Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: pt0QIXCGwHGlth60VmOZbMZ+9y8voiFxXikNkMYRYaM=
Subject key identifier: F5:B7:67:7B:06:6B:08:5D:28:93:5B:37:3F:0F:ED:D8:E6:93:3C:F8
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 019E209205EB700DC64C35B3517B41170AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 12C1
Signing time: Wed 13 May 2026 09:01:41 +0000
Manifest this update: Wed 13 May 2026 09:01:41 +0000
Manifest next update: Thu 14 May 2026 09:01:41 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: fOlyMw7ASwtuIpMF9UF7SYWl+1o2Wht1rJmSyw4YOLk=)
2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:05:eb:70:0d:c6:4c:35:b3:51:7b:41:17:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: May 13 09:01:41 2026 GMT
Not After : May 14 09:01:41 2026 GMT
Subject: CN=f5b7677b066b085d28935b373f0fedd8e6933cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:55:c0:62:f0:5a:44:ab:4c:d8:79:5e:95:
db:3f:58:08:6d:dc:e4:86:ea:92:f2:f5:83:e9:64:
e9:86:60:f6:7a:36:d5:95:5b:1a:b0:fd:5e:81:7f:
4f:ea:fb:df:c3:a6:91:dc:c9:f9:2d:f7:fe:be:7c:
e5:67:e7:b5:6f:73:fa:e2:81:24:f5:ff:79:38:a7:
9a:d6:a0:08:9b:f5:79:29:a4:39:70:00:1f:04:18:
f3:a1:21:60:ae:d2:bd:58:8d:ee:08:0b:bd:cb:1c:
29:8e:d4:79:89:9c:dc:f6:1a:d7:c0:40:f4:c6:ed:
92:19:c4:c4:fe:f7:a3:f1:32:bf:a4:3a:ed:1d:91:
a0:da:18:74:9d:07:ad:82:ad:55:32:5f:fd:b1:99:
77:8c:3c:36:83:38:e9:0e:df:c0:f6:6f:ed:01:e9:
c0:2d:99:73:e0:55:ba:b5:87:71:29:04:ab:e1:8e:
f3:62:5c:d8:1e:69:3c:75:32:f4:75:9c:61:a6:4d:
e4:c2:88:e8:62:21:77:67:03:78:45:5c:ef:ed:39:
2f:12:2d:4d:96:c1:0b:d6:24:ec:c6:70:4b:e8:ce:
67:44:20:a0:a5:bb:2c:15:59:83:9a:3c:26:87:f6:
9a:df:26:02:0f:66:35:c7:b9:26:a8:04:23:f9:d1:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B7:67:7B:06:6B:08:5D:28:93:5B:37:3F:0F:ED:D8:E6:93:3C:F8
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0b:6c:1d:71:60:ee:cb:61:0e:ed:0a:61:1e:22:7e:d5:ab:
32:65:04:97:23:30:c3:6a:3f:f9:0e:49:8d:d1:34:cd:9f:33:
61:45:c8:28:de:2a:e6:13:f9:fa:1d:90:f6:e5:db:2e:51:16:
b3:b8:34:7f:52:04:84:1e:32:a3:1c:94:03:50:d5:2f:1c:d0:
e3:40:79:49:36:9a:96:15:bf:0a:c5:f2:f3:a7:32:91:f0:b6:
26:e3:be:96:d0:ee:81:f0:e7:fc:2c:49:66:e7:8e:aa:9e:07:
d5:3c:39:18:e9:dd:95:58:02:ff:a0:39:2e:39:05:54:72:de:
0a:bc:3a:c5:2b:df:e1:7f:da:a3:40:13:5b:54:0d:dc:3a:0a:
87:74:5c:d6:4f:07:5c:ae:75:b9:5c:24:ff:79:39:29:a1:9c:
d7:4a:99:8c:a3:39:0c:b7:f5:c5:cd:75:a4:5a:b4:76:d6:8f:
5c:2a:36:8d:83:9b:f8:4c:62:87:0f:73:e6:6f:e4:a1:fb:45:
3f:cd:e5:7c:d8:1a:f9:3a:c3:dd:66:0b:4f:bd:bf:2d:c7:95:
69:9a:b1:24:72:95:82:a0:10:46:cd:de:bf:2e:c6:e9:ad:cd:
b5:21:0d:d2:8d:40:a5:08:6e:02:9b:0d:22:91:e8:9f:4f:89:
12:de:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:54 2026 by rpki-client