
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: YcgAyZDXmXiFhhwvTKWYWTqIdvCKBVYtQZJMLc/xxTY=
Subject key identifier: C4:08:4B:D5:41:74:BE:CA:0C:11:52:D5:0C:DC:57:B4:D4:5C:B8:45
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019E1D229FDDA0078BD804F3AC6F95E9BEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0549
Signing time: Tue 12 May 2026 17:01:08 +0000
Manifest this update: Tue 12 May 2026 17:01:08 +0000
Manifest next update: Wed 13 May 2026 17:01:08 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: 6zL8Gv1aaFu45oh4oUXImagTwuphjHY0zpH5NV4xQc0=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9f:dd:a0:07:8b:d8:04:f3:ac:6f:95:e9:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: May 12 17:01:08 2026 GMT
Not After : May 13 17:01:08 2026 GMT
Subject: CN=c4084bd54174beca0c1152d50cdc57b4d45cb845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:6e:10:67:7a:1f:86:8e:fd:65:51:dc:da:
87:dd:56:4b:4e:e9:28:72:45:fa:04:66:fa:3b:b5:
04:f7:a1:a4:2d:8e:ae:cc:9c:a6:69:9a:00:4b:24:
60:ce:f3:ea:3d:46:2c:a5:f9:47:b6:b2:ab:ca:47:
5f:13:6c:ee:48:65:9b:77:ad:96:c5:16:28:a4:3f:
8b:94:4e:be:52:a4:f8:55:46:ff:b1:0f:53:e3:37:
1d:82:7a:f7:5e:27:b5:03:46:a2:42:0e:84:38:1b:
01:31:94:ea:bb:00:a8:ad:f2:e1:e1:e7:cb:e7:d7:
62:09:19:cd:50:b1:2f:5a:0a:55:2a:b0:b7:bf:5a:
ed:24:0d:23:63:60:ec:da:4f:e6:b9:71:40:ff:bf:
fd:bd:ce:d5:93:80:a0:91:12:e7:ec:74:79:87:50:
73:2f:14:08:98:eb:e7:a1:a3:31:6b:4d:f6:2f:6d:
36:46:a0:b6:1b:2a:08:24:6b:5f:ab:3a:8b:ae:69:
84:aa:d0:f7:40:bc:2c:d2:70:a4:d5:d2:8c:16:10:
be:78:55:b4:7b:7f:0d:14:1c:dd:f6:db:eb:d6:56:
4e:c4:14:f5:cc:10:b9:37:c4:e5:cc:37:10:42:87:
d3:ec:23:1b:25:80:8e:cb:8c:96:47:bc:4e:67:6b:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:4B:D5:41:74:BE:CA:0C:11:52:D5:0C:DC:57:B4:D4:5C:B8:45
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:54:d1:60:72:9e:9b:49:5a:68:f6:9c:4f:4d:bf:bc:92:98:
b1:fd:95:93:f2:f4:10:97:42:c7:90:f9:5a:68:2e:4d:23:f3:
07:60:a7:ab:97:91:57:52:06:00:36:e9:22:d5:2a:b7:3b:9e:
d8:8f:57:3b:8b:e8:fc:30:f6:a9:4d:83:84:87:b1:cc:a1:c8:
c8:ca:23:29:05:bf:82:1b:09:aa:40:81:14:59:86:90:5d:2c:
bf:61:27:d7:00:76:7f:31:dc:57:7c:a2:a5:e7:28:45:d5:95:
2a:1f:ee:24:26:45:93:6a:58:b9:a4:0a:2c:87:6f:06:dc:77:
33:c8:c5:54:96:6e:43:8d:30:b8:a3:f5:b8:7f:16:62:8a:81:
0b:8d:7a:7d:6a:ab:cb:06:f1:eb:b7:43:7b:2f:cc:01:6b:67:
69:e1:ce:59:22:ec:b4:41:62:bf:df:f3:bf:f5:34:7d:f7:af:
a4:e9:8d:9c:4f:5f:e1:b3:cb:b6:41:d3:6e:98:36:e5:87:4d:
4a:d6:2a:32:1c:29:c0:70:1e:fb:68:34:e3:0c:f5:a0:b7:d3:
5d:03:71:84:94:51:d2:cf:46:08:67:7e:e1:0d:d2:82:30:17:
8f:92:90:79:f9:b5:e5:f4:38:54:38:26:a1:68:28:18:71:19:
3c:a0:6d:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIp/doAeL2ATzrG+V6b7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz
MjQ1MzMwHhcNMjYwNTEyMTcwMTA4WhcNMjYwNTEzMTcwMTA4WjAzMTEwLwYDVQQD
EyhjNDA4NGJkNTQxNzRiZWNhMGMxMTUyZDUwY2RjNTdiNGQ0NWNiODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kluEGd6H4aO/WVR3NqH3VZLTuko
ckX6BGb6O7UE96GkLY6uzJymaZoASyRgzvPqPUYspflHtrKrykdfE2zuSGWbd62W
xRYopD+LlE6+UqT4VUb/sQ9T4zcdgnr3Xie1A0aiQg6EOBsBMZTquwCorfLh4efL
59diCRnNULEvWgpVKrC3v1rtJA0jY2Ds2k/muXFA/7/9vc7Vk4CgkRLn7HR5h1Bz
LxQImOvnoaMxa032L202RqC2GyoIJGtfqzqLrmmEqtD3QLws0nCk1dKMFhC+eFW0
e38NFBzd9tvr1lZOxBT1zBC5N8TlzDcQQofT7CMbJYCOy4yWR7xOZ2tw6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQIS9VBdL7KDBFS1QzcV7TUXLhFMB8GA1UdIwQY
MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct
NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4
LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0lTRYHKe
m0laaPacT02/vJKYsf2Vk/L0EJdCx5D5WmguTSPzB2Cnq5eRV1IGADbpItUqtzue
2I9XO4vo/DD2qU2DhIexzKHIyMojKQW/ghsJqkCBFFmGkF0sv2En1wB2fzHcV3yi
pecoRdWVKh/uJCZFk2pYuaQKLIdvBtx3M8jFVJZuQ40wuKP1uH8WYoqBC416fWqr
ywbx67dDey/MAWtnaeHOWSLstEFiv9/zv/U0ffevpOmNnE9f4bPLtkHTbpg25YdN
StYqMhwpwHAe+2g04wz1oLfTXQNxhJRR0s9GCGd+4Q3SgjAXj5KQefm15fQ4VDgm
oWgoGHEZPKBtFQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:25:38 2026 by rpki-client