Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: NGAxsxPyWiSwSfMD8USjexVy2tEoZoph+0G4W7T5UX4=
Subject key identifier: 73:43:DF:AB:AC:E4:21:A4:26:88:B8:9D:87:10:F5:E7:B0:86:2D:72
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019F91DB142368D71B909B7EC1381E7EE223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 060A
Signing time: Fri 24 Jul 2026 02:01:21 +0000
Manifest this update: Fri 24 Jul 2026 02:01:21 +0000
Manifest next update: Sat 25 Jul 2026 02:01:21 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: HQUM+bynYUeVUeESNZI26dqPoNdx+YlgGtxPBXqw1TA=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:14:23:68:d7:1b:90:9b:7e:c1:38:1e:7e:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Jul 24 02:01:21 2026 GMT
Not After : Jul 25 02:01:21 2026 GMT
Subject: CN=7343dfabace421a42688b89d8710f5e7b0862d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:03:1b:40:06:a5:1b:c3:6a:91:89:68:cf:
5a:a0:01:71:4a:1d:b3:85:80:55:07:f1:8a:44:6e:
e4:2d:ad:ed:2e:32:30:43:9e:bd:9d:cf:a6:c3:20:
3b:e9:55:4f:ff:aa:77:f7:23:6b:15:3e:00:b8:e7:
da:95:78:51:38:55:ef:6c:b4:7c:ba:64:75:60:ff:
10:ff:b6:31:53:e6:46:d9:0f:f9:bb:1f:6b:d4:45:
5d:1e:0c:27:d3:58:7c:e3:8c:ac:f7:19:82:dc:34:
42:95:74:51:cd:4e:62:06:c7:72:bd:6f:e2:27:23:
c6:02:8c:53:61:3b:b0:b6:fc:a0:f9:e6:ed:df:22:
38:a6:f8:55:0f:a8:ed:d9:fa:b7:ca:79:af:02:90:
a0:3d:5f:7c:9a:20:20:03:32:27:30:73:6a:58:7d:
3e:05:1d:3b:b4:68:10:8a:f5:d7:9b:1e:1f:ed:4f:
0a:92:96:df:e1:c1:22:1d:2d:b0:03:25:f2:2c:6e:
83:de:3e:9c:ca:76:05:9e:e9:d8:1b:6b:0f:67:1b:
bb:89:55:97:07:52:a1:b4:01:e6:6a:bd:c8:6d:ff:
ad:2f:a5:ba:a5:41:38:30:59:3d:17:73:a0:c6:36:
8b:24:35:69:a2:e4:13:5b:a7:07:78:f4:a9:88:74:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:43:DF:AB:AC:E4:21:A4:26:88:B8:9D:87:10:F5:E7:B0:86:2D:72
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bc:56:0a:da:eb:bd:5f:01:5f:84:98:20:74:f4:0e:f7:31:
fd:2f:5f:b7:48:10:bc:85:d9:85:09:0a:04:2c:79:92:dd:5a:
99:ad:ae:09:c0:5d:42:b5:57:a9:fb:aa:15:e7:5a:b3:0b:09:
10:f0:9d:7a:05:fd:0f:36:11:3f:4f:14:6d:25:08:34:70:79:
a9:f4:87:c8:55:3d:f1:67:e0:e4:65:72:80:b1:9f:3b:1c:d6:
95:12:0b:eb:ac:a1:db:5f:66:1e:13:22:76:5c:6a:f1:d8:aa:
9e:5f:7e:e5:fe:66:10:aa:fc:82:f2:a3:0b:c1:a1:2e:da:e2:
b0:bc:6f:84:3f:fb:24:e6:80:3f:48:d2:c2:c6:58:8c:0c:1d:
07:91:82:96:ab:4f:1f:c7:6f:fa:ea:89:5b:5f:81:01:dc:36:
57:d1:a8:e8:ee:64:63:22:b2:53:ca:fb:19:51:2c:c3:10:41:
2f:3d:32:d6:78:6e:6e:b6:5e:4f:1f:19:04:51:bd:6f:24:b4:
23:be:29:eb:47:d2:4a:25:1b:9f:69:b7:05:65:da:49:a4:4f:
ab:c9:39:e2:d7:6b:24:fc:c9:46:2e:82:ce:e7:e0:6a:2c:a5:
0a:b5:80:8c:3d:d1:7b:da:2b:4b:3d:a1:71:67:40:38:b2:ad:
22:0c:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:16 2026 by rpki-client