Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: a4TFQ4o+9ZhJnkjlC0vofbD7sRNWn81dwi2C6xJa8qM=
Subject key identifier: 7A:B4:9F:F9:EB:A1:9C:D0:78:3D:2D:F0:34:81:F2:61:79:15:19:37
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019D25F0FC389D2D4DBE929C0EF441F9A057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 04C9
Signing time: Wed 25 Mar 2026 17:00:43 +0000
Manifest this update: Wed 25 Mar 2026 17:00:43 +0000
Manifest next update: Thu 26 Mar 2026 17:00:43 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: vX0m0TZfSOeyksb7nuMwKVF8LCasZB/sMfb/paq/0xw=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:fc:38:9d:2d:4d:be:92:9c:0e:f4:41:f9:a0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Mar 25 17:00:43 2026 GMT
Not After : Mar 26 17:00:43 2026 GMT
Subject: CN=7ab49ff9eba19cd0783d2df03481f26179151937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:83:96:de:9c:ef:cc:09:0e:8f:9b:50:c1:
cf:ae:2c:aa:6d:4e:20:8e:28:79:9d:51:24:bd:c0:
e8:0f:93:b9:8d:6b:df:d8:b7:8c:f3:3c:66:d6:83:
a6:15:dc:0c:ec:2d:5e:a2:7a:fb:7b:89:d0:cc:c0:
35:e9:25:af:41:2b:3f:12:ae:fe:0e:dd:47:bd:5f:
77:dc:c5:9f:fc:53:2f:66:75:d4:68:87:60:b4:41:
4f:9b:3e:c2:32:1a:c7:71:4e:8e:e0:90:27:50:6c:
f2:69:cd:e3:20:46:75:99:ad:4f:33:0e:4f:b2:7a:
ed:69:71:4b:a4:fe:c8:a5:ef:bc:d4:73:d4:c2:f5:
d1:34:b2:89:cd:22:24:7d:11:ed:68:c1:e6:6e:16:
9f:97:27:dc:7e:49:c4:81:8d:ff:db:22:7f:ee:08:
21:85:06:41:1d:e7:0b:f5:75:45:6d:f8:21:44:fd:
07:34:81:0a:1b:eb:dd:fa:8b:97:91:0b:4f:f1:ae:
da:03:af:32:ce:83:f9:cf:f3:3a:b1:3b:b1:74:22:
df:12:b8:c4:cd:5a:ef:72:eb:b8:56:97:f5:b3:07:
e9:e2:ae:26:4f:c0:d0:d4:23:2b:1d:17:cf:78:8f:
24:76:c6:51:d3:41:17:52:13:c7:56:d7:96:ff:d7:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:9F:F9:EB:A1:9C:D0:78:3D:2D:F0:34:81:F2:61:79:15:19:37
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bc:31:0b:35:d8:c2:d9:39:38:22:7f:2b:12:57:2d:2d:c0:
37:cd:7b:dc:9d:78:45:f0:57:a4:f3:7f:7c:d1:49:2b:57:ce:
9b:1e:ec:b4:7e:a5:46:7d:cd:e2:7d:e7:70:b6:26:74:91:2c:
42:31:4c:5c:82:87:96:1b:65:55:77:8d:37:10:c4:ae:91:4b:
4a:5a:1a:cc:3a:54:27:48:89:61:13:92:23:2f:52:50:87:d7:
25:ce:25:42:6f:d5:03:bf:45:4b:6c:06:81:d3:64:e9:74:44:
d9:26:ea:ef:0a:48:c4:b6:2a:3a:d9:65:f9:a3:96:9f:de:91:
0c:d5:fb:a4:71:10:9a:6f:37:b0:ae:99:7f:3d:a0:03:87:bd:
02:0b:69:64:56:4b:9b:4f:39:44:e0:b8:c0:2c:7a:0a:63:b0:
28:dc:16:bb:6e:f0:f6:80:cf:c5:69:8e:9e:eb:c4:3c:1c:1f:
65:13:45:98:4f:03:5e:2a:4e:3e:a9:39:be:50:75:25:41:ac:
d4:c1:37:52:c7:c0:fe:61:3e:b3:73:e9:af:50:ba:67:33:9a:
33:0f:0d:b5:72:7a:8f:c3:18:0e:75:a3:ea:ae:c1:fc:78:de:
d3:8e:9d:6a:7b:0e:ce:1e:89:bd:05:2d:b6:6c:9d:00:70:ad:
2e:f3:21:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Pw4nS1NvpKcDvRB+aBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz
MjQ1MzMwHhcNMjYwMzI1MTcwMDQzWhcNMjYwMzI2MTcwMDQzWjAzMTEwLwYDVQQD
Eyg3YWI0OWZmOWViYTE5Y2QwNzgzZDJkZjAzNDgxZjI2MTc5MTUxOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJGDlt6c78wJDo+bUMHPriyqbU4g
jih5nVEkvcDoD5O5jWvf2LeM8zxm1oOmFdwM7C1eonr7e4nQzMA16SWvQSs/Eq7+
Dt1HvV933MWf/FMvZnXUaIdgtEFPmz7CMhrHcU6O4JAnUGzyac3jIEZ1ma1PMw5P
snrtaXFLpP7Ipe+81HPUwvXRNLKJzSIkfRHtaMHmbhaflyfcfknEgY3/2yJ/7ggh
hQZBHecL9XVFbfghRP0HNIEKG+vd+ouXkQtP8a7aA68yzoP5z/M6sTuxdCLfErjE
zVrvcuu4Vpf1swfp4q4mT8DQ1CMrHRfPeI8kdsZR00EXUhPHVteW/9cXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq0n/nroZzQeD0t8DSB8mF5FRk3MB8GA1UdIwQY
MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct
NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4
LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrwxCzXY
wtk5OCJ/KxJXLS3AN8173J14RfBXpPN/fNFJK1fOmx7stH6lRn3N4n3ncLYmdJEs
QjFMXIKHlhtlVXeNNxDErpFLSloazDpUJ0iJYROSIy9SUIfXJc4lQm/VA79FS2wG
gdNk6XRE2Sbq7wpIxLYqOtll+aOWn96RDNX7pHEQmm83sK6Zfz2gA4e9AgtpZFZL
m085ROC4wCx6CmOwKNwWu27w9oDPxWmOnuvEPBwfZRNFmE8DXipOPqk5vlB1JUGs
1ME3UsfA/mE+s3Ppr1C6ZzOaMw8NtXJ6j8MYDnWj6q7B/Hje046dansOzh6JvQUt
tmydAHCtLvMhjA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:16 2026 by rpki-client