Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: IWexN6hjP3qrEEE3sZmull7LpGGyZel8U582q6lJ93o=
Subject key identifier: 42:34:92:B4:AC:1C:BB:DA:CE:36:D4:F2:07:C7:7A:EE:DF:73:8A:38
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019F935AEE0982882B51AE54C5F3CE059719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1381
Signing time: Fri 24 Jul 2026 09:00:37 +0000
Manifest this update: Fri 24 Jul 2026 09:00:37 +0000
Manifest next update: Sat 25 Jul 2026 09:00:37 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: /Ltk1xWa9XLMKTyLqA5bwUtSaE5GpH7Nko4f8cOiG8w=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:ee:09:82:88:2b:51:ae:54:c5:f3:ce:05:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jul 24 09:00:37 2026 GMT
Not After : Jul 25 09:00:37 2026 GMT
Subject: CN=423492b4ac1cbbdace36d4f207c77aeedf738a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:c8:bd:b2:13:0a:3f:3b:77:4d:cc:f3:cb:
8b:b6:28:e8:2d:ac:7b:ab:f3:61:45:61:1b:a2:c0:
b5:37:07:b0:e2:ad:40:04:dd:54:09:b9:8b:20:f8:
e1:c2:c5:f7:55:3e:a5:dc:eb:64:37:d4:f0:79:d9:
0d:f7:98:14:9c:55:12:cd:7b:40:84:83:d6:c8:18:
82:57:0f:ef:8e:bd:fd:32:5e:ca:2b:8d:e9:64:ee:
29:2a:22:40:b3:f2:56:69:61:c2:74:d3:54:fb:3a:
94:67:63:19:cf:03:58:1d:85:2a:66:24:1b:2c:0d:
22:0f:55:08:ca:95:d0:d2:1e:83:80:2f:59:a3:f3:
96:2f:2a:15:dd:ed:ab:bc:e2:79:7e:83:ef:eb:8b:
4d:89:68:c1:b7:3b:41:9f:e4:23:d2:9e:0e:8b:b1:
3f:0b:d4:72:a8:08:8e:72:01:ee:6f:e3:2b:f5:da:
fd:a4:18:19:83:f7:dd:26:13:53:5d:23:42:e1:50:
3d:53:28:4b:28:b2:9d:3d:2b:66:01:84:e6:ef:7f:
51:ae:0e:e9:b9:47:f6:f6:07:66:47:49:66:83:a0:
a6:38:42:60:0d:dc:a1:c6:b9:c1:90:8b:f8:12:47:
c4:ba:0a:51:07:a2:5d:a0:2a:02:24:ce:fb:82:d4:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:92:B4:AC:1C:BB:DA:CE:36:D4:F2:07:C7:7A:EE:DF:73:8A:38
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:23:ca:c2:66:b6:f7:5a:3a:fc:c6:46:6b:50:21:80:c5:cc:
fe:67:68:79:86:f9:60:be:6f:6c:7b:2f:38:3c:6a:c1:29:fc:
1a:aa:12:67:0d:d7:33:f3:c6:bb:e6:3b:81:bb:ce:71:a4:46:
ec:2b:db:c1:36:9c:74:72:d5:90:6c:0e:7d:26:cb:49:1d:fc:
35:0a:d4:69:e2:be:d8:e6:da:c4:bb:b2:90:63:c9:be:0d:f6:
56:4a:75:cd:80:24:a4:6a:01:8d:2c:0b:77:ef:df:cf:f7:90:
bc:67:b3:d7:30:80:5a:45:34:6c:7d:36:a7:82:ef:04:3d:32:
c9:b2:d0:7d:b3:0e:58:eb:08:f1:9d:2f:e1:13:4e:79:de:f1:
6d:94:22:67:a8:79:fb:d6:37:8c:fd:0d:85:3b:e2:9f:4c:dd:
03:60:37:3d:46:57:cc:2f:82:17:ca:7f:e8:03:e3:60:f7:af:
0c:90:44:2b:42:01:9e:d8:38:e8:12:df:76:f8:c7:d4:e3:b5:
5e:9c:b6:0c:a0:9d:17:22:05:00:d7:1c:0d:a1:14:2f:a6:8a:
98:73:53:cc:6a:cf:af:e9:47:e3:69:85:57:15:7c:df:c6:e8:
3c:b1:34:cf:19:af:11:b5:ee:2f:64:11:7f:54:6c:51:c9:f9:
e5:5f:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:31:17 2026 by rpki-client