Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: FmCAxM0gbl0DPGjt+Mmx2QM4ZWL3uhbbaCbq6d7B714=
Subject key identifier: 2A:7E:C1:79:4B:83:C3:19:47:FA:72:D2:93:E4:B6:7D:01:76:F0:81
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 01A0CAB5187CBDADEF72449305146E192A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 06AC
Signing time: Tue 22 Sep 2026 20:01:00 +0000
Manifest this update: Tue 22 Sep 2026 20:01:00 +0000
Manifest next update: Wed 23 Sep 2026 20:01:00 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: OWvvn1kdmlpBLj2nltaOkaubLhQAC1HF/x6IAELkzgc=)
2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:18:7c:bd:ad:ef:72:44:93:05:14:6e:19:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Sep 22 20:01:00 2026 GMT
Not After : Sep 23 20:01:00 2026 GMT
Subject: CN=2a7ec1794b83c31947fa72d293e4b67d0176f081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:c9:0d:4c:4e:b3:bb:6b:a7:45:c1:b6:b3:
79:3a:03:e1:f7:2a:e4:48:0a:97:0f:c5:b4:12:a3:
60:26:89:9c:f0:ff:b5:06:62:17:d1:99:c6:fd:ac:
87:66:03:e0:24:1c:91:40:bf:d0:6d:7c:cf:61:37:
bd:54:77:06:a6:54:6c:7f:81:0c:8c:c7:6a:26:20:
96:17:ec:ea:32:4e:d8:81:cf:87:28:16:8e:79:db:
5c:ee:81:aa:1f:01:72:48:f1:59:12:db:9b:6d:08:
da:1b:d3:0a:b6:e2:2f:95:2b:47:75:f3:23:74:90:
85:de:49:3b:8c:a2:7e:1f:69:e7:05:26:51:69:bc:
36:97:3e:c0:bd:98:f5:c1:64:a5:65:e7:5b:7b:30:
b2:a2:46:7d:b8:09:40:4a:4d:19:98:aa:c7:86:97:
57:89:55:3c:e2:a7:cf:f1:86:37:90:c4:3e:47:8e:
2a:d2:81:43:d3:4a:f5:74:9b:d3:b5:bb:55:d4:29:
9c:5c:e4:9b:5f:0d:c4:f2:e3:d8:0d:cd:51:72:63:
fd:7e:d6:1c:53:13:55:76:ad:67:e8:37:dc:3f:07:
4e:06:8e:e2:f3:de:cc:e2:37:89:4a:b0:8b:b9:85:
93:b0:a4:9a:dc:74:eb:f5:03:2c:71:31:d1:ae:d2:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:C1:79:4B:83:C3:19:47:FA:72:D2:93:E4:B6:7D:01:76:F0:81
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:4a:a0:4d:20:a3:17:a2:68:03:a4:e4:e4:0e:df:c4:07:
b8:10:8f:f8:c7:5e:d7:aa:16:3b:99:29:5a:62:72:77:09:b7:
13:ed:dd:69:71:3d:8e:0d:ee:6f:fa:dd:cf:45:51:6c:6b:99:
d5:af:b3:1e:38:6b:cd:0d:0a:ab:af:14:bd:7f:62:96:ce:16:
a1:d8:7b:74:db:96:c7:75:34:c2:47:9c:f4:03:a5:ef:85:72:
22:87:3c:8f:be:23:f9:86:fa:ac:1f:21:69:05:17:35:d6:7d:
fd:21:06:7c:ab:55:4e:48:b7:2c:42:5f:2b:ed:a7:8c:35:90:
c4:5e:36:9f:12:65:22:87:70:15:7b:14:5f:ed:5c:9b:39:4a:
03:46:fe:4d:7b:40:57:f6:b8:d1:20:60:71:8b:67:5f:e2:e8:
eb:70:48:a5:81:55:4f:a6:4f:aa:a4:5b:12:00:2f:f0:01:f9:
b1:0e:1a:98:ff:91:fc:39:b8:9d:63:be:7a:a9:e8:9d:8c:3c:
90:03:13:c8:b1:58:ef:64:27:09:10:c3:86:79:7b:6c:cc:af:
60:92:d5:7c:23:9d:ea:ba:90:bb:ac:b5:79:b0:88:d3:2f:49:
33:f2:cc:95:d2:ba:bd:f1:8e:83:3f:50:c6:1f:d1:51:f0:7f:
2b:b9:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:59:35 2026 by rpki-client