Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: Ed9m/vOaTOMfX7/UT5tSmUNMndV2JZOAs7GyXhzhFss=
Subject key identifier: 54:99:4C:DD:9D:47:D9:7C:0A:51:89:81:41:71:80:88:38:2E:92:F0
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01A0E173C820DAB6CEE4FFFC814816FBC61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 142E
Signing time: Sun 27 Sep 2026 06:00:56 +0000
Manifest this update: Sun 27 Sep 2026 06:00:56 +0000
Manifest next update: Mon 28 Sep 2026 06:00:56 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: VthRf9Ty4lrfUkszm0db9unFcvRt3LKsAsauhH3yfV0=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:c8:20:da:b6:ce:e4:ff:fc:81:48:16:fb:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Sep 27 06:00:56 2026 GMT
Not After : Sep 28 06:00:56 2026 GMT
Subject: CN=54994cdd9d47d97c0a51898141718088382e92f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:a8:f2:8c:12:c5:84:7e:61:cf:d9:28:5c:
72:a7:41:ab:7f:1d:59:d2:0a:5d:c9:03:88:ea:3b:
2d:f2:d0:ab:8d:ed:73:71:86:4c:1b:fe:19:92:b2:
99:06:a0:c8:c6:ed:58:d0:7a:ab:4c:23:6d:5f:93:
c5:9a:28:7b:84:29:fd:00:f7:fe:68:a7:94:f3:16:
57:ba:27:b4:dc:79:ac:37:22:dc:9e:b5:fd:70:c2:
fb:7e:23:3d:86:f8:0b:7e:98:51:d9:57:f4:50:26:
27:bf:40:6b:56:5b:6f:a4:c5:38:a2:ea:91:b4:36:
af:1e:fb:c9:82:2b:b7:8d:43:9a:11:c1:17:19:40:
40:d5:56:64:47:7b:3b:86:5d:c8:ac:f3:75:fa:5a:
45:ee:30:e9:5d:00:13:a3:d5:fd:b1:c1:81:33:56:
34:93:73:a5:3b:6a:f4:f7:fc:e6:a2:06:43:4e:5e:
ce:bd:c4:3d:cf:3e:0d:47:bd:07:14:af:bb:68:91:
be:b6:91:6d:7c:a1:cf:cd:f5:85:3f:cf:8b:aa:72:
6c:aa:16:c1:5d:8a:18:b1:b2:19:13:15:97:2e:de:
ea:78:aa:5b:59:b7:9c:ba:6d:c6:75:df:be:61:a1:
6c:2b:57:5c:76:20:af:5e:69:5b:c2:64:90:dd:b6:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:4C:DD:9D:47:D9:7C:0A:51:89:81:41:71:80:88:38:2E:92:F0
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6d:00:10:39:9a:b5:98:56:ab:e4:fa:98:89:eb:5a:22:40:
9d:2f:c4:51:bb:de:2f:d5:33:07:34:2a:79:3a:68:8e:c2:1d:
ed:dc:32:9d:68:d7:fa:4d:51:8d:8c:27:f7:8d:e7:0e:92:a1:
9c:fd:6b:5a:02:fa:23:20:69:a6:64:3a:78:e0:f7:5c:86:6d:
45:a4:31:bd:3d:53:8c:49:e3:ff:79:25:0f:20:9b:20:a7:2f:
4d:80:24:38:d9:94:a1:96:bd:af:a1:3e:f7:da:c7:6e:86:43:
f4:62:0d:13:1b:11:4a:14:ea:d8:2d:7b:97:c6:e0:b5:2e:7c:
ba:1f:c6:03:83:1b:23:0c:40:32:72:91:bb:6a:32:13:e2:c3:
b8:9c:b1:c4:e0:4c:df:c6:cd:7a:e4:9d:4e:b3:96:15:e9:0d:
eb:28:63:8b:3c:5e:da:39:be:c2:9e:ff:61:12:01:8f:68:a0:
77:8c:86:5f:1f:69:07:63:0f:47:81:9c:0d:43:c7:eb:5b:cd:
db:3d:20:54:4c:a4:cd:5f:74:7a:7e:b5:3b:69:95:71:37:a8:
23:d9:63:35:e8:9e:16:d1:06:bc:67:e6:f4:e5:22:ba:3b:e2:
3d:c6:5b:55:df:cc:57:8d:75:69:80:3d:8b:6c:7b:56:cd:de:
13:a3:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:36:07 2026 by rpki-client