Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: aGpj6HKkvMKaYiVkowS7ya5e3FdDn+U/yNFQI0YmNjs=
Subject key identifier: 82:04:85:39:C7:12:22:28:4F:1A:6B:AD:FD:BF:5F:93:2A:5B:CD:69
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019D27724BA1D78C7ADC78B4A7E2414CFFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 1240
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: iPm7HRxubf2k70cKkvOTtBJaDCH4ref6t7cQUA/jFWc=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4b:a1:d7:8c:7a:dc:78:b4:a7:e2:41:4c:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=82048539c71222284f1a6badfdbf5f932a5bcd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:d9:9c:50:4c:61:2e:53:8a:b3:97:60:e9:
75:2e:5f:5c:eb:2b:23:24:6e:e4:b5:77:23:93:36:
c7:d0:8c:31:66:b2:47:3a:a6:59:7e:1c:35:0a:1a:
12:ee:8e:72:3c:d7:05:67:63:34:99:75:28:78:f4:
0a:9c:96:a9:d0:25:7e:e8:49:f9:b8:f0:5d:a8:45:
8b:16:79:40:54:d2:d9:00:46:3c:1c:cf:66:e8:14:
76:4a:37:d2:7f:ec:87:0a:98:1b:34:5c:c2:19:9f:
a1:c2:71:79:f3:c6:c4:37:24:2f:59:2f:6b:7f:41:
ef:bc:55:6c:3e:86:ce:13:5e:a6:18:ec:5c:88:58:
1b:0c:70:f0:55:2b:b8:8e:e0:c6:96:b4:e2:d2:14:
09:53:bb:05:cd:be:b5:1c:1c:0b:ea:81:5c:51:e5:
5f:b6:e3:2e:22:cf:bb:3f:69:80:ec:e9:8b:cf:3d:
63:d3:40:69:54:f9:7d:f7:55:22:47:b9:c8:44:1a:
47:db:7a:3b:dc:a1:88:c0:64:c0:81:c2:17:bf:49:
2c:e5:86:92:e0:fa:02:ba:09:85:76:10:fb:dc:7e:
43:d4:c5:13:b9:36:8b:22:e9:17:9e:9d:bc:a1:b2:
bd:9e:a6:f9:55:c6:61:d3:11:87:52:5c:22:1e:06:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:85:39:C7:12:22:28:4F:1A:6B:AD:FD:BF:5F:93:2A:5B:CD:69
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:80:58:92:6a:7e:9c:b0:22:60:97:88:d7:40:a0:12:7c:be:
46:db:d1:cc:a6:d1:11:64:a9:ec:71:bb:38:74:1b:00:3d:33:
0e:cf:36:99:d9:9e:7a:dd:ca:91:95:9a:68:d2:ef:06:e0:55:
9a:2a:0c:78:2c:21:81:f6:8e:6e:36:32:be:e2:34:d7:b4:d6:
2b:25:17:55:39:94:1f:86:29:c5:70:a2:9b:b7:29:f2:5b:3e:
32:66:70:dd:ca:bc:2c:c9:9f:30:a7:6f:bb:ec:2c:24:c9:75:
43:ec:79:c1:05:d7:bc:c6:50:f4:be:24:27:30:cd:d2:33:b2:
bb:01:61:52:6e:35:70:70:22:c8:b2:b1:b0:bf:36:09:00:df:
29:fd:09:1c:1a:7e:0b:84:f2:0b:7e:34:df:6f:a4:89:aa:1a:
30:35:ce:f5:e1:0c:3b:be:2e:95:70:03:9c:b8:cd:89:e1:0d:
38:89:d9:91:ab:98:12:4e:34:eb:ff:c9:68:98:ef:ff:84:ec:
a8:a4:b9:c6:b5:0f:ab:67:4b:b7:a0:37:bd:d5:9b:41:53:fc:
2d:28:cf:0b:e2:b8:9d:54:7e:8c:66:19:df:d9:49:6d:6c:62:
30:ab:7a:fc:e0:77:a9:47:57:ee:1b:d5:92:3b:b3:d9:5f:a5:
06:e5:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:32 2026 by rpki-client