxsSYb1M5R4cIuIhKw5dBE56NkI3VmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQufDbronEroAYS3m/iQ7CAhWUKMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkhm19I9
o+xw7kWnQwakFOK7JugNuPnVaGAu2egcqw4xgG/1jdQOF9SWYPzgybAwOyzpR8Bg
JqpLfEOn7aPGfxdt2VwIyZ99z0rP65DMSgRpQdkn7DAiketDos7CSrGP7TtQW437
z/zuCeBWeCYQolzPapLQmxkKukV46pKrlweGn8HvwoPAwYlaYcLbhqq2kF449JdI
fB/oyL+MXCEsUxtU+nlTonGv6VSzK8uu/Zx4ArJOm9lWs2cWzpQfEE4SzzWl5uhQ
KAKrM+5f4OO2E62Ox82pNfBdyDgwM0EeQn5rybul1fBaST2PuzlLdvBT/s6mbSPA
M3HH9FRE2zaVAA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:27:36 2026 by rpki-client